Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
File: RA6IwxN_ipFffaG1wDQcoYwsI0w.mft (raw, json)
Hash identifier: qdH3LXk81nmEbK1e1eKJtUvRUm+8nWUyJy9C50YazYk=
Subject key identifier: BE:46:86:C0:A5:9C:8F:F9:C6:F7:B7:A8:41:49:FB:FB:06:3B:36:11
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Certificate issuer: /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial: 019D254C85B07849701D0E34C015A05B17DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
Manifest number: 03A9
Signing time: Wed 25 Mar 2026 14:01:05 +0000
Manifest this update: Wed 25 Mar 2026 14:01:05 +0000
Manifest next update: Thu 26 Mar 2026 14:01:05 +0000
Files and hashes: 1: DhnVxA5epBkWnt3PDulS5ypiRRE.roa (hash: cV+0Z4XARQ4usZE3nfMuQg0VGiGEUn16U9an0D+YjNU=)
2: RA6IwxN_ipFffaG1wDQcoYwsI0w.crl (hash: grWU9JGZgb1Ww2CyDSjoXq9F64MiVf9PApSWlihO3Bo=)
3: nPQEua1epz0cHI9DgWit1pT4HvM.roa (hash: 2TASnepXL6UFnC6iWgWqqNkaqCw4gJaGRhAGHMOAfig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:85:b0:78:49:70:1d:0e:34:c0:15:a0:5b:17:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Validity
Not Before: Mar 25 14:01:05 2026 GMT
Not After : Mar 26 14:01:05 2026 GMT
Subject: CN=be4686c0a59c8ff9c6f7b7a84149fbfb063b3611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:63:a0:2b:6b:56:2e:ed:c0:a9:58:02:3b:
28:25:93:55:eb:0a:f1:a2:cc:d8:99:5b:16:c4:c5:
5e:f4:ef:0d:5a:c8:22:68:8a:67:66:ee:88:e7:b2:
eb:06:d0:93:1a:16:b5:1c:dc:f1:36:e7:07:2c:9c:
0e:05:aa:f8:08:af:28:b0:db:60:24:26:82:13:27:
5d:3e:75:47:a9:de:57:91:c6:9f:0d:26:f6:7a:59:
d0:3c:2d:8e:6c:e7:da:01:a2:ef:50:f8:1b:8d:70:
c2:6d:d5:ff:d3:86:b0:9e:68:54:da:46:8f:b4:c7:
84:f9:9d:84:c1:0a:e5:a2:7a:c0:70:0f:d9:f1:85:
a0:21:be:1b:e9:02:c6:57:e7:33:ac:34:8e:e1:bc:
1d:64:c1:3a:5a:20:8f:5e:90:ab:3b:7c:85:ba:b0:
11:24:ba:db:cd:16:99:f0:ab:48:76:59:8d:49:e4:
3a:42:76:75:4f:4e:b4:fd:ce:6a:f7:7e:0b:0c:a3:
b0:75:9d:0c:70:07:36:66:41:d7:50:b1:1b:4a:bd:
71:ca:b8:10:54:b5:19:31:31:76:4f:1a:41:5d:4c:
aa:57:da:5d:64:70:bc:bc:c2:c2:be:d2:5d:9b:1b:
9c:4a:9b:bb:d9:36:09:15:93:bc:44:d2:80:2b:2f:
2f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:46:86:C0:A5:9C:8F:F9:C6:F7:B7:A8:41:49:FB:FB:06:3B:36:11
X509v3 Authority Key Identifier:
keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d5:ae:51:80:79:02:9a:fe:9f:0f:15:f9:ad:24:92:10:36:
3a:00:29:91:9e:c0:68:60:fc:4a:1b:25:23:20:0e:be:76:d2:
2a:70:14:cd:ba:9a:9e:66:5b:d9:5f:b9:54:39:d5:c4:26:fb:
ec:f5:89:b0:9c:26:27:d8:23:b8:de:bd:c9:50:21:79:0a:30:
0f:2c:5f:ab:ed:2f:ae:87:15:63:95:22:92:72:9f:6d:46:75:
e3:e3:1e:02:e3:1d:05:d5:dd:6a:36:8d:25:a4:c8:b9:b6:0b:
1e:13:f6:ad:f6:e2:de:09:e1:d6:cb:b6:77:35:31:93:dc:ac:
96:43:51:94:99:65:43:91:b1:82:80:a8:1e:7f:60:d8:9f:da:
5e:f9:e9:86:1c:eb:7a:de:14:7e:b7:4e:52:55:1d:19:b9:0b:
87:ce:57:9d:d6:40:38:57:ee:eb:82:ae:e6:3f:98:14:31:88:
5b:29:f9:2c:81:00:3e:a7:1a:a5:d9:12:32:79:57:e8:eb:68:
1e:72:af:6a:d1:74:31:55:38:48:4d:d7:53:65:cd:85:52:88:
09:1f:0b:19:db:de:ce:28:b2:74:3a:bb:04:52:33:d4:da:4c:
4f:d5:e6:39:b3:73:a8:99:33:8d:f2:08:f0:64:3b:74:35:d1:
21:76:33:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:51 2026 by rpki-client