Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
File: RA6IwxN_ipFffaG1wDQcoYwsI0w.mft (raw, json)
Hash identifier: WkJlOSLk7ixGdiIkSm36EwslAL41M+UJtdEknZ0+/ts=
Subject key identifier: B9:53:F3:80:81:D1:5E:DF:86:3A:E9:0C:82:00:3B:7D:81:30:DE:C2
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Certificate issuer: /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial: 019E1ED9BDAAA55C96D413ECEEDE474F5C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
Manifest number: 042C
Signing time: Wed 13 May 2026 01:00:46 +0000
Manifest this update: Wed 13 May 2026 01:00:46 +0000
Manifest next update: Thu 14 May 2026 01:00:46 +0000
Files and hashes: 1: RA6IwxN_ipFffaG1wDQcoYwsI0w.crl (hash: 308hkwXRBvKhoFn0TJAJSRQZzFbBKsV12JmrdvgnA2Q=)
2: dPag7xFPzczRHzq2B8X2iWcIGDY.roa (hash: pRxwNcwkJ3uthH1oUSTy8IHhpLZnDFgmu09LUeEQ/AI=)
3: nPQEua1epz0cHI9DgWit1pT4HvM.roa (hash: 2TASnepXL6UFnC6iWgWqqNkaqCw4gJaGRhAGHMOAfig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:bd:aa:a5:5c:96:d4:13:ec:ee:de:47:4f:5c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Validity
Not Before: May 13 01:00:46 2026 GMT
Not After : May 14 01:00:46 2026 GMT
Subject: CN=b953f38081d15edf863ae90c82003b7d8130dec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:5f:e7:30:a6:95:0c:5b:6a:91:2c:60:8b:
0d:be:41:af:e6:ad:c4:ad:4a:b1:da:d2:1e:17:2a:
48:3c:c5:65:ca:16:dd:be:61:f4:d8:20:13:dd:63:
2c:f0:c1:4b:8a:48:3d:92:47:d0:41:a6:6c:e8:2e:
3a:9f:c7:5e:ce:03:b9:a5:15:b1:cb:b4:cb:6b:93:
d8:50:1b:b3:cb:6b:66:90:39:f3:2f:4b:d4:af:e9:
73:4b:e5:20:56:48:b4:04:f5:57:8b:96:15:1b:92:
92:47:6f:25:d8:5b:76:5f:31:64:5d:28:8f:75:d3:
c8:14:e7:fc:30:9c:93:49:48:c5:4a:0c:01:88:95:
36:71:bb:94:ba:59:a2:53:19:e2:43:86:88:c5:b8:
e2:ef:32:90:62:e6:6f:66:2f:ea:30:16:58:de:90:
f7:be:03:87:f7:c0:65:91:e8:bb:3e:58:d3:71:91:
2a:d2:6f:7c:ef:33:4d:f1:6b:44:d5:e3:5d:dd:fc:
c8:5c:6f:ae:27:69:29:5b:74:44:75:10:dc:35:13:
29:36:85:59:d5:3e:7f:75:c1:36:f8:0b:cc:4c:63:
0a:f4:69:a4:f3:84:80:a7:20:62:c1:f8:b8:7f:ac:
e0:4e:f7:95:0e:54:93:a8:34:66:e0:45:ab:85:47:
9b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:53:F3:80:81:D1:5E:DF:86:3A:E9:0C:82:00:3B:7D:81:30:DE:C2
X509v3 Authority Key Identifier:
keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:3d:38:f8:ee:4d:25:6d:24:57:b5:24:9c:ca:53:de:58:7c:
0d:6d:ba:ac:af:66:c4:1b:05:6f:30:ec:b9:fb:36:96:44:92:
