Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
File: RA6IwxN_ipFffaG1wDQcoYwsI0w.mft (raw, json)
Hash identifier: IFHQyDoCZaWaaKWu7FhAUesH7WnM+3WCTUGWSKg64sI=
Subject key identifier: 40:0B:0C:A0:FC:15:AE:F0:80:82:F9:89:67:E4:DD:35:BC:D0:86:18
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Certificate issuer: /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial: 019F91A3CF6FE328D1B7BAF8D26D9204A445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
Manifest number: 04EC
Signing time: Fri 24 Jul 2026 01:00:59 +0000
Manifest this update: Fri 24 Jul 2026 01:00:59 +0000
Manifest next update: Sat 25 Jul 2026 01:00:59 +0000
Files and hashes: 1: RA6IwxN_ipFffaG1wDQcoYwsI0w.crl (hash: yltWOcu2NflcUfjhGW+eecfq6roGwownbfhvOLT7hHA=)
2: dPag7xFPzczRHzq2B8X2iWcIGDY.roa (hash: pRxwNcwkJ3uthH1oUSTy8IHhpLZnDFgmu09LUeEQ/AI=)
3: nPQEua1epz0cHI9DgWit1pT4HvM.roa (hash: 2TASnepXL6UFnC6iWgWqqNkaqCw4gJaGRhAGHMOAfig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:cf:6f:e3:28:d1:b7:ba:f8:d2:6d:92:04:a4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Validity
Not Before: Jul 24 01:00:59 2026 GMT
Not After : Jul 25 01:00:59 2026 GMT
Subject: CN=400b0ca0fc15aef08082f98967e4dd35bcd08618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:0a:46:76:5e:2a:a4:37:21:fc:99:d3:0e:
fd:c3:2b:b2:40:36:93:26:1a:7d:a1:b0:c8:c8:30:
2b:c2:d0:83:6d:b6:c4:66:a7:7c:7d:ad:2a:55:5e:
e0:7a:59:bb:bf:c8:bb:57:69:cc:f0:99:0f:a9:41:
f4:eb:59:b1:cd:64:f0:a2:96:99:df:58:88:26:01:
f5:d7:2e:05:ac:77:a5:f6:c0:f4:cd:bd:56:fd:6e:
dd:6c:a3:b5:d0:6b:4d:c5:97:45:d4:02:1f:03:74:
b1:fe:ea:e5:fe:9d:fa:1b:4f:23:71:10:18:63:25:
0d:ad:11:be:9e:a0:25:07:9b:99:8c:d6:81:23:13:
8c:1c:e9:3b:96:24:17:9b:e3:42:f2:a2:2e:37:51:
e9:61:5c:ff:27:53:30:c7:20:39:c4:2a:94:6e:4a:
73:08:e6:4c:2c:83:08:b7:d8:15:d3:6f:3f:61:3c:
a2:52:87:2d:b6:13:0f:ec:15:8b:1b:04:bd:97:15:
28:7a:8a:a4:36:41:ce:c5:10:45:e7:46:f8:9b:8f:
b3:33:3f:21:80:96:e9:37:e7:76:79:a8:ae:d4:ab:
73:de:34:23:2a:84:f1:0a:6e:21:87:e7:f5:ba:06:
92:af:63:e2:d8:6b:8e:9d:55:7c:ee:40:06:ab:da:
c7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0B:0C:A0:FC:15:AE:F0:80:82:F9:89:67:E4:DD:35:BC:D0:86:18
X509v3 Authority Key Identifier:
keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:30:97:19:c8:cc:12:6b:d5:69:c9:52:09:92:7c:05:1e:af:
7a:f1:d6:5f:ea:0d:22:b9:ed:af:d7:10:c0:d7:e7:42:46:a0:
9d:15:6b:7f:db:a8:f7:b4:8e:3d:e9:93:e9:ed:4f:3b:2c:85:
43:c4:d7:b8:e3:e3:1b:f6:50:f7:d1:19:22:94:2a:60:28:17:
24:bd:73:a3:da:04:dc:f6:20:82:c9:e3:50:39:e4:f9:45:6f:
92:51:86:dd:55:27:90:1f:59:45:ae:e1:aa:6d:8b:a4:88:4e:
ee:7e:a3:05:4c:cc:47:98:58:ed:65:6d:8e:d9:70:21:f2:e8:
7c:01:2b:0d:f4:c5:07:1c:6f:e3:59:e7:ed:df:bd:ae:34:89:
95:5d:a6:e4:a8:73:de:14:50:e4:65:87:35:e7:2f:94:a1:43:
a1:fd:a1:ae:7a:13:d3:09:99:5e:95:f8:3a:87:bb:8c:99:a9:
38:bb:ab:88:5b:18:f9:56:b5:94:49:13:59:6c:cc:54:ba:35:
e9:ec:c3:50:88:b9:1c:10:c7:bb:b5:fb:05:51:4d:e8:43:84:
34:f6:b2:0f:e6:dd:05:35:31:8f:85:d7:22:f8:32:77:84:ee:
81:d6:5d:b8:5c:a2:58:8e:cf:94:a0:d7:95:42:c7:02:d8:54:
61:b2:7a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:39:20 2026 by rpki-client