Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
File: Ra868WfDt1lCmCfQ8LeGDN8czqY.mft (raw, json)
Hash identifier: m417jfytW0wUFbECuwY/XiQRXhPQro0SVomMqyUi0GM=
Subject key identifier: 27:63:32:8D:C5:31:15:EC:8E:12:57:26:01:75:1D:07:0F:EB:63:03
Authority key identifier: 45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6
Certificate issuer: /CN=45af3af167c3b759429827d0f0b7860cdf1ccea6
Certificate serial: 019E1F10C8134DC9C54118CD8ABBD6EAF1A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
Manifest number: 017E
Signing time: Wed 13 May 2026 02:00:53 +0000
Manifest this update: Wed 13 May 2026 02:00:53 +0000
Manifest next update: Thu 14 May 2026 02:00:53 +0000
Files and hashes: 1: Ra868WfDt1lCmCfQ8LeGDN8czqY.crl (hash: ifNkxcrpTfWtNP7T5TI2wxXJubP+ECD7mFZY63TYBP0=)
2: VCWBfoKrWWkzFJ_z0Uqkl5tqGCE.asa (hash: QJPQvnGP6JgqgsggAhK1tFaR42Tpp8Mfq5dK7EmGgjQ=)
3: kwWcRmvRx5T1SfJjFcB0B4-fP7I.roa (hash: OTIeGatbvYqV42xgky/BM9cLbBpLjdn3WCjVIYmAW8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:c8:13:4d:c9:c5:41:18:cd:8a:bb:d6:ea:f1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45af3af167c3b759429827d0f0b7860cdf1ccea6
Validity
Not Before: May 13 02:00:53 2026 GMT
Not After : May 14 02:00:53 2026 GMT
Subject: CN=2763328dc53115ec8e12572601751d070feb6303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:76:2c:cc:55:54:6d:21:f5:f9:d1:d2:20:7f:
0c:d0:fc:9f:c4:e2:b7:06:ab:5a:60:6c:a6:fc:6f:
41:00:9d:f7:cb:16:47:61:9c:7c:33:e6:fe:d8:d4:
43:35:a3:b5:df:9b:23:34:05:8a:90:98:e2:6a:03:
86:a2:4d:de:88:54:21:79:57:35:8d:9b:d1:77:c3:
60:63:b5:8a:81:a5:2b:21:ae:55:58:5c:d6:d1:9c:
64:46:cb:07:1e:54:ec:6d:5e:01:d9:19:43:4e:bf:
66:5a:1a:80:4b:b7:6e:7d:5b:6b:f2:83:3f:31:8b:
ff:7a:da:e7:cd:9b:c7:c2:a3:db:ee:cf:6b:3f:f0:
34:d5:3f:ff:43:d6:18:60:60:19:fe:a7:16:16:4f:
05:5e:78:db:b8:cc:35:0b:3f:84:69:59:ef:f0:da:
5c:51:d9:06:c6:77:b4:6a:1f:69:8d:91:53:17:bf:
ff:23:cd:07:16:35:92:ae:4e:fb:59:e5:cf:f6:dd:
0e:d4:5d:00:67:f2:66:5b:bc:90:27:7d:57:65:cd:
10:c8:f9:d8:38:8a:0a:94:45:6d:5d:58:14:37:af:
a3:09:09:21:dc:bd:ba:e7:1b:7e:78:2e:fa:ab:31:
20:75:0d:a4:8c:e0:d9:b7:5a:5b:3a:51:56:d5:d2:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:63:32:8D:C5:31:15:EC:8E:12:57:26:01:75:1D:07:0F:EB:63:03
X509v3 Authority Key Identifier:
keyid:45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ea:a4:65:c1:47:6b:d0:29:ff:7c:d8:a6:96:b6:fc:f2:98:
b0:5e:04:15:0c:a9:82:05:aa:ac:be:5c:46:9c:3e:86:73:14:
82:46:e6:e0:d7:29:5c:20:35:5a:ba:77:cc:54:90:1c:8b:8a:
1d:d1:c5:f9:6d:cb:7a:6a:69:fb:62:65:03:ac:43:19:50:16:
79:67:71:27:d6:05:27:e0:da:57:12:db:21:55:57:3d:bf:39:
bc:27:61:2c:38:51:46:53:de:2d:1f:69:da:ce:88:d9:4c:48:
e8:c8:c3:df:b7:df:5a:44:18:fb:3a:49:b2:00:29:4d:fa:21:
f8:9b:3f:c8:ed:fc:97:cb:5b:cc:7d:f5:e2:fb:7e:ba:3d:16:
a4:ba:e2:82:9f:98:48:c1:de:88:2f:2d:2a:82:2d:0c:0c:c1:
e6:6b:6e:b5:5b:d5:30:57:d7:1a:8b:3c:cb:28:14:0b:7c:b5:
53:58:68:ab:c5:50:0d:3d:ac:41:cc:f9:a4:f5:52:ac:16:25:
10:6a:d3:f1:1e:1d:39:77:7b:91:03:87:16:28:d2:3f:9d:ff:
23:20:27:ba:4f:6e:9c:0a:41:c3:e9:5d:60:97:63:da:d1:e4:
2c:b1:c8:57:86:4d:5c:29:3b:86:9e:9b:b6:7f:f2:cd:0d:94:
71:32:d5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:04:19 2026 by rpki-client