Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
File: Ra868WfDt1lCmCfQ8LeGDN8czqY.mft (raw, json)
Hash identifier: UH3K1jwoyyg8sVQ988VvAU8IBkJOFFPQjgRqcqvsKYc=
Subject key identifier: CA:CB:C2:22:08:C2:DE:3B:F7:E4:28:8E:5D:D8:91:75:11:6C:85:F9
Authority key identifier: 45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6
Certificate issuer: /CN=45af3af167c3b759429827d0f0b7860cdf1ccea6
Certificate serial: 019D25F189C9872E20BFE144B0E6C717A35F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
Manifest number: FD
Signing time: Wed 25 Mar 2026 17:01:19 +0000
Manifest this update: Wed 25 Mar 2026 17:01:19 +0000
Manifest next update: Thu 26 Mar 2026 17:01:19 +0000
Files and hashes: 1: Ra868WfDt1lCmCfQ8LeGDN8czqY.crl (hash: px6E/B9/4SYZW7gt6eNX6l7T+qLkbEcw/BheTFIR+RU=)
2: VCWBfoKrWWkzFJ_z0Uqkl5tqGCE.asa (hash: QJPQvnGP6JgqgsggAhK1tFaR42Tpp8Mfq5dK7EmGgjQ=)
3: kwWcRmvRx5T1SfJjFcB0B4-fP7I.roa (hash: OTIeGatbvYqV42xgky/BM9cLbBpLjdn3WCjVIYmAW8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:89:c9:87:2e:20:bf:e1:44:b0:e6:c7:17:a3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45af3af167c3b759429827d0f0b7860cdf1ccea6
Validity
Not Before: Mar 25 17:01:19 2026 GMT
Not After : Mar 26 17:01:19 2026 GMT
Subject: CN=cacbc22208c2de3bf7e4288e5dd89175116c85f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:6e:bc:4f:ce:55:af:0c:9d:0f:60:72:48:
c7:7c:c8:ca:81:02:88:b9:fd:2d:de:77:44:13:0a:
59:43:fd:38:68:91:38:40:e0:e1:83:f7:f0:65:3d:
9a:92:45:6b:7e:39:3a:50:ec:86:e1:75:41:a6:59:
62:8f:b6:34:a2:da:ab:71:ab:ff:ae:83:76:aa:58:
9f:1b:bb:67:46:21:eb:ec:8b:cd:c2:f5:9d:7f:00:
10:1d:eb:51:1b:1e:40:be:2a:57:e4:7d:1c:b4:0c:
78:80:f8:64:79:bb:bb:c4:c6:90:b6:c1:44:b2:9d:
cf:24:85:c0:28:dd:3a:f5:49:71:ff:e4:b4:e0:e1:
22:b0:6b:8b:7d:15:1f:65:2c:c1:d6:7a:c9:6a:e6:
63:84:dc:73:45:85:54:b6:63:b6:62:f7:2c:5b:9f:
bd:4c:a9:56:eb:55:ef:b4:da:8e:04:96:a9:45:fa:
ca:cf:c7:a9:a3:ec:69:f1:42:07:71:8a:fb:a4:7b:
37:9f:ed:66:0f:c2:31:33:04:fb:3a:a1:a2:e7:36:
b4:f8:4f:7e:b3:c2:e2:54:97:bc:3b:41:24:33:e4:
fb:ab:11:84:f9:63:19:66:43:8b:70:e1:df:af:0d:
a3:84:56:2a:d8:ed:2f:d5:20:6f:05:cc:9a:76:3b:
f0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CB:C2:22:08:C2:DE:3B:F7:E4:28:8E:5D:D8:91:75:11:6C:85:F9
X509v3 Authority Key Identifier:
keyid:45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d2:47:4b:cc:93:ae:d4:d2:d0:58:02:8d:c8:a5:9f:f7:2f:
f3:8d:ee:19:22:36:5a:3d:09:40:10:84:c2:a3:a7:25:58:84:
66:4d:59:4b:03:98:b2:56:81:0d:96:66:29:83:26:2e:f6:97:
c1:7a:85:f7:9e:d9:6e:76:31:ad:c2:a4:81:7c:7f:d2:c5:78:
2e:69:1d:14:0b:48:61:2c:08:2f:53:a8:42:54:83:c7:3b:b3:
17:b4:bc:08:8b:12:c7:4b:2e:17:67:4f:a0:a0:2a:7a:01:ff:
08:80:b1:7f:31:95:ac:14:d3:9c:81:c0:fd:2a:68:fa:64:5e:
1d:1b:8e:3d:23:a3:71:1e:c9:89:1d:e1:0e:69:49:f9:4e:0b:
87:b4:7d:44:32:23:fd:1e:b2:46:a9:9b:3f:e2:7a:71:47:11:
ab:f2:7c:bd:8f:a4:9b:cd:72:6d:8a:88:07:b3:b4:f5:eb:0e:
c0:49:36:05:c3:6c:42:7a:36:46:89:45:1b:e5:3f:01:34:55:
40:83:64:22:68:43:25:f1:62:01:6e:9a:2a:0b:da:e8:5f:67:
f4:51:21:9f:0a:e8:27:e5:9a:3e:82:bc:60:16:60:e1:75:10:
ea:81:99:20:4b:95:53:71:f0:04:e7:e1:be:6b:e9:bf:fb:b5:
90:ff:a1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:45:11 2026 by rpki-client