Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
File: Ra868WfDt1lCmCfQ8LeGDN8czqY.mft (raw, json)
Hash identifier: Y4bzOy81i9suP0tBiN0am6jSW/U0NVxH2LMIllo6qFM=
Subject key identifier: D2:F2:5C:FE:12:3F:00:D6:A9:20:A1:03:99:75:70:90:59:C2:3C:76
Authority key identifier: 45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6
Certificate issuer: /CN=45af3af167c3b759429827d0f0b7860cdf1ccea6
Certificate serial: 019CB7DCE5FAB2CA3E135CA6C1556FB89168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
Manifest number: C4
Signing time: Wed 04 Mar 2026 08:00:33 +0000
Manifest this update: Wed 04 Mar 2026 08:00:33 +0000
Manifest next update: Thu 05 Mar 2026 08:00:33 +0000
Files and hashes: 1: Ra868WfDt1lCmCfQ8LeGDN8czqY.crl (hash: kWZzM1x2SX4FsbPI+3uTE1RaMRYIv+/4tsLZXAXLeac=)
2: VCWBfoKrWWkzFJ_z0Uqkl5tqGCE.asa (hash: QJPQvnGP6JgqgsggAhK1tFaR42Tpp8Mfq5dK7EmGgjQ=)
3: kwWcRmvRx5T1SfJjFcB0B4-fP7I.roa (hash: OTIeGatbvYqV42xgky/BM9cLbBpLjdn3WCjVIYmAW8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:dc:e5:fa:b2:ca:3e:13:5c:a6:c1:55:6f:b8:91:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45af3af167c3b759429827d0f0b7860cdf1ccea6
Validity
Not Before: Mar 4 08:00:33 2026 GMT
Not After : Mar 5 08:00:33 2026 GMT
Subject: CN=d2f25cfe123f00d6a920a1039975709059c23c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:e8:2d:f6:69:4f:97:52:b8:9c:b7:d2:dd:
19:ef:36:d4:2b:34:aa:a5:ee:d2:cc:7a:9e:84:de:
b3:c0:29:78:35:0c:28:45:76:f8:02:f0:18:8a:7a:
e1:7b:ae:e8:bd:b9:e5:3a:f1:31:01:a2:fe:d3:c7:
9f:51:ff:31:f5:4f:be:57:bf:16:32:bc:a3:c4:4e:
fb:da:66:b0:f0:0d:e7:d8:a5:c5:5a:e0:b1:e4:3d:
31:06:ac:27:52:71:4d:d2:83:6d:ae:68:70:3e:f4:
05:a6:e7:33:f9:44:95:42:4b:46:2e:d0:04:a5:53:
0a:34:54:16:42:0a:9f:5c:87:22:9a:cf:27:49:bd:
cc:c7:8c:f7:27:48:a6:16:75:a7:3e:ec:a7:84:85:
f8:68:e5:9a:26:b0:70:8f:d7:65:7d:99:16:2e:b0:
0b:0a:5e:8b:24:dd:24:8f:05:d3:e2:0d:58:84:48:
58:e0:25:81:01:4f:85:38:2e:50:d8:25:b8:ed:26:
7c:a9:36:7f:63:dd:13:ac:e0:b8:b7:95:c8:03:a1:
15:60:a2:fd:67:3e:fd:20:0e:71:c0:36:b1:97:69:
1a:b1:f7:86:30:65:bf:ce:18:95:f2:fc:76:c0:09:
e3:39:a7:b0:27:5a:ee:ad:51:8b:e8:1b:11:2e:38:
c3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F2:5C:FE:12:3F:00:D6:A9:20:A1:03:99:75:70:90:59:C2:3C:76
X509v3 Authority Key Identifier:
keyid:45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c0:9c:9b:04:3b:2a:ca:04:c3:65:51:29:1b:90:c5:ba:33:
b8:53:7e:79:31:3f:05:3d:73:e3:60:88:44:59:d0:a3:0f:ca:
1f:21:6b:1e:b2:b6:5e:28:7b:9a:30:35:43:fb:30:df:f2:ff:
aa:ea:20:2b:c2:d6:5c:c6:fd:2f:79:97:77:a2:1e:35:27:95:
a5:cd:43:42:5b:b3:69:b4:76:22:31:fb:31:0e:6b:c3:0b:a0:
77:0f:dd:4e:b1:24:9d:1b:d6:4f:a7:82:ef:2e:21:78:bf:2f:
06:58:85:6f:7a:66:25:7b:ac:ab:fe:14:3e:06:bc:96:86:25:
1d:7b:c8:01:ae:3e:e0:fe:24:70:3b:7a:17:a8:a9:61:d3:64:
61:b4:17:a6:16:b5:81:77:2c:46:e1:6e:fe:b0:10:d1:5c:cc:
a5:14:c3:d3:84:00:1c:b6:22:48:af:65:83:01:48:a2:d0:7d:
14:67:43:1e:bb:3c:60:39:bc:95:37:10:5c:cc:41:38:ab:76:
08:10:39:08:1b:b0:16:c7:d6:33:8c:ba:75:dd:3a:21:43:4d:
62:bb:3d:90:48:9b:77:ba:e6:7b:76:3e:ef:aa:ba:c3:c2:6d:
4b:35:8a:86:21:e8:62:c9:30:c1:24:6d:60:4c:57:d7:b3:ee:
53:59:8a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 11:09:49 2026 by rpki-client