Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
File: RA6IwxN_ipFffaG1wDQcoYwsI0w.mft (raw, json)
Hash identifier: JBqBQJTA8U6ynIALNq7CEvcIkMVJMDgRjygEYrmyPZQ=
Subject key identifier: 9A:EC:7F:9F:C0:5E:AB:95:0C:18:1A:71:95:A2:22:00:E0:F1:39:B6
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Certificate issuer: /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial: 01A0DBDFDC61C0AE9D3EC2F6D17FA0420331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
Manifest number: 0597
Signing time: Sat 26 Sep 2026 04:01:16 +0000
Manifest this update: Sat 26 Sep 2026 04:01:16 +0000
Manifest next update: Sun 27 Sep 2026 04:01:16 +0000
Files and hashes: 1: RA6IwxN_ipFffaG1wDQcoYwsI0w.crl (hash: mIsrYhsZf0aiH1wvvcXQYoAiCKLXx91TvWi/MH37z2s=)
2: dPag7xFPzczRHzq2B8X2iWcIGDY.roa (hash: pRxwNcwkJ3uthH1oUSTy8IHhpLZnDFgmu09LUeEQ/AI=)
3: nPQEua1epz0cHI9DgWit1pT4HvM.roa (hash: 2TASnepXL6UFnC6iWgWqqNkaqCw4gJaGRhAGHMOAfig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:df:dc:61:c0:ae:9d:3e:c2:f6:d1:7f:a0:42:03:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Validity
Not Before: Sep 26 04:01:16 2026 GMT
Not After : Sep 27 04:01:16 2026 GMT
Subject: CN=9aec7f9fc05eab950c181a7195a22200e0f139b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:72:b7:bf:27:d2:f5:e0:ed:cb:b5:b5:40:
99:1c:de:6e:f8:1f:f8:e3:1f:e9:e0:ce:ef:7c:db:
e4:be:70:a0:c4:8b:32:f0:5f:7b:10:9f:4d:c5:9c:
8f:88:5a:29:8e:0c:46:4d:dc:f4:23:7c:d6:8c:6a:
85:74:ae:b5:15:9d:7b:16:47:5a:4d:91:4b:23:a4:
3f:99:8c:b3:3b:82:5e:33:28:7e:a8:5b:98:41:99:
8f:85:25:89:b1:b6:97:b2:a7:dc:f3:7c:26:65:e3:
13:7b:25:f0:1f:a6:e1:56:78:f9:b5:0d:f4:44:64:
6d:48:04:c7:e0:37:7c:53:6b:3a:db:24:68:68:3f:
8d:a4:47:6a:e8:b5:20:63:e1:d7:ac:4b:dc:6d:1e:
95:65:7e:71:8b:f9:ac:ba:6b:1f:84:25:91:e0:10:
62:16:23:99:f7:b0:04:d7:8c:03:ca:40:07:55:22:
b1:6c:7a:65:45:b2:a3:4a:1d:78:20:34:44:a0:29:
e6:90:03:63:9a:ab:ea:b6:ea:09:b6:d6:06:91:6a:
03:45:37:82:7b:82:5b:64:7e:53:66:9a:12:be:c2:
08:77:9b:ac:e3:d6:eb:3a:bb:c8:f3:aa:3b:00:c1:
61:d0:1d:ed:25:90:a0:8d:e3:35:a4:bf:28:a4:5c:
e3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EC:7F:9F:C0:5E:AB:95:0C:18:1A:71:95:A2:22:00:E0:F1:39:B6
X509v3 Authority Key Identifier:
keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:03:3d:d6:1a:fc:92:ce:9d:e7:4a:4a:a0:86:54:0d:28:2d:
51:16:ee:d0:a7:24:5f:cf:59:6c:1c:71:54:b3:e3:83:49:44:
e9:21:70:42:2f:77:15:8f:5d:0e:bd:50:37:33:91:13:c4:d5:
f3:ba:29:30:d2:a5:21:ed:d3:fb:6e:03:d1:17:2e:d3:8c:a5:
cd:3d:f7:3d:c8:30:4e:37:5c:33:1c:ca:e1:c6:c3:54:21:31:
5d:fa:f9:39:e9:93:01:60:ea:1a:40:20:fd:90:c3:53:26:f4:
92:8b:75:50:30:a4:aa:1d:a9:73:b9:22:2f:40:73:cc:b6:39:
a8:2b:34:bf:92:13:eb:e8:8d:a1:2a:b3:b7:af:60:88:97:9e:
c9:9e:b1:ae:7c:31:03:79:59:52:a8:20:5b:cb:f1:c1:49:27:
25:5f:45:af:66:25:1c:88:db:39:f3:72:f7:6a:0e:ac:c7:aa:
08:ec:42:45:25:67:17:fe:d8:7e:dc:b3:86:b8:c1:ec:a0:7b:
e3:df:ef:29:12:9c:95:44:29:d7:4e:e3:04:5e:8b:1e:f2:0d:
02:02:6d:ad:3a:62:14:c2:69:94:dc:ef:23:1c:0e:cf:47:47:
45:c5:5d:42:41:02:a6:09:63:bb:01:79:34:02:bd:1e:e8:0e:
53:47:14:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:18:56 2026 by rpki-client