Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
File: RA6IwxN_ipFffaG1wDQcoYwsI0w.mft (raw, json)
Hash identifier: f04H09CDIJZAD5uedLjk7+JS/gUK851CfX8tngQjZlE=
Subject key identifier: 86:7E:4D:A6:4E:71:A5:7F:91:D6:C3:3B:76:C2:45:1E:CF:ED:A9:72
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Certificate issuer: /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial: 019F8FB51BE22DF37A1067F537D72691F81D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
Manifest number: 04EB
Signing time: Thu 23 Jul 2026 16:00:38 +0000
Manifest this update: Thu 23 Jul 2026 16:00:38 +0000
Manifest next update: Fri 24 Jul 2026 16:00:38 +0000
Files and hashes: 1: RA6IwxN_ipFffaG1wDQcoYwsI0w.crl (hash: vHe+VORY9gLo88lv3tKJthhWavBWdAQ5fiqzJQ9b8tY=)
2: dPag7xFPzczRHzq2B8X2iWcIGDY.roa (hash: pRxwNcwkJ3uthH1oUSTy8IHhpLZnDFgmu09LUeEQ/AI=)
3: nPQEua1epz0cHI9DgWit1pT4HvM.roa (hash: 2TASnepXL6UFnC6iWgWqqNkaqCw4gJaGRhAGHMOAfig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:1b:e2:2d:f3:7a:10:67:f5:37:d7:26:91:f8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Validity
Not Before: Jul 23 16:00:38 2026 GMT
Not After : Jul 24 16:00:38 2026 GMT
Subject: CN=867e4da64e71a57f91d6c33b76c2451ecfeda972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b5:26:f3:8b:72:5b:b8:32:4f:f7:5a:a0:b3:
13:9e:1f:ac:6e:a2:76:97:20:6e:28:8b:df:94:2d:
e7:5a:97:90:85:4c:11:65:8c:d6:5b:24:cd:ae:55:
7a:19:5e:f6:54:4d:23:ea:28:db:01:cb:69:a7:38:
80:47:92:8c:59:2e:af:bc:29:dc:57:b6:92:02:aa:
b3:85:4c:2f:d2:ee:af:8f:d7:f8:4c:b0:f3:b1:a9:
4e:3b:51:1e:e1:7d:d6:20:8f:16:92:09:00:61:d5:
a7:b4:c8:70:65:7e:00:fa:81:73:f6:c8:99:4c:35:
78:74:b7:7d:7c:8c:fe:a6:fc:0a:1b:9c:a3:ce:f8:
f6:27:4e:13:34:a6:26:1e:55:ff:7c:9a:25:0f:84:
84:cb:4c:71:9f:74:b9:cd:02:de:f7:d3:55:63:b3:
10:51:34:20:b1:46:06:4b:cc:b1:1c:bd:69:24:ec:
25:a5:78:50:73:76:1d:47:fa:2f:ed:72:60:4a:ac:
10:a3:04:71:80:4e:55:ed:75:48:df:2c:31:7a:0f:
58:61:a2:21:11:6e:82:3d:fe:bc:3d:3e:8a:a6:4f:
c6:40:6b:fb:4b:1f:cc:41:71:bb:49:fe:c8:b4:fe:
bd:af:d9:e2:23:bb:8d:9b:52:2e:0d:e4:67:86:d5:
07:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7E:4D:A6:4E:71:A5:7F:91:D6:C3:3B:76:C2:45:1E:CF:ED:A9:72
X509v3 Authority Key Identifier:
keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cb:e5:30:48:ad:8e:66:ea:9c:a5:c7:79:70:ba:ab:47:6b:
ad:24:85:ed:a1:54:e1:1c:34:86:fc:f7:ee:8c:bb:b0:3f:78:
77:7d:ad:a0:ef:df:cc:1c:52:06:bf:52:38:09:69:45:1d:99:
57:e8:56:5f:84:67:6d:92:d9:77:3a:49:d7:7b:f9:e3:d6:c1:
0a:35:c3:f4:01:97:35:6d:13:db:7f:91:17:74:72:8a:bc:50:
65:fd:7b:93:a5:72:9a:95:37:ea:76:41:1d:04:f7:93:97:2f:
ce:1a:28:b8:e4:d4:5e:26:42:b8:cd:3e:fc:56:66:98:ad:27:
a0:09:10:6f:fa:1f:cb:cd:27:cc:e5:48:a2:d6:1b:3b:20:39:
1f:cd:66:36:a3:9d:0d:37:36:1e:ed:f2:8f:76:4b:9e:b0:c4:
94:bf:c3:ec:ae:ab:b9:d2:c2:0c:2d:01:b5:67:0d:9f:e5:c1:
ad:80:32:37:48:7f:02:40:72:b6:fd:f5:0a:18:70:63:dd:54:
16:b5:3a:65:f2:b8:f9:d3:78:1f:92:66:0b:d9:07:ef:64:6f:
54:83:48:1e:bc:98:6b:29:32:8e:fd:5f:fb:7e:e5:be:07:d2:
42:d5:4f:49:0a:65:2d:91:cc:3c:a2:b6:7a:a2:ee:dc:73:51:
21:a6:c1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:26:52 2026 by rpki-client