90:51:6b:ab:5d:c6:84:7b:6e:80:70:8b:24:41:9d:f5:1f:66:
76:6a:fe:c3:9b:29:c5:c0:95:54:16:96:a5:85:2a:b2:de:24:
99:4a:9b:95:55:ea:9b:2f:0a:ce:5c:a1:e6:5e:38:c0:68:6b:
7e:4f:7e:c9:96:56:3c:2d:ca:bd:9f:5c:bb:51:1d:5b:25:c3:
2b:4b:fb:11:fd:2d:63:13:26:59:d5:f3:df:7e:4d:e5:d6:dd:
66:68:c6:d5:f0:c0:da:4c:2e:b6:5e:e3:77:e4:ec:70:91:e8:
d6:6b:f0:83:9b:ca:ec:fc:a6:fa:c9:75:fc:1f:69:83:b2:f7:
d1:4a:85:4a:64:e9:90:84:a9:4b:13:c5:1c:5b:1c:84:6d:7a:
eb:be:ab:43:f2:6a:f6:9b:4a:fe:99:e8:25:84:da:62:70:42:
51:bc:57:97:b4:3f:00:fe:22:31:6d:d3:67:31:c6:14:89:a0:
f0:c4:7e:ea:51:2a:d4:b2:47:77:11:be:9c:41:40:f9:f2:98:
e7:0a:a2:a7:58:c1:e2:c5:34:57:80:e7:06:82:50:cc:e3:0f:
fb:1a:fe:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2b2qpVyW1BPs7t5HT1xUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MGU4OGMzMTM3ZjhhOTE1ZjdkYTFiNWMwMzQxY2ExOGMy
YzIzNGMwHhcNMjYwNTEzMDEwMDQ2WhcNMjYwNTE0MDEwMDQ2WjAzMTEwLwYDVQQD
EyhiOTUzZjM4MDgxZDE1ZWRmODYzYWU5MGM4MjAwM2I3ZDgxMzBkZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrFf5zCmlQxbapEsYIsNvkGv5q3E
rUqx2tIeFypIPMVlyhbdvmH02CAT3WMs8MFLikg9kkfQQaZs6C46n8dezgO5pRWx
y7TLa5PYUBuzy2tmkDnzL0vUr+lzS+UgVki0BPVXi5YVG5KSR28l2Ft2XzFkXSiP
ddPIFOf8MJyTSUjFSgwBiJU2cbuUulmiUxniQ4aIxbji7zKQYuZvZi/qMBZY3pD3
vgOH98Blkei7PljTcZEq0m987zNN8WtE1eNd3fzIXG+uJ2kpW3REdRDcNRMpNoVZ
1T5/dcE2+AvMTGMK9Gmk84SApyBiwfi4f6zgTveVDlSTqDRm4EWrhUebdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlT84CB0V7fhjrpDIIAO32BMN7CMB8GA1UdIwQY
MBaAFEQOiMMTf4qRX32htcA0HKGMLCNMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkE2SXd4Tl9pcEZmZmFHMXdEUWNvWXdzSTB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8wNzg5YWEtOWU3My00NWVlLTkxYjYt
MTQzZmY2MGQ5OTkxLzEvUkE2SXd4Tl9pcEZmZmFHMXdEUWNvWXdzSTB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8wNzg5YWEtOWU3My00NWVlLTkxYjYtMTQzZmY2MGQ5OTkx
LzEvUkE2SXd4Tl9pcEZmZmFHMXdEUWNvWXdzSTB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoj04+O5N
JW0kV7UknMpT3lh8DW26rK9mxBsFbzDsufs2lkSSkFFrq13GhHtugHCLJEGd9R9m
dmr+w5spxcCVVBaWpYUqst4kmUqblVXqmy8Kzlyh5l44wGhrfk9+yZZWPC3KvZ9c
u1EdWyXDK0v7Ef0tYxMmWdXz335N5dbdZmjG1fDA2kwutl7jd+TscJHo1mvwg5vK
7Pym+sl1/B9pg7L30UqFSmTpkISpSxPFHFschG16676rQ/Jq9ptK/pnoJYTaYnBC
UbxXl7Q/AP4iMW3TZzHGFImg8MR+6lEq1LJHdxG+nEFA+fKY5wqip1jB4sU0V4Dn
BoJQzOMP+xr+7Q==
-----END CERTIFICATE-----
Generated at Wed May 13 05:10:35 2026 by rpki-client