Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
File: RA6IwxN_ipFffaG1wDQcoYwsI0w.mft (raw, json)
Hash identifier: CYjvo0AMHrR8oWU0CoWpwrhdROWUAQmutWaM36n4yoc=
Subject key identifier: 57:30:25:A2:FE:24:D7:60:04:FE:21:EF:5D:9E:51:03:FD:E2:16:80
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Certificate issuer: /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial: 019F8BD84AEC3ACB331373AF93E33B62C63E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
Manifest number: 04E9
Signing time: Wed 22 Jul 2026 22:00:35 +0000
Manifest this update: Wed 22 Jul 2026 22:00:35 +0000
Manifest next update: Thu 23 Jul 2026 22:00:35 +0000
Files and hashes: 1: RA6IwxN_ipFffaG1wDQcoYwsI0w.crl (hash: mt0ZuqcD5ibUfqbX9mtQOfwvx2/INwilYsfh03dkNHI=)
2: dPag7xFPzczRHzq2B8X2iWcIGDY.roa (hash: pRxwNcwkJ3uthH1oUSTy8IHhpLZnDFgmu09LUeEQ/AI=)
3: nPQEua1epz0cHI9DgWit1pT4HvM.roa (hash: 2TASnepXL6UFnC6iWgWqqNkaqCw4gJaGRhAGHMOAfig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 20:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:d8:4a:ec:3a:cb:33:13:73:af:93:e3:3b:62:c6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Validity
Not Before: Jul 22 22:00:35 2026 GMT
Not After : Jul 23 22:00:35 2026 GMT
Subject: CN=573025a2fe24d76004fe21ef5d9e5103fde21680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:db:f5:42:a1:5a:24:fd:f4:b6:de:3c:ad:b2:
a8:42:30:ca:6f:48:92:d2:e2:1d:48:1a:8e:c8:03:
ee:74:c5:74:52:0a:e4:10:ee:21:4c:83:c9:f8:89:
50:aa:73:ad:64:99:e2:ef:03:a5:af:cf:9d:4d:91:
02:c9:3c:86:d8:cc:b0:d7:87:2a:34:29:63:fa:63:
e7:e0:9a:e3:b3:db:f9:16:2c:49:70:dd:ac:74:ae:
94:2b:30:69:ed:b2:84:c3:d0:7e:43:31:96:5d:16:
56:22:b0:8a:23:99:84:de:c9:8d:95:6a:64:c8:50:
83:42:fa:2a:a9:ca:ed:a1:26:08:2e:db:43:02:b2:
00:f9:f6:c1:8c:21:e3:1f:f7:e1:a7:75:ef:d2:e6:
f4:3f:f5:81:b5:4a:4c:f6:72:e4:f5:a3:f2:d7:fb:
58:a6:c0:e1:49:45:78:e4:ba:5e:2b:f1:6f:6e:68:
ed:4c:99:f7:42:ef:d5:e4:22:3e:0c:05:a9:dd:a7:
3a:00:30:9f:35:62:93:57:56:95:dc:2f:e0:69:34:
df:88:c9:17:a8:47:04:73:a3:20:13:77:5d:83:02:
14:8d:c3:51:71:c5:ef:a8:e6:9c:14:87:6e:5d:a1:
ec:48:da:be:1b:e8:00:a9:e1:d8:aa:d7:af:5d:5e:
b7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:30:25:A2:FE:24:D7:60:04:FE:21:EF:5D:9E:51:03:FD:E2:16:80
X509v3 Authority Key Identifier:
keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d9:6f:b7:61:13:0d:66:4c:a3:bd:39:4d:db:9c:a1:28:a6:
24:d4:ca:20:33:e1:6f:c9:1f:3e:ba:ec:a4:6c:f2:81:38:fa:
68:64:b2:cc:c4:2b:93:d7:e2:20:a9:0f:e4:7c:b6:58:95:4b:
05:4c:2a:5b:b2:b8:49:f9:95:3e:2a:4c:5d:ec:9e:85:d9:b3:
87:15:a8:26:a6:2a:6f:45:63:8e:fd:75:df:29:ba:25:d5:99:
59:b7:7f:ae:e6:93:b3:81:75:71:0b:54:23:be:82:2f:ea:95:
ae:1e:7d:46:dd:03:24:6c:04:a0:d3:ee:37:d9:6d:8d:02:0b:
af:c0:d8:71:70:fd:60:5b:2a:31:fe:b3:96:88:13:18:25:12:
fb:1c:b3:3d:b2:ca:e2:a1:5a:4d:a5:6e:73:bd:94:90:91:bb:
eb:0c:87:33:f8:46:33:02:64:cc:6f:3f:fa:6b:17:ca:89:40:
4f:2c:d8:22:e9:06:f0:34:45:f5:02:73:1d:9c:91:19:97:e2:
63:6c:d9:1f:22:2e:c0:d6:66:b4:96:14:5d:12:e6:70:83:73:
0e:04:4b:60:7c:3f:9e:aa:c0:3d:40:6c:93:59:67:75:5d:53:
8c:38:a3:67:88:b0:75:ef:3e:9b:f4:b7:ee:f2:63:0b:c4:8c:
74:3e:73:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 03:56:02 2026 by rpki-client