Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
File: raXVKzyodFRXW2W3IO74GiYqXzo.mft (raw, json)
Hash identifier: 0gMuaPtRAxuZ/DHtjwlcwVYwns7JNm80KVfvHFG62JE=
Subject key identifier: EB:A6:E8:F7:CF:8C:3A:85:5E:27:DB:CB:22:5B:D2:13:D0:43:AE:50
Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
Certificate issuer: /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Certificate serial: 01A0F455ECA45E07638DED658EF34E9E3433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
Manifest number: 13BD
Signing time: Wed 30 Sep 2026 22:01:06 +0000
Manifest this update: Wed 30 Sep 2026 22:01:06 +0000
Manifest next update: Thu 01 Oct 2026 22:01:06 +0000
Files and hashes: 1: rFQ04GqSU9DTULqn8_NPkqKbWSc.roa (hash: 8XgwklO153GBrJc2s4PKkyGugWT/fq0MyA5r4Aq8lKY=)
2: raXVKzyodFRXW2W3IO74GiYqXzo.crl (hash: END6HEyiGTRjj5MQ2qOfk1s9tWRwFkjmjhCoucu3heA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:55:ec:a4:5e:07:63:8d:ed:65:8e:f3:4e:9e:34:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Validity
Not Before: Sep 30 22:01:06 2026 GMT
Not After : Oct 1 22:01:06 2026 GMT
Subject: CN=eba6e8f7cf8c3a855e27dbcb225bd213d043ae50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0b:95:fc:8d:30:e2:00:4d:74:ea:67:a2:ec:
b6:b6:d4:27:cb:aa:dd:78:aa:a8:ac:c5:30:69:8a:
4c:2d:49:82:53:60:39:dc:13:32:43:0b:62:e5:3b:
18:4a:a1:85:f2:ff:17:ed:8c:59:75:90:d4:ea:16:
90:d0:3c:60:2b:6e:41:9c:5a:5d:df:15:2d:37:e7:
25:12:9b:f0:b2:fb:5f:61:f5:6e:e8:50:93:84:c0:
99:79:19:97:ea:39:fd:f1:1e:ec:99:61:cc:cf:52:
a3:4d:fd:3b:50:7b:49:5f:fa:d9:8e:15:19:9e:c6:
0e:9f:55:1d:7e:9e:6d:f5:68:14:5f:96:57:ee:a5:
2c:c0:62:99:8c:08:3b:61:5b:19:aa:e6:db:86:5d:
a2:06:f4:bd:3c:0d:a3:a2:67:ca:48:f5:19:77:01:
65:9a:d4:bd:aa:f7:2b:b0:fe:81:dd:fc:69:1f:7b:
0c:9b:80:90:2b:df:17:d4:4f:dd:0f:a2:b4:9d:72:
b0:76:7c:76:ef:d8:18:a4:0b:69:04:24:68:ff:48:
31:10:82:0b:ed:b0:bc:0c:75:e5:8f:20:73:71:8a:
21:22:49:38:78:d3:52:db:9e:fb:bc:09:83:e9:3e:
db:f6:00:22:d9:cc:17:fb:bd:5a:bc:fe:12:7a:cc:
86:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A6:E8:F7:CF:8C:3A:85:5E:27:DB:CB:22:5B:D2:13:D0:43:AE:50
X509v3 Authority Key Identifier:
keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fd:bb:88:10:7c:2f:4b:f8:a7:c2:cf:ef:72:8b:dd:38:16:
44:e3:6b:5a:6d:9b:27:49:c5:b3:87:4b:2c:10:89:11:c8:93:
0f:c8:fd:77:04:9f:73:73:43:b4:be:70:40:4d:47:e3:db:47:
72:dc:e0:e6:de:c0:3e:f8:02:29:2d:8e:d8:58:3d:c1:2a:b2:
48:f2:bd:e1:39:19:a4:bd:58:4c:f2:aa:24:f1:94:5e:59:8a:
15:60:cc:0f:d4:df:47:d9:8b:08:52:24:dc:09:62:46:35:be:
85:a7:d5:87:89:f9:9e:2e:d8:3b:01:4f:37:20:ce:3e:1a:80:
bb:08:88:e1:ad:94:72:40:f4:81:aa:f3:ad:b8:d8:9e:7e:78:
27:43:54:4a:d4:00:6b:fa:3f:73:70:78:16:23:88:10:fc:d9:
72:e4:3a:b6:31:41:7f:04:3b:2e:4c:cd:e9:62:f1:96:59:ae:
11:3d:1d:83:93:df:2f:c1:e1:8e:c5:ad:9d:4b:cf:6b:79:d9:
ae:0c:5c:8c:26:54:5c:21:e4:e9:57:71:28:b9:27:80:20:b9:
88:50:14:06:fb:76:13:91:37:65:bf:97:11:26:b8:6f:47:8f:
f9:cf:53:02:df:95:10:ad:47:33:8f:0c:f6:09:83:86:44:3c:
3c:c8:76:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 07:12:27 2026 by rpki-client