Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
File: Ra868WfDt1lCmCfQ8LeGDN8czqY.mft (raw, json)
Hash identifier: AVmiY9pMzzGTSMVMq7IT6mXC4WN09qG0WC2Qmvy/7YY=
Subject key identifier: 04:FE:75:25:D1:BD:92:30:17:9D:0E:8E:AA:AB:11:A3:6B:46:6A:40
Authority key identifier: 45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6
Certificate issuer: /CN=45af3af167c3b759429827d0f0b7860cdf1ccea6
Certificate serial: 019CB5EE7EAD60C004A0B781701B2C415AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
Manifest number: C3
Signing time: Tue 03 Mar 2026 23:00:31 +0000
Manifest this update: Tue 03 Mar 2026 23:00:31 +0000
Manifest next update: Wed 04 Mar 2026 23:00:31 +0000
Files and hashes: 1: Ra868WfDt1lCmCfQ8LeGDN8czqY.crl (hash: xpmPJ1oQsLqHdEL7hshfbZ6peiHwPAs/cUWwgMmVRvQ=)
2: VCWBfoKrWWkzFJ_z0Uqkl5tqGCE.asa (hash: QJPQvnGP6JgqgsggAhK1tFaR42Tpp8Mfq5dK7EmGgjQ=)
3: kwWcRmvRx5T1SfJjFcB0B4-fP7I.roa (hash: OTIeGatbvYqV42xgky/BM9cLbBpLjdn3WCjVIYmAW8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b5:ee:7e:ad:60:c0:04:a0:b7:81:70:1b:2c:41:5a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45af3af167c3b759429827d0f0b7860cdf1ccea6
Validity
Not Before: Mar 3 23:00:31 2026 GMT
Not After : Mar 4 23:00:31 2026 GMT
Subject: CN=04fe7525d1bd9230179d0e8eaaab11a36b466a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:de:a3:5a:ad:bc:68:68:42:45:a8:db:35:
66:bf:43:cf:e5:7a:fd:9a:f2:42:03:8b:85:6b:1a:
d2:75:e4:57:76:cd:9b:62:de:62:84:69:43:d5:f8:
34:ed:e1:c0:6c:71:22:27:62:76:8a:bf:d5:c1:fb:
b9:69:5a:d1:15:59:d9:1d:7e:f4:6b:e4:4d:fb:a3:
63:87:df:9f:71:60:ab:cc:36:28:32:ef:6b:76:e9:
49:7a:e1:0b:71:85:52:eb:2c:cf:0f:58:f6:ab:71:
b6:ea:5b:6d:bf:14:33:ab:c0:88:56:33:e4:db:29:
39:2e:16:31:c7:a6:23:7a:e2:ff:ab:29:71:cd:40:
43:66:19:e1:09:e9:cc:5d:72:e0:18:aa:fe:fe:e7:
be:a3:be:ec:8d:a9:31:9a:15:f0:e9:32:ac:7f:c4:
b4:24:6c:03:4f:6c:5b:99:d0:7e:f2:3d:52:fc:da:
31:d8:d1:e5:e2:d9:f4:19:c4:4b:0c:a0:1f:47:fe:
54:48:49:c9:06:1e:ce:56:f9:1b:d5:80:99:d4:af:
3f:34:5e:29:91:d7:49:42:8d:37:a6:b6:f8:3e:c3:
91:17:57:41:68:90:15:b9:ed:c2:45:8a:14:58:d9:
6a:bf:97:54:7d:16:a1:7a:51:ba:24:34:ab:2d:0c:
24:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FE:75:25:D1:BD:92:30:17:9D:0E:8E:AA:AB:11:A3:6B:46:6A:40
X509v3 Authority Key Identifier:
keyid:45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ec:76:4d:4f:c4:b8:cb:73:07:40:7a:d5:2d:02:58:d1:20:
2c:b2:37:ae:5d:08:cc:e3:09:48:db:24:64:3b:b1:cf:60:c2:
3d:cf:a8:27:1a:2c:c2:f8:c0:6b:9c:e4:40:79:76:c9:ae:a9:
68:70:96:9a:c8:da:f1:e4:e1:fe:1a:db:18:80:a3:1d:83:44:
cc:6d:2d:02:3c:aa:cb:2d:35:0e:fe:cf:61:99:1e:33:8a:d1:
62:55:7c:74:36:ba:ce:fc:c6:0b:f1:e6:7c:ea:74:b7:1e:cd:
e5:d6:18:95:08:ff:2d:35:64:43:02:04:0a:22:3b:60:85:27:
38:ff:47:fa:85:a9:f3:13:1d:d7:d0:12:82:82:c0:20:31:48:
bd:3e:7d:46:e5:ec:72:f5:37:04:f6:ee:db:ca:71:55:ff:a8:
02:10:38:ed:ae:7e:73:16:3f:ec:64:84:90:4f:57:cc:04:05:
04:4e:2e:e5:83:20:1e:cd:b6:88:72:82:14:b9:96:93:e6:fb:
cb:f0:b7:cc:4c:35:27:08:f1:cf:1d:fa:55:87:e3:1a:28:31:
02:a7:4f:0b:57:67:30:1f:d9:b4:d4:a2:aa:29:31:2b:11:8f:
8b:80:34:3c:cc:ba:9b:50:0a:e8:b4:c6:04:47:68:89:f8:8b:
f6:68:af:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 09:50:13 2026 by rpki-client