Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
File: rakwWHtP0v73KPBW7KhohCLDuXw.mft (raw, json)
Hash identifier: OtIcUsnaVwyrnH5hQ+WGV4F4UdsyEsRG56LhxDZy3Yo=
Subject key identifier: 2C:48:15:7A:6E:DD:EA:22:9C:09:8A:06:4B:FC:FC:66:E6:AD:5E:26
Authority key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
Certificate issuer: /CN=ada930587b4fd2fef728f056eca8688422c3b97c
Certificate serial: 019D284DF724FB7541B760CD7FEC1A6827B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
Manifest number: 0D56
Signing time: Thu 26 Mar 2026 04:01:31 +0000
Manifest this update: Thu 26 Mar 2026 04:01:31 +0000
Manifest next update: Fri 27 Mar 2026 04:01:31 +0000
Files and hashes: 1: P5elOkBLveGl1Ib_d-hIHalet_Q.roa (hash: yhnDVPZx7UIZ7b78IbUGd3YNtEhVBShWgFfNgBkV6AE=)
2: rakwWHtP0v73KPBW7KhohCLDuXw.crl (hash: UfPes0YLVCJTSNua0eM6JFoVhDg6Nlgk6lQLdpj9bX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:f7:24:fb:75:41:b7:60:cd:7f:ec:1a:68:27:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada930587b4fd2fef728f056eca8688422c3b97c
Validity
Not Before: Mar 26 04:01:31 2026 GMT
Not After : Mar 27 04:01:31 2026 GMT
Subject: CN=2c48157a6eddea229c098a064bfcfc66e6ad5e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:a0:99:ba:53:c3:2d:70:f0:b3:e5:9f:5c:
1d:4d:58:36:ad:fe:83:02:a9:15:fc:82:21:96:3e:
39:43:06:ba:d3:9b:e0:b6:13:7e:3b:75:45:42:66:
f1:df:8d:24:2d:29:02:5b:63:f2:82:96:c2:e4:7c:
c5:68:2e:2a:6c:9c:85:a8:c7:2c:f4:b5:d5:b4:af:
6d:ae:85:d2:5d:dd:cd:20:15:6b:89:73:7f:75:d0:
36:a4:fa:39:15:5b:e4:da:7b:af:ad:30:08:eb:22:
5e:fa:a7:85:be:35:5c:2f:d0:75:d5:a8:0b:62:26:
bc:fc:e0:57:7d:99:99:76:90:e3:83:b4:ba:1e:03:
4f:e6:c1:d5:8e:50:4c:0e:6f:a3:52:50:7f:3a:3f:
f0:0d:15:4b:73:de:1d:24:a3:7a:bd:d2:04:53:48:
d1:27:45:28:4e:13:43:d7:1e:d6:72:19:01:a0:74:
d0:7d:e9:ec:fa:89:02:28:43:f7:cf:04:16:63:8e:
29:73:b9:37:85:32:ce:6e:d8:17:6e:68:bd:93:c9:
1e:3b:bf:9b:51:65:c6:59:6d:5f:ff:2b:0c:70:fd:
23:c2:ca:6f:e0:20:0e:63:e5:9f:d6:be:2f:9c:fa:
88:2a:5c:2e:05:55:43:76:1b:ee:dd:c7:5f:1c:b4:
2a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:48:15:7A:6E:DD:EA:22:9C:09:8A:06:4B:FC:FC:66:E6:AD:5E:26
X509v3 Authority Key Identifier:
keyid:AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2e:eb:1f:03:c8:29:a1:a3:a6:5d:35:b4:4c:64:52:a3:f4:
54:8e:18:87:37:e5:cb:e6:c8:b7:e0:f4:d1:4c:e5:e4:1d:58:
ce:d7:e7:19:d4:11:16:1f:3e:2e:46:1c:19:f3:0e:3a:c3:c1:
83:97:5d:64:d8:4f:32:40:f0:45:6a:06:49:2c:6e:ed:92:b6:
38:2a:f1:74:c5:ad:c1:a2:45:86:68:4c:1d:47:dd:e0:af:23:
7d:64:f3:db:22:2a:9b:d0:11:ed:d9:fb:35:b2:04:90:4c:76:
e0:9c:06:87:e7:61:b5:d6:3a:df:9d:ad:3c:8b:4e:97:6c:a9:
cb:b7:32:1a:05:8d:a0:4b:f6:bb:db:29:af:36:e1:57:a5:10:
16:3b:83:f6:c4:be:dc:48:85:49:0d:74:50:69:d1:64:c7:6b:
c1:46:62:43:11:61:35:57:9c:45:0c:28:f5:3a:17:98:72:07:
34:cb:6b:e7:85:e3:95:05:2c:5b:01:1e:ba:dd:aa:b8:79:18:
06:e8:4e:f6:be:3c:54:99:1d:97:3e:24:b8:26:6f:1c:c8:f9:
ae:63:1a:da:e1:a6:8a:17:a6:e7:24:7b:d1:30:42:d1:53:20:
8f:85:34:87:f7:90:da:31:7b:50:bf:af:33:fd:76:07:ae:e8:
ee:f8:a0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:40:31 2026 by rpki-client