Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
File: Ra868WfDt1lCmCfQ8LeGDN8czqY.mft (raw, json)
Hash identifier: pR3Z6OzzYpulIwYECnKc9IEhA3o359Y7wwfjXwoJdI0=
Subject key identifier: 8F:A1:AA:85:16:45:B7:99:2E:0B:8D:F9:63:7E:F0:84:DA:CF:94:4C
Authority key identifier: 45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6
Certificate issuer: /CN=45af3af167c3b759429827d0f0b7860cdf1ccea6
Certificate serial: 019DDD68C3F7D87622F45F59E0FD4151FCA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
Manifest number: 015C
Signing time: Thu 30 Apr 2026 08:02:03 +0000
Manifest this update: Thu 30 Apr 2026 08:02:03 +0000
Manifest next update: Fri 01 May 2026 08:02:03 +0000
Files and hashes: 1: Ra868WfDt1lCmCfQ8LeGDN8czqY.crl (hash: s1GKsoHvEK9W/LJqlxEewecSkBYChyF7eUOS+Qq4+dc=)
2: VCWBfoKrWWkzFJ_z0Uqkl5tqGCE.asa (hash: QJPQvnGP6JgqgsggAhK1tFaR42Tpp8Mfq5dK7EmGgjQ=)
3: kwWcRmvRx5T1SfJjFcB0B4-fP7I.roa (hash: OTIeGatbvYqV42xgky/BM9cLbBpLjdn3WCjVIYmAW8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:68:c3:f7:d8:76:22:f4:5f:59:e0:fd:41:51:fc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45af3af167c3b759429827d0f0b7860cdf1ccea6
Validity
Not Before: Apr 30 08:02:03 2026 GMT
Not After : May 1 08:02:03 2026 GMT
Subject: CN=8fa1aa851645b7992e0b8df9637ef084dacf944c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:b7:86:52:3b:15:cf:6b:8c:de:33:fd:80:
cd:29:a3:93:a3:55:61:5d:f1:6f:e8:47:f2:19:ba:
b0:6a:76:3e:52:2a:38:e0:7c:6e:8e:fb:15:d2:e1:
ef:17:c6:1a:1a:d3:81:19:e6:94:1f:8b:b2:d5:71:
c7:c9:23:a7:3c:fd:9c:64:72:73:a6:e0:5d:3e:2c:
b2:1a:c3:25:71:d0:7f:0f:63:1a:91:a2:38:47:e7:
e3:dc:bd:2f:86:e0:e0:7b:b0:3b:4e:30:c9:e1:15:
1b:19:80:21:97:c5:e9:b4:af:b8:a7:b6:c9:79:b4:
96:c7:e6:a3:6f:fc:22:73:ab:b1:a0:d9:f0:23:3e:
1d:4d:a1:58:01:ad:55:0d:5e:86:7a:2e:c8:53:85:
80:60:8f:55:37:cc:30:db:84:22:c4:12:e8:1c:c6:
08:8d:6f:2e:53:40:40:72:8b:31:c0:f5:aa:0a:71:
63:88:91:da:b5:4a:f0:97:dd:25:a4:f1:67:ef:50:
4a:cc:ce:0c:e4:8c:2f:51:08:91:9b:ac:b0:fd:e0:
dc:2d:2a:42:7e:79:4d:e6:e3:fc:e3:d0:94:eb:fe:
35:31:97:01:e1:0c:25:e6:e3:e9:67:80:54:da:ff:
1b:d1:0b:8f:94:46:46:ef:7d:0c:92:3c:d9:75:46:
84:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A1:AA:85:16:45:B7:99:2E:0B:8D:F9:63:7E:F0:84:DA:CF:94:4C
X509v3 Authority Key Identifier:
keyid:45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:68:95:38:fd:1e:e9:e7:dd:36:51:c3:4f:a2:4b:49:fc:6f:
2e:6f:c8:53:9c:46:9c:61:30:1e:f6:d0:10:51:32:ff:42:d8:
73:6f:b7:8e:e8:72:aa:cd:60:ae:55:9e:47:07:9a:52:d3:47:
ce:7c:0b:dd:08:2f:ed:1d:0c:6a:7b:60:28:fc:43:c1:1d:59:
3e:2d:19:f3:c4:23:54:fa:61:77:a2:31:fc:df:37:de:d4:13:
83:47:2e:e9:68:4b:98:e7:70:46:7b:72:af:b8:16:b0:b2:fa:
c0:68:1c:c1:cc:6d:52:e7:a9:9f:f3:2e:82:3b:94:3e:dc:80:
40:96:3c:48:4f:b0:ad:b1:40:f6:df:55:f9:4f:d6:3e:e9:8a:
77:b3:e5:e2:1f:69:1a:a4:6c:ec:3e:70:6c:d7:0a:f7:4a:60:
eb:08:0b:10:f7:ce:79:e6:db:96:92:4c:57:83:f3:6c:b8:6c:
33:69:85:17:81:95:45:af:42:95:a4:bf:bb:ee:c0:87:0a:8e:
6b:2d:72:67:ce:6b:df:fa:a8:9c:87:2f:31:ac:f7:44:1a:88:
82:42:22:6d:c9:92:7c:15:e8:90:a8:54:aa:5e:65:5c:95:df:
40:cb:74:f1:e5:76:ff:eb:97:ea:24:44:a7:7a:27:31:81:c3:
04:dd:54:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:52:48 2026 by rpki-client