Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
File: RA6IwxN_ipFffaG1wDQcoYwsI0w.mft (raw, json)
Hash identifier: zL23sJ+Gm3xfxbFp1uC4m6a/OXtjk8GTgWqa1EtmU1s=
Subject key identifier: 9F:B8:19:11:5C:4E:F5:E7:54:C4:26:7F:4F:A5:7F:4E:91:12:08:F0
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Certificate issuer: /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial: 019D992B2402F4674C27BEE8C3EC65E83964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
Manifest number: 03E5
Signing time: Fri 17 Apr 2026 02:00:34 +0000
Manifest this update: Fri 17 Apr 2026 02:00:34 +0000
Manifest next update: Sat 18 Apr 2026 02:00:34 +0000
Files and hashes: 1: DhnVxA5epBkWnt3PDulS5ypiRRE.roa (hash: cV+0Z4XARQ4usZE3nfMuQg0VGiGEUn16U9an0D+YjNU=)
2: RA6IwxN_ipFffaG1wDQcoYwsI0w.crl (hash: hyuBgWs6bpk4DMEbgHMqagakefObMP+H5y2i5ODxrPQ=)
3: nPQEua1epz0cHI9DgWit1pT4HvM.roa (hash: 2TASnepXL6UFnC6iWgWqqNkaqCw4gJaGRhAGHMOAfig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:24:02:f4:67:4c:27:be:e8:c3:ec:65:e8:39:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Validity
Not Before: Apr 17 02:00:34 2026 GMT
Not After : Apr 18 02:00:34 2026 GMT
Subject: CN=9fb819115c4ef5e754c4267f4fa57f4e911208f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ea:9d:da:ba:9c:c0:7d:9b:d0:63:67:6e:e7:
b5:f1:79:ce:82:9b:8b:f1:71:1c:33:1f:22:04:fb:
84:89:2c:c1:72:9b:7f:6e:fd:bc:7f:aa:78:60:8c:
72:dd:a9:8c:01:1d:55:a4:2f:b5:c6:5f:02:ab:ac:
26:2f:49:fd:a0:96:00:b2:ad:db:eb:31:82:53:a3:
3e:9c:04:ec:6c:b2:2b:a7:19:dc:bf:fd:b6:7a:90:
c0:7e:50:35:58:43:20:76:a6:6a:3e:64:64:97:73:
ba:b6:52:da:dc:58:64:f1:33:a5:8d:32:2b:8e:fe:
7e:45:ce:b0:7e:fc:c7:76:4e:06:b3:80:9c:b8:4e:
ca:a5:19:b9:34:d4:d3:f6:2c:93:01:3e:78:25:2b:
94:64:6a:e0:e5:e0:de:3f:8a:66:b3:85:20:17:ac:
83:a0:2a:42:b8:d9:2d:64:5c:5b:b4:de:8e:b9:22:
7c:06:29:ae:44:b0:a0:02:b1:2f:90:0f:93:8c:b7:
f1:1a:d8:3b:b5:88:e0:b1:e6:12:91:87:52:ba:4e:
e4:64:4c:ef:61:61:d4:97:eb:5a:39:7a:03:32:2e:
47:2c:70:ca:79:77:ff:93:93:95:72:17:84:f9:3d:
0c:57:8d:ab:a9:6a:0b:d7:53:28:2e:83:a0:4e:2e:
6b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B8:19:11:5C:4E:F5:E7:54:C4:26:7F:4F:A5:7F:4E:91:12:08:F0
X509v3 Authority Key Identifier:
keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:12:4f:ba:1d:6e:a9:87:b7:a0:b9:7d:40:61:79:3d:9d:03:
e2:ac:cc:cd:22:4a:5d:67:28:4a:9e:20:82:28:1c:0f:42:b8:
1e:c7:76:81:ec:00:32:f8:99:eb:6d:eb:51:0f:eb:fc:d3:6c:
b7:66:45:ee:3f:0b:c7:0b:29:2a:bc:77:6a:2e:96:e4:9e:37:
66:e1:f5:2c:4b:87:b0:0a:12:0f:89:98:a1:90:70:0b:bd:e6:
3b:c8:49:e4:2c:c6:e2:af:42:8b:f2:29:67:b3:3e:79:ff:5f:
e9:0d:c7:b3:d3:27:80:4c:31:2d:86:62:01:84:ed:77:49:b2:
92:b2:a1:82:ff:9b:8e:64:04:8b:ef:38:7f:93:d5:2b:70:04:
75:c2:18:4d:9a:93:a5:e2:1a:f8:5c:f3:eb:ce:54:a3:56:cb:
ec:d7:c6:cb:0a:e5:96:0b:f8:b5:d4:5c:66:e6:a4:d3:e5:a9:
cb:6f:ef:1e:13:f4:07:64:45:9f:42:88:1b:c4:fd:17:27:f6:
0b:a9:72:ac:34:bd:2c:bf:0e:68:ee:be:ba:5e:bb:e6:54:21:
b8:32:d7:84:19:08:14:33:1c:58:c0:5c:6f:dc:96:02:37:fc:
80:5d:3d:7d:35:dd:f7:41:48:29:c5:c5:fc:e6:38:c3:b8:1d:
f0:2f:22:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:40:19 2026 by rpki-client