Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
File: Ra868WfDt1lCmCfQ8LeGDN8czqY.mft (raw, json)
Hash identifier: T59/iLP1wgb/eoKvuSqejDlrKl6T3jbqnlMG2LAM/ic=
Subject key identifier: 1D:11:A1:40:7B:4B:F2:EE:55:15:92:08:E4:0C:90:13:7F:AA:4D:33
Authority key identifier: 45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6
Certificate issuer: /CN=45af3af167c3b759429827d0f0b7860cdf1ccea6
Certificate serial: 019EFD278898F81BF931106C07EF1A97BB1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
Manifest number: 01F1
Signing time: Thu 25 Jun 2026 05:01:26 +0000
Manifest this update: Thu 25 Jun 2026 05:01:26 +0000
Manifest next update: Fri 26 Jun 2026 05:01:26 +0000
Files and hashes: 1: Ra868WfDt1lCmCfQ8LeGDN8czqY.crl (hash: 3EKgZXtWjsWhfYQrM+3MUvj6y2iebEGN9+x5Do6ayJM=)
2: VCWBfoKrWWkzFJ_z0Uqkl5tqGCE.asa (hash: QJPQvnGP6JgqgsggAhK1tFaR42Tpp8Mfq5dK7EmGgjQ=)
3: kwWcRmvRx5T1SfJjFcB0B4-fP7I.roa (hash: OTIeGatbvYqV42xgky/BM9cLbBpLjdn3WCjVIYmAW8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:27:88:98:f8:1b:f9:31:10:6c:07:ef:1a:97:bb:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45af3af167c3b759429827d0f0b7860cdf1ccea6
Validity
Not Before: Jun 25 05:01:26 2026 GMT
Not After : Jun 26 05:01:26 2026 GMT
Subject: CN=1d11a1407b4bf2ee55159208e40c90137faa4d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e8:ea:64:68:f1:a2:27:c5:3d:92:5c:9c:33:
89:fe:06:bb:60:2f:89:99:c7:9e:36:e5:97:8b:0e:
df:4b:55:0f:01:cb:85:9d:5f:e5:c1:fc:32:2a:e2:
fd:e8:fc:81:3d:98:a7:a6:8a:27:ca:59:a4:2b:8c:
f6:75:66:c8:6d:55:e0:09:ba:20:4b:22:8c:12:33:
e7:cd:9b:e8:89:28:78:61:3d:e7:4f:f1:5e:04:4c:
ce:3c:29:59:38:4c:12:f4:1b:56:26:60:a0:38:b7:
2b:95:91:a0:c5:85:14:72:41:db:c4:54:89:b2:96:
62:8c:9f:ab:1d:63:40:10:64:ed:89:66:b0:77:ab:
93:de:4e:11:e1:7c:5a:73:41:67:8d:aa:51:e6:5a:
79:ae:2c:9b:71:f5:2a:48:81:c1:a3:53:3a:2f:49:
53:eb:15:62:d4:ce:65:00:19:05:6c:00:5d:0a:72:
a2:95:79:3b:a0:ed:ef:40:77:0a:84:4c:e8:a9:c6:
53:0b:6a:62:31:11:37:4b:eb:b8:4d:07:90:00:0f:
2c:5a:38:42:18:5b:d2:12:a5:bb:29:25:3d:0b:b4:
eb:97:0f:61:77:2a:bd:96:5f:f8:1d:e0:72:52:b4:
a3:34:fe:12:a3:0f:b2:e7:47:2e:37:37:60:92:8a:
57:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:11:A1:40:7B:4B:F2:EE:55:15:92:08:E4:0C:90:13:7F:AA:4D:33
X509v3 Authority Key Identifier:
keyid:45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:df:6d:0b:2d:f9:f1:e7:a8:74:3c:22:f0:87:0d:79:d7:46:
e9:95:f9:d4:d0:ad:f9:e9:f9:67:93:e8:2e:66:8e:e2:b3:9a:
97:1b:5d:9d:df:2c:7f:45:40:a4:d9:87:36:33:39:e5:38:10:
e9:1d:e4:ea:4e:41:75:c7:68:a0:f4:02:bd:81:44:51:7e:4c:
56:6f:1f:ee:41:a5:5e:4d:43:af:81:fc:a5:92:3b:57:8e:9c:
03:d3:95:da:5d:a8:54:c4:c1:9c:74:19:3e:48:fd:3f:48:cd:
99:f3:28:c8:51:8e:f4:6d:2f:95:ba:20:01:ea:6c:02:af:0f:
6f:f1:09:6c:ec:99:90:df:14:43:0a:58:8e:5c:26:9f:c6:f2:
b8:d4:2e:e2:18:0b:32:29:4f:f0:85:7c:3f:69:d8:63:03:35:
68:95:a5:da:d9:a4:60:27:7f:4c:33:8e:8b:94:49:87:f5:95:
32:4c:5e:0e:56:cb:a6:73:7a:2b:a1:2d:f1:58:3b:f8:db:c7:
89:c1:78:a6:ff:74:5b:08:64:e5:2c:65:e5:79:a0:5e:19:a6:
96:21:e3:a3:71:e6:52:f0:5f:20:9f:fb:16:dd:07:a4:5d:8b:
84:45:3f:29:7a:6b:e7:17:69:19:81:de:c7:bd:99:d5:7c:48:
56:51:51:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:30:08 2026 by rpki-client