Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
File: RA6IwxN_ipFffaG1wDQcoYwsI0w.mft (raw, json)
Hash identifier: 0LvcFBPNEB/n9QU0Bc4rjMielyCc8cz0kFSx/TXPviY=
Subject key identifier: 6E:3E:A9:1E:64:F3:76:37:8B:B7:5D:EC:D6:B8:BD:A6:54:96:D5:3B
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Certificate issuer: /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial: 019CAF7F0DC5FFD7BE05083CED8776CB2984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
Manifest number: 036C
Signing time: Mon 02 Mar 2026 17:01:05 +0000
Manifest this update: Mon 02 Mar 2026 17:01:05 +0000
Manifest next update: Tue 03 Mar 2026 17:01:05 +0000
Files and hashes: 1: DhnVxA5epBkWnt3PDulS5ypiRRE.roa (hash: cV+0Z4XARQ4usZE3nfMuQg0VGiGEUn16U9an0D+YjNU=)
2: RA6IwxN_ipFffaG1wDQcoYwsI0w.crl (hash: O/Fof4JNrkgV2SvNbFmvCvrTvcZm2HM6oQ6i7Ft+oBE=)
3: nPQEua1epz0cHI9DgWit1pT4HvM.roa (hash: 2TASnepXL6UFnC6iWgWqqNkaqCw4gJaGRhAGHMOAfig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7f:0d:c5:ff:d7:be:05:08:3c:ed:87:76:cb:29:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Validity
Not Before: Mar 2 17:01:05 2026 GMT
Not After : Mar 3 17:01:05 2026 GMT
Subject: CN=6e3ea91e64f376378bb75decd6b8bda65496d53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bb:d0:15:c2:c2:9d:ec:69:0e:7c:eb:32:11:
58:94:cf:60:c9:dd:26:fb:23:5d:08:e4:f4:ce:9d:
6e:c5:67:f8:7b:7e:47:0e:b9:cf:cc:04:17:0b:f8:
29:59:f5:d7:ca:df:8c:47:00:33:59:f8:09:98:65:
e2:0c:4c:41:76:a5:92:d0:94:4e:0e:a3:77:da:4c:
ce:69:88:a5:6d:d0:92:25:08:d9:d9:a9:28:b4:8a:
dd:f0:2a:a2:87:15:06:48:9c:69:d7:ef:4a:26:cc:
e5:2e:22:9c:e7:52:40:a7:09:fd:67:e7:36:b2:9d:
ee:e3:30:df:82:ac:81:1a:35:52:1e:e7:1e:96:89:
2f:79:76:a5:fd:81:64:04:fd:14:54:7e:a4:aa:51:
ca:66:c5:8e:c5:b7:e4:22:70:c3:1e:15:fe:42:7f:
67:81:bf:e3:40:8c:b4:d2:98:ba:9e:a1:ec:bd:79:
ca:12:e3:ee:63:f3:72:aa:74:02:34:70:b3:89:28:
10:ba:30:4b:21:4b:22:94:99:0e:b9:c9:de:19:c2:
04:58:aa:be:5f:5f:42:3d:66:ef:94:3d:40:b5:fb:
b4:2c:a2:6d:4f:a3:04:32:c9:d4:3a:16:23:ff:d3:
11:4f:ac:4d:19:4c:d1:b4:93:c9:51:f7:f1:2d:b0:
1e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3E:A9:1E:64:F3:76:37:8B:B7:5D:EC:D6:B8:BD:A6:54:96:D5:3B
X509v3 Authority Key Identifier:
keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:97:38:83:43:e4:fb:91:ad:47:03:4d:c5:6a:72:88:6c:43:
27:f4:ec:53:0a:78:31:b1:8f:07:b5:fa:49:79:80:d8:b4:a3:
5d:ee:ad:05:dc:ba:0e:f8:f9:d1:f