Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
File: Ra868WfDt1lCmCfQ8LeGDN8czqY.mft (raw, json)
Hash identifier: NfkYC5/Fb+UOyeWFvNjs9ygMM7fHedtLv89VU5SsY1M=
Subject key identifier: 9C:22:B4:79:75:37:7A:10:7C:83:CE:3B:CA:04:27:A7:20:9D:E3:C2
Authority key identifier: 45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6
Certificate issuer: /CN=45af3af167c3b759429827d0f0b7860cdf1ccea6
Certificate serial: 019F8EA29BAE2A477119DCE4EE3F47D56430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
Manifest number: 023D
Signing time: Thu 23 Jul 2026 11:00:49 +0000
Manifest this update: Thu 23 Jul 2026 11:00:49 +0000
Manifest next update: Fri 24 Jul 2026 11:00:49 +0000
Files and hashes: 1: 6Rb0s8AtCA3zfURLXXadfe9zOdg.asa (hash: wU9lPmeFxxV6If+3wmabkUhGfuw5KjLh16lQhbRcCzU=)
2: Ra868WfDt1lCmCfQ8LeGDN8czqY.crl (hash: 8nMbi8K1msh+QfrOpThYChasNdHtAO/YhVv0EdyGu/E=)
3: kwWcRmvRx5T1SfJjFcB0B4-fP7I.roa (hash: OTIeGatbvYqV42xgky/BM9cLbBpLjdn3WCjVIYmAW8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:9b:ae:2a:47:71:19:dc:e4:ee:3f:47:d5:64:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45af3af167c3b759429827d0f0b7860cdf1ccea6
Validity
Not Before: Jul 23 11:00:49 2026 GMT
Not After : Jul 24 11:00:49 2026 GMT
Subject: CN=9c22b47975377a107c83ce3bca0427a7209de3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:ea:70:93:ec:4b:bf:5b:06:8f:cc:39:98:
18:36:66:27:d2:75:98:ab:97:bd:67:42:62:0f:cf:
0e:d4:ad:d8:8b:9e:40:23:5e:4a:ed:e7:fc:68:21:
ad:ff:a3:0d:70:7d:ce:d3:c8:fd:a7:07:9e:55:cc:
48:9c:91:1c:5b:9f:1a:cf:32:bb:38:f9:e9:fc:a9:
93:a9:00:70:c7:37:34:6c:8d:7d:de:48:b5:5a:4b:
33:2f:e1:59:ec:9a:7f:74:fe:b7:21:02:fa:ed:f7:
3d:41:73:ae:53:29:2f:7f:16:e7:66:0e:50:ee:2e:
c2:9c:09:6b:d8:5c:1b:59:01:8f:a5:c2:c8:74:9a:
09:3b:2f:5b:eb:88:79:47:0d:70:c1:04:a3:90:38:
fb:33:f5:a8:d8:5f:d9:e9:66:32:d0:4c:ce:5b:d4:
d4:67:67:ce:ce:24:ab:0e:72:42:c6:97:af:be:91:
df:60:15:f0:58:6a:c0:43:7e:1f:7c:c3:4d:e7:93:
b7:ae:20:9b:2d:3d:34:39:30:f7:15:22:e3:3d:20:
3c:43:a9:5e:5c:a0:cf:3e:48:a7:4b:1c:57:4d:cf:
4d:87:99:d0:91:f4:f6:03:e0:24:88:06:99:02:33:
9e:1a:aa:1b:c0:c2:a2:db:17:de:cd:44:9e:80:59:
d6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:22:B4:79:75:37:7A:10:7C:83:CE:3B:CA:04:27:A7:20:9D:E3:C2
X509v3 Authority Key Identifier:
keyid:45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:04:60:47:b4:e6:65:ea:8f:cf:6a:3b:60:ae:d6:d6:cf:22:
