Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
File: RA6IwxN_ipFffaG1wDQcoYwsI0w.mft (raw, json)
Hash identifier: ilsugyb7XyTd6JeV0N3onBrxOHnL9bM9HZtHcAvg5Cg=
Subject key identifier: 32:A4:25:56:49:D5:59:7A:6A:88:2E:70:A5:39:1C:CB:0C:1B:02:47
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Certificate issuer: /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial: 019E9C60669EDFCBE3AF21075FC4D9C09C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
Manifest number: 046D
Signing time: Sat 06 Jun 2026 10:00:23 +0000
Manifest this update: Sat 06 Jun 2026 10:00:23 +0000
Manifest next update: Sun 07 Jun 2026 10:00:23 +0000
Files and hashes: 1: RA6IwxN_ipFffaG1wDQcoYwsI0w.crl (hash: phui9WSkhUSjI2/MTvqLR+x4zFeBz0rwxI76jBpuVNY=)
2: dPag7xFPzczRHzq2B8X2iWcIGDY.roa (hash: pRxwNcwkJ3uthH1oUSTy8IHhpLZnDFgmu09LUeEQ/AI=)
3: nPQEua1epz0cHI9DgWit1pT4HvM.roa (hash: 2TASnepXL6UFnC6iWgWqqNkaqCw4gJaGRhAGHMOAfig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:60:66:9e:df:cb:e3:af:21:07:5f:c4:d9:c0:9c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Validity
Not Before: Jun 6 10:00:23 2026 GMT
Not After : Jun 7 10:00:23 2026 GMT
Subject: CN=32a4255649d5597a6a882e70a5391ccb0c1b0247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8a:45:ec:11:64:75:eb:21:e6:57:c0:3a:4a:
41:b2:e4:9f:92:fc:65:7d:48:b1:7c:0a:77:5f:ed:
36:8a:ea:52:26:7c:82:f1:da:35:0d:ad:3a:1d:33:
ef:f2:d3:7f:87:72:09:79:bb:63:ea:0e:2b:5a:ef:
33:d1:7c:6c:cb:83:9a:6c:3e:2f:af:89:73:26:1d:
e3:11:9e:45:1c:9a:22:63:7f:4a:8f:fc:6e:93:51:
ea:64:18:45:47:10:c8:59:23:a0:57:92:6c:b5:83:
9d:c0:c6:32:02:8a:c5:09:ee:82:57:21:f7:5b:16:
20:cf:fd:09:af:21:89:30:54:ac:d6:c7:9f:c7:ca:
19:98:4a:b2:1d:c1:37:1c:04:c8:38:31:94:93:aa:
01:87:dc:6e:1d:30:6b:5f:a8:f4:bf:83:2d:de:46:
0d:5f:17:31:50:35:c0:2a:17:59:b6:4d:f0:17:c5:
dc:32:3d:f4:77:7b:be:0f:bc:01:16:c2:f7:16:ea:
d7:eb:69:62:8d:ba:d5:6b:ac:78:b5:08:bb:b9:8c:
bf:5a:d7:3e:84:58:db:54:c8:f1:b4:10:62:b9:29:
c4:0d:b4:28:f2:91:3f:87:b1:00:8c:a3:71:13:8f:
3a:b5:6d:39:fe:90:5a:76:5d:87:29:97:59:80:04:
e8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A4:25:56:49:D5:59:7A:6A:88:2E:70:A5:39:1C:CB:0C:1B:02:47
X509v3 Authority Key Identifier:
keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ac:2e:f9:87:b8:6d:35:dd:77:fb:2c:ec:7a:5d:82:a9:5b:
16:df:10:b9:95:12:f0:c6:f2:fe:b3:0c:28:aa:0b:d0:8c:f3:
a9:6e:cb:73:95:6e:d7:d6:46:60:99:45:2e:59:b0:0e:5e:e1:
b7:41:ed:06:e2:3b:e0:25:6d:9d:11:5a:e3:ed:4c:bc:e9:87:
a7:b1:94:d9:dd:0c:af:49:a4:c7:97:bb:64:de:27:0d:89:81:
07:40:d6:fc:29:bc:4d:63:7f:31:9a:1c:a3:fa:c3:c2:4e:92:
dd:f7:39:c5:1e:5f:44:b1:79:ab:de:bc:94:86:4e:81:1e:b3:
27:11:be:3c:61:e1:be:73:0b:4e:33:40:79:f8:dc:8b:75:b9:
43:ff:0e:e0:02:81:a9:61:29:94:c9:91:59:04:1c:d5:e3:29:
a0:d8:d5:ec:4e:3a:df:46:01:92:64:ad:1e:ec:21:7f:61:90:
c0:1e:dd:df:9e:d3:0b:b5:ab:ca:1f:38:ca:bc:be:aa:51:1e:
4c:57:05:7e:d9:32:10:e9:3b:7c:d2:a2:dd:fa:8c:ed:be:47:
b5:26:bb:61:1b:ee:c0:eb:bd:82:2d:e6:34:b9:7c:5a:b0:12:
f6:b5:cc:b4:bd:f7:0e:57:ee:89:8d:6d:14:2c:31:40:3f:e0:
3a:48:c9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:52:37 2026 by rpki-client