Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
File: RA6IwxN_ipFffaG1wDQcoYwsI0w.mft (raw, json)
Hash identifier: t74ZW+Pj9nIDnPEg+ufw0Hdpohinf3sRhE4k3xwTbcA=
Subject key identifier: 13:04:FD:CD:81:41:D0:14:59:EE:6C:E4:9D:BD:B5:84:37:F6:FD:64
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Certificate issuer: /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial: 01A0F30C99BE25917B56207F2531C11E4C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
Manifest number: 05A3
Signing time: Wed 30 Sep 2026 16:01:24 +0000
Manifest this update: Wed 30 Sep 2026 16:01:24 +0000
Manifest next update: Thu 01 Oct 2026 16:01:24 +0000
Files and hashes: 1: RA6IwxN_ipFffaG1wDQcoYwsI0w.crl (hash: IEywqV01TZfejTE1XmsPmyW63O/fdixjo0xRjVvFpkU=)
2: dPag7xFPzczRHzq2B8X2iWcIGDY.roa (hash: pRxwNcwkJ3uthH1oUSTy8IHhpLZnDFgmu09LUeEQ/AI=)
3: nPQEua1epz0cHI9DgWit1pT4HvM.roa (hash: 2TASnepXL6UFnC6iWgWqqNkaqCw4gJaGRhAGHMOAfig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:0c:99:be:25:91:7b:56:20:7f:25:31:c1:1e:4c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Validity
Not Before: Sep 30 16:01:24 2026 GMT
Not After : Oct 1 16:01:24 2026 GMT
Subject: CN=1304fdcd8141d01459ee6ce49dbdb58437f6fd64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:36:3f:99:2a:20:80:e5:bd:4a:e8:99:50:
2d:d8:64:40:7e:ab:68:9d:ee:43:26:47:e8:dc:86:
32:22:fd:1d:cc:6d:68:0c:e8:32:29:17:fd:c1:87:
12:cc:fb:cc:e7:45:3b:26:a6:6e:23:a8:96:65:23:
03:8c:e1:f5:d9:97:40:45:fb:84:a5:20:a1:8f:ea:
98:ec:9c:26:3c:4b:42:73:8d:ad:f5:ef:5c:d0:e2:
ad:38:ed:d8:9c:36:fb:c9:52:99:6a:7c:15:66:cf:
f3:f9:77:34:b9:62:e1:e2:25:51:58:86:9b:58:99:
58:7c:f2:6b:5d:38:4c:0a:ca:e2:67:cd:33:01:d1:
f5:d6:50:8e:97:55:97:08:37:33:b4:9e:40:2f:2d:
e2:6f:51:9c:89:e5:b0:d6:fd:f5:cf:af:ae:f8:9c:
9c:8c:47:0f:46:c7:7d:a5:b9:f9:5b:a9:89:b6:cc:
b8:1f:b4:81:04:b2:2b:e6:10:a7:29:67:ca:a7:a9:
ea:2a:05:07:4d:56:47:a7:f6:0f:40:85:a1:35:35:
82:b4:ea:be:31:a7:a3:dc:66:e3:30:2e:21:d2:df:
5d:c5:c7:68:b4:09:db:80:13:ed:c4:e1:df:db:5c:
cd:aa:da:e2:71:bf:43:9a:d6:dd:23:f4:95:25:aa:
51:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:04:FD:CD:81:41:D0:14:59:EE:6C:E4:9D:BD:B5:84:37:F6:FD:64
X509v3 Authority Key Identifier:
keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e9:d0:6d:2b:14:92:46:ce:b3:48:96:f6:97:e5:d1:8e:0e:
ce:0c:07:1f:f7:61:c3:d5:7e:a5:69:77:ae:51:12:e8:f9:38:
2c:62:b9:2e:ef:40:5d:92:ee:c1:76:b9:be:f0:b2:8c:bc:31:
2d:8a:2e:95:b9:da:08:70:b6:44:8c:b7:af:c8:c7:b0:f2:f5:
19:03:3a:d4:c0:21:b6:72:7b:1a:71:30:3b:18:1c:b8:d8:73:
5b:32:58:68:93:95:73:54:40:04:5a:2a:9d:86:dc:b4:9c:f7:
96:c2:d7:17:15:29:0a:cc:44:e7:3c:09:dc:a8:6b:b9:95:86:
12:21:c9:9b:09:5e:0b:95:e9:ee:4f:89:19:67:2c:2f:c1:40:
c9:ca:31:42:72:ae:62:f3:4d:46:ce:38:8b:1e:ba:19:f4:5c:
1e:47:77:7c:bc:d8:ab:e0:f9:7c:1b:fd:0c:65:94:a8:e3:d7:
bf:65:c7:ef:78:dd:c7:83:01:db:bb:6f:8e:4e:0b:8c:48:3c:
26:e3:1f:6d:ed:34:20:63:63:9a:15:ea:ad:6e:c3:c6:31:9e:
84:75:e5:33:b1:4d:68:30:68:7f:f9:10:dc:a6:2d:1d:45:0a:
f1:39:d4:aa:10:a3:50:eb:89:6d:81:42:cc:76:14:cf:e7:bf:
8a:de:f0:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDzDJm+JZF7ViB/JTHBHkwaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MGU4OGMzMTM3ZjhhOTE1ZjdkYTFiNWMwMzQxY2ExOGMy
YzIzNGMwHhcNMjYwOTMwMTYwMTI0WhcNMjYxMDAxMTYwMTI0WjAzMTEwLwYDVQQD
EygxMzA0ZmRjZDgxNDFkMDE0NTllZTZjZTQ5ZGJkYjU4NDM3ZjZmZDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBs2P5kqIIDlvUromVAt2GRAfqto
ne5DJkfo3IYyIv0dzG1oDOgyKRf9wYcSzPvM50U7JqZuI6iWZSMDjOH12ZdARfuE
pSChj+qY7JwmPEtCc42t9e9c0OKtOO3YnDb7yVKZanwVZs/z+Xc0uWLh4iVRWIab
WJlYfPJrXThMCsriZ80zAdH11lCOl1WXCDcztJ5ALy3ib1GcieWw1v31z6+u+Jyc
jEcPRsd9pbn5W6mJtsy4H7SBBLIr5hCnKWfKp6nqKgUHTVZHp/YPQIWhNTWCtOq+
Maej3GbjMC4h0t9dxcdotAnbgBPtxOHf21zNqtricb9DmtbdI/SVJapRQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBME/c2BQdAUWe5s5J29tYQ39v1kMB8GA1UdIwQY
MBaAFEQOiMMTf4qRX32htcA0HKGMLCNMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkE2SXd4Tl9pcEZmZmFHMXdEUWNvWXdzSTB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8wNzg5YWEtOWU3My00NWVlLTkxYjYt
MTQzZmY2MGQ5OTkxLzEvUkE2SXd4Tl9pcEZmZmFHMXdEUWNvWXdzSTB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8wNzg5YWEtOWU3My00NWVlLTkxYjYtMTQzZmY2MGQ5OTkx
LzEvUkE2SXd4Tl9pcEZmZmFHMXdEUWNvWXdzSTB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOnQbSsU
kkbOs0iW9pfl0Y4OzgwHH/dhw9V+pWl3rlES6Pk4LGK5Lu9AXZLuwXa5vvCyjLwx
LYoulbnaCHC2RIy3r8jHsPL1GQM61MAhtnJ7GnEwOxgcuNhzWzJYaJOVc1RABFoq
nYbctJz3lsLXFxUpCsxE5zwJ3KhruZWGEiHJmwleC5Xp7k+JGWcsL8FAycoxQnKu
YvNNRs44ix66GfRcHkd3fLzYq+D5fBv9DGWUqOPXv2XH73jdx4MB27tvjk4LjEg8
JuMfbe00IGNjmhXqrW7DxjGehHXlM7FNaDBof/kQ3KYtHUUK8TnUqhCjUOuJbYFC
zHYUz+e/it7wQA==
-----END CERTIFICATE-----
Generated at Thu Oct 1 10:43:10 2026 by rpki-client