25:5b:b9:d7:c6:af:2b:3d:d2:a6:94:35:d7:98:56:15:37:52:
f1:8b:a2:d0:34:61:cd:a4:20:9e:1d:dd:dc:da:fd:b5:ae:50:
41:1e:20:d1:f6:b6:0f:44:7b:50:44:5d:4c:d5:f1:99:35:17:
4a:96:64:38:b2:ae:d7:70:24:cb:a5:e3:41:4f:0a:65:f4:a0:
5f:08:df:3d:17:5c:fe:ab:53:a3:d3:ca:88:48:71:6b:db:e0:
bf:db:54:4c:63:93:59:4b:ea:52:5b:08:67:93:98:31:0a:10:
2f:f1:d1:b3:67:c1:55:38:05:cf:13:ff:85:bb:ee:2c:1e:69:
74:92:f5:a9:d4:40:3b:9e:d4:bd:99:b4:bb:5a:05:91:77:9b:
b0:ce:f4:55:0e:4c:4b:46:04:f7:bd:9f:de:e2:22:c0:76:63:
7c:0b:70:74:f4:56:2b:53:5b:6a:5d:0e:04:6f:a0:9f:83:03:
bf:f6:ca:9f:ed:d1:f6:d2:95:7f:9c:62:e0:8a:df:14:01:3a:
d8:1f:54:37:61:06:bc:a2:bd:04:01:4b:61:da:f5:0e:5c:93:
32:20:44:73:1f:19:ad:95:b8:cd:fa:55:f2:8a:13:da:f1:c2:
37:10:d3:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OopuuKkdxGdzk7j9H1WQwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YWYzYWYxNjdjM2I3NTk0Mjk4MjdkMGYwYjc4NjBjZGYx
Y2NlYTYwHhcNMjYwNzIzMTEwMDQ5WhcNMjYwNzI0MTEwMDQ5WjAzMTEwLwYDVQQD
Eyg5YzIyYjQ3OTc1Mzc3YTEwN2M4M2NlM2JjYTA0MjdhNzIwOWRlM2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAturqcJPsS79bBo/MOZgYNmYn0nWY
q5e9Z0JiD88O1K3Yi55AI15K7ef8aCGt/6MNcH3O08j9pweeVcxInJEcW58azzK7
OPnp/KmTqQBwxzc0bI193ki1WkszL+FZ7Jp/dP63IQL67fc9QXOuUykvfxbnZg5Q
7i7CnAlr2FwbWQGPpcLIdJoJOy9b64h5Rw1wwQSjkDj7M/Wo2F/Z6WYy0EzOW9TU
Z2fOziSrDnJCxpevvpHfYBXwWGrAQ34ffMNN55O3riCbLT00OTD3FSLjPSA8Q6le
XKDPPkinSxxXTc9Nh5nQkfT2A+AkiAaZAjOeGqobwMKi2xfezUSegFnWHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwitHl1N3oQfIPOO8oEJ6cgnePCMB8GA1UdIwQY
MBaAFEWvOvFnw7dZQpgn0PC3hgzfHM6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmE4NjhXZkR0MWxDbUNmUThMZUdETjhjenFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yNDBjMmEtMWViYi00ODQ0LTg0MTQt
NjY5N2U0MGIwOTAzLzEvUmE4NjhXZkR0MWxDbUNmUThMZUdETjhjenFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8yNDBjMmEtMWViYi00ODQ0LTg0MTQtNjY5N2U0MGIwOTAz
LzEvUmE4NjhXZkR0MWxDbUNmUThMZUdETjhjenFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnARgR7Tm
ZeqPz2o7YK7W1s8iJVu518avKz3SppQ115hWFTdS8Yui0DRhzaQgnh3d3Nr9ta5Q
QR4g0fa2D0R7UERdTNXxmTUXSpZkOLKu13Aky6XjQU8KZfSgXwjfPRdc/qtTo9PK
iEhxa9vgv9tUTGOTWUvqUlsIZ5OYMQoQL/HRs2fBVTgFzxP/hbvuLB5pdJL1qdRA
O57UvZm0u1oFkXebsM70VQ5MS0YE972f3uIiwHZjfAtwdPRWK1Nbal0OBG+gn4MD
v/bKn+3R9tKVf5xi4IrfFAE62B9UN2EGvKK9BAFLYdr1DlyTMiBEcx8ZrZW4zfpV
8ooT2vHCNxDTTA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:31 2026 by rpki-client