Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
File: RA6IwxN_ipFffaG1wDQcoYwsI0w.mft (raw, json)
Hash identifier: L1Nnu0VgSn2B1qUFEihDDNC45awujTl7IaZOPy2+cMM=
Subject key identifier: 86:41:BF:DB:57:7C:25:A9:16:A6:15:38:7E:9E:30:3C:41:A5:A1:1F
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Certificate issuer: /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial: 019FA8D011CF6F7A54448C4B42AA61EB56CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
Manifest number: 04F8
Signing time: Tue 28 Jul 2026 13:00:36 +0000
Manifest this update: Tue 28 Jul 2026 13:00:36 +0000
Manifest next update: Wed 29 Jul 2026 13:00:36 +0000
Files and hashes: 1: RA6IwxN_ipFffaG1wDQcoYwsI0w.crl (hash: KYsS79bfQzFdKZz6iolq7lmhHpD4Cn9FBEmd/LbDQZc=)
2: dPag7xFPzczRHzq2B8X2iWcIGDY.roa (hash: pRxwNcwkJ3uthH1oUSTy8IHhpLZnDFgmu09LUeEQ/AI=)
3: nPQEua1epz0cHI9DgWit1pT4HvM.roa (hash: 2TASnepXL6UFnC6iWgWqqNkaqCw4gJaGRhAGHMOAfig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:11:cf:6f:7a:54:44:8c:4b:42:aa:61:eb:56:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Validity
Not Before: Jul 28 13:00:36 2026 GMT
Not After : Jul 29 13:00:36 2026 GMT
Subject: CN=8641bfdb577c25a916a615387e9e303c41a5a11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:03:e2:ec:4e:2c:83:43:3f:e9:d6:66:e0:
d5:2c:ac:76:0b:d1:62:9a:e2:1f:79:0d:2c:e9:a5:
84:52:75:fb:44:f0:83:2d:c5:78:a6:7b:fc:e7:ca:
2b:4b:79:fd:16:11:cb:74:96:a2:36:8d:17:58:0e:
db:ed:b2:83:2a:a6:cd:68:da:d9:b2:b7:63:e7:04:
60:6f:73:0a:7d:89:1d:fa:ca:34:73:69:30:64:6e:
58:14:4a:f1:d5:d9:8f:c3:86:2f:00:33:59:c4:32:
1f:06:ed:19:5f:1b:77:87:74:97:7c:fa:3a:a5:ed:
14:8e:f1:2e:5e:03:3e:9d:8d:c7:43:fa:1a:68:bc:
85:49:f4:bf:a5:68:2a:5d:52:4e:f4:f7:49:2a:28:
5e:9b:81:7b:5d:88:0b:bc:71:3b:f8:18:61:43:05:
77:5d:27:a0:dc:87:2c:d4:4d:68:34:56:9e:7b:5e:
2e:0f:99:4d:28:31:1f:75:b3:ed:08:21:fc:7f:06:
0a:b4:34:40:2c:56:23:8c:55:63:78:05:5d:d9:c9:
d5:3b:9a:82:16:11:f8:c1:10:94:b9:43:a6:a7:8d:
2a:a5:9a:52:d8:b0:cf:ad:da:fe:09:0f:27:94:fb:
12:1c:15:20:7c:dc:1f:1c:e8:55:6e:8c:c0:c3:37:
99:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:41:BF:DB:57:7C:25:A9:16:A6:15:38:7E:9E:30:3C:41:A5:A1:1F
X509v3 Authority Key Identifier:
keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7c:29:90:0e:c0:1e:0e:30:98:b0:57:66:c7:d7:80:65:71:
f7:41:fc:6e:6c:bd:c3:3e:e8:53:3e:da:71:91:2a:f5:17:52:
f5:6a:3f:ae:72:d3:de:55:3b:2b:fb:2e:d7:4d:45:43:5e:05:
30:29:7f:6e:89:e1:17:ec:8d:41:85:5e:c6:49:d9:76:c3:b8:
ee:98:b2:dc:fc:50:47:f3:11:3e:a2:b8:fb:3c:39:a1:79:4f:
61:2d:b7:99:84:76:e1:8f:b0:8f:7a:e6:2a:4e:33:61:38:9b:
05:9b:f3:20:a7:e8:63:b5:fa:b2:f9:7c:05:4c:d8:99:f5:79:
7e:91:ed:95:b2:e2:80:a2:9e:e8:7c:a3:bb:e7:69:3c:a9:06:
a3:ed:38:e0:3b:13:5a:5b:b2:35:ce:85:2c:52:1e:02:ef:63:
00:c6:3f:28:af:9a:8c:ed:99:6e:0d:78:3b:f2:28:3a:12:b5:
f1:2b:98:21:9d:d9:88:fd:83:97:14:b5:cf:fb:ba:81:63:7b:
14:f3:b9:10:31:bc:27:ea:4b:db:dd:94:91:1c:96:f1:77:c8:
74:cd:f6:ef:4e:1b:74:9f:7d:ed:cd:5c:82:88:31:c3:16:9b:
f2:e5:50:58:db:0e:38:7f:cc:88:db:e4:e1:2e:f2:c2:f3:48:
92:ae:fd:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0BHPb3pURIxLQqph61bLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MGU4OGMzMTM3ZjhhOTE1ZjdkYTFiNWMwMzQxY2ExOGMy
YzIzNGMwHhcNMjYwNzI4MTMwMDM2WhcNMjYwNzI5MTMwMDM2WjAzMTEwLwYDVQQD
Eyg4NjQxYmZkYjU3N2MyNWE5MTZhNjE1Mzg3ZTllMzAzYzQxYTVhMTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5kD4uxOLINDP+nWZuDVLKx2C9Fi
muIfeQ0s6aWEUnX7RPCDLcV4pnv858orS3n9FhHLdJaiNo0XWA7b7bKDKqbNaNrZ
srdj5wRgb3MKfYkd+so0c2kwZG5YFErx1dmPw4YvADNZxDIfBu0ZXxt3h3SXfPo6
pe0UjvEuXgM+nY3HQ/oaaLyFSfS/pWgqXVJO9PdJKihem4F7XYgLvHE7+BhhQwV3
XSeg3Ics1E1oNFaee14uD5lNKDEfdbPtCCH8fwYKtDRALFYjjFVjeAVd2cnVO5qC
FhH4wRCUuUOmp40qpZpS2LDPrdr+CQ8nlPsSHBUgfNwfHOhVbozAwzeZXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZBv9tXfCWpFqYVOH6eMDxBpaEfMB8GA1UdIwQY
MBaAFEQOiMMTf4qRX32htcA0HKGMLCNMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkE2SXd4Tl9pcEZmZmFHMXdEUWNvWXdzSTB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8wNzg5YWEtOWU3My00NWVlLTkxYjYt
MTQzZmY2MGQ5OTkxLzEvUkE2SXd4Tl9pcEZmZmFHMXdEUWNvWXdzSTB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8wNzg5YWEtOWU3My00NWVlLTkxYjYtMTQzZmY2MGQ5OTkx
LzEvUkE2SXd4Tl9pcEZmZmFHMXdEUWNvWXdzSTB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3wpkA7A
Hg4wmLBXZsfXgGVx90H8bmy9wz7oUz7acZEq9RdS9Wo/rnLT3lU7K/su101FQ14F
MCl/bonhF+yNQYVexknZdsO47piy3PxQR/MRPqK4+zw5oXlPYS23mYR24Y+wj3rm
Kk4zYTibBZvzIKfoY7X6svl8BUzYmfV5fpHtlbLigKKe6Hyju+dpPKkGo+044DsT
WluyNc6FLFIeAu9jAMY/KK+ajO2Zbg14O/IoOhK18SuYIZ3ZiP2DlxS1z/u6gWN7
FPO5EDG8J+pL292UkRyW8XfIdM32704bdJ997c1cgogxwxab8uVQWNsOOH/MiNvk
4S7ywvNIkq79wA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:58:11 2026 by rpki-client