Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
File: RA6IwxN_ipFffaG1wDQcoYwsI0w.mft (raw, json)
Hash identifier: PjFS8MkeTFmklUWpCAHA4ChX4HeVebE0uNYb+tZ9HxM=
Subject key identifier: 96:A2:16:8C:11:01:76:08:1D:B5:90:18:EB:10:71:3D:46:ED:C0:41
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Certificate issuer: /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial: 019CC899CB0BCFC5D5C7B71CEAA21DFFA511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
Manifest number: 0379
Signing time: Sat 07 Mar 2026 14:00:47 +0000
Manifest this update: Sat 07 Mar 2026 14:00:47 +0000
Manifest next update: Sun 08 Mar 2026 14:00:47 +0000
Files and hashes: 1: DhnVxA5epBkWnt3PDulS5ypiRRE.roa (hash: cV+0Z4XARQ4usZE3nfMuQg0VGiGEUn16U9an0D+YjNU=)
2: RA6IwxN_ipFffaG1wDQcoYwsI0w.crl (hash: 4EeG1LpQCGuBW9lLxrzopMW0bJNq1YqMDYtftjkKsz0=)
3: nPQEua1epz0cHI9DgWit1pT4HvM.roa (hash: 2TASnepXL6UFnC6iWgWqqNkaqCw4gJaGRhAGHMOAfig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:99:cb:0b:cf:c5:d5:c7:b7:1c:ea:a2:1d:ff:a5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Validity
Not Before: Mar 7 14:00:47 2026 GMT
Not After : Mar 8 14:00:47 2026 GMT
Subject: CN=96a2168c110176081db59018eb10713d46edc041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:08:35:9c:f5:ad:6c:12:92:0d:82:05:6d:ee:
ef:34:c5:60:23:d4:da:ff:a0:1e:bb:a6:7f:a0:18:
44:e9:fc:f3:c8:d9:88:55:5e:d8:74:d0:14:0c:44:
4a:cc:86:e5:df:9a:81:12:6b:36:17:f3:02:b5:cc:
52:f0:29:23:0a:b0:c6:e5:44:d5:0f:62:96:ea:f6:
da:1f:91:de:ef:eb:c4:d4:68:9d:79:bb:f1:26:58:
8e:a6:6b:c9:2b:69:c8:58:d0:3a:b1:20:e5:4e:04:
6d:54:c0:4f:54:3b:54:2b:bb:d6:1a:50:77:c5:4c:
87:6d:a0:d3:0b:aa:07:d2:0d:86:d2:38:91:f9:bb:
29:00:c2:74:3f:bc:32:da:26:6d:cb:6c:c0:69:7d:
ea:96:65:4a:1b:f1:5f:b5:18:8d:3a:b2:f1:ce:78:
af:cd:42:c1:c0:f4:44:af:f9:e9:df:c9:2b:64:82:
aa:3d:7d:85:83:23:0a:77:9a:30:06:b5:e9:3a:a7:
98:62:ec:6e:a6:67:5b:d3:5c:f8:21:66:0d:3c:8c:
a7:98:09:82:d5:8e:3d:9e:63:eb:c0:56:1c:aa:ff:
10:58:1b:86:2d:16:b9:39:f8:25:db:f0:51:f2:67:
c6:21:cb:f3:57:f8:9b:52:e0:dc:d5:71:b3:2f:6a:
08:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A2:16:8C:11:01:76:08:1D:B5:90:18:EB:10:71:3D:46:ED:C0:41
X509v3 Authority Key Identifier:
keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:50:6c:0a:cb:5a:8e:b5:da:e9:41:57:d7:81:d6:7c:28:92:
eb:e8:2a:1e:c8:fd:6d:b9:ae:5d:5f:25:af:88:3f:09:48:04:
5e:73:d8:53:68:8c:33:09:a6:fd:ad:ef:d0:f0:64:7f:9f:a7:
7f:4b:55:50:72:be:81:7e:83:65:d5:81:02:83:92:11:94:54:
54:fa:6a:77:27:8e:e0:00:a0:d6:63:b7:7c:e9:77:2b:f0:f1:
75:d8:79:39:b6:db:28:b2:10:93:94:c1:f4:e5:90:d9:29:1f:
69:b7:ed:ab:96:24:ad:cb:06:50:14:25:dd:e6:92:c5:6f:b0:
0c:60:45:b0:bb:c6:fb:6f:ee:df:79:d5:10:3e:76:bc:61:7e:
3a:51:fd:ec:2e:2f:a4:e7:6c:99:1f:b0:63:cc:36:eb:36:d9:
4a:e3:d6:d6:62:d0:01:96:13:76:ae:05:0d:f8:ad:6a:98:51:
a7:2f:d8:94:a7:e6:42:91:0c:86:e2:3a:b1:f4:be:60:a7:bd:
74:55:7b:87:95:d1:c6:12:e1:a0:6d:e0:d5:94:6a:ca:b6:dc:
fd:c6:23:8a:40:79:f2:d9:ac:8e:90:f1:84:b1:be:38:1f:d2:
07:1c:0f:4e:10:32:90:69:b7:ef:d7:45:a4:5e:10:2e:87:81:
fd:3c:d2:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzImcsLz8XVx7cc6qId/6URMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MGU4OGMzMTM3ZjhhOTE1ZjdkYTFiNWMwMzQxY2ExOGMy
YzIzNGMwHhcNMjYwMzA3MTQwMDQ3WhcNMjYwMzA4MTQwMDQ3WjAzMTEwLwYDVQQD
Eyg5NmEyMTY4YzExMDE3NjA4MWRiNTkwMThlYjEwNzEzZDQ2ZWRjMDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQg1nPWtbBKSDYIFbe7vNMVgI9Ta
/6Aeu6Z/oBhE6fzzyNmIVV7YdNAUDERKzIbl35qBEms2F/MCtcxS8CkjCrDG5UTV
D2KW6vbaH5He7+vE1GidebvxJliOpmvJK2nIWNA6sSDlTgRtVMBPVDtUK7vWGlB3
xUyHbaDTC6oH0g2G0jiR+bspAMJ0P7wy2iZty2zAaX3qlmVKG/FftRiNOrLxzniv
zULBwPREr/np38krZIKqPX2FgyMKd5owBrXpOqeYYuxupmdb01z4IWYNPIynmAmC
1Y49nmPrwFYcqv8QWBuGLRa5Ofgl2/BR8mfGIcvzV/ibUuDc1XGzL2oI/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaiFowRAXYIHbWQGOsQcT1G7cBBMB8GA1UdIwQY
MBaAFEQOiMMTf4qRX32htcA0HKGMLCNMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkE2SXd4Tl9pcEZmZmFHMXdEUWNvWXdzSTB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8wNzg5YWEtOWU3My00NWVlLTkxYjYt
MTQzZmY2MGQ5OTkxLzEvUkE2SXd4Tl9pcEZmZmFHMXdEUWNvWXdzSTB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8wNzg5YWEtOWU3My00NWVlLTkxYjYtMTQzZmY2MGQ5OTkx
LzEvUkE2SXd4Tl9pcEZmZmFHMXdEUWNvWXdzSTB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFBsCsta
jrXa6UFX14HWfCiS6+gqHsj9bbmuXV8lr4g/CUgEXnPYU2iMMwmm/a3v0PBkf5+n
f0tVUHK+gX6DZdWBAoOSEZRUVPpqdyeO4ACg1mO3fOl3K/Dxddh5ObbbKLIQk5TB
9OWQ2Skfabftq5YkrcsGUBQl3eaSxW+wDGBFsLvG+2/u33nVED52vGF+OlH97C4v
pOdsmR+wY8w26zbZSuPW1mLQAZYTdq4FDfitaphRpy/YlKfmQpEMhuI6sfS+YKe9
dFV7h5XRxhLhoG3g1ZRqyrbc/cYjikB58tmsjpDxhLG+OB/SBxwPThAykGm379dF
pF4QLoeB/TzSbg==
-----END CERTIFICATE-----
Generated at Sat Mar 7 21:36:06 2026 by rpki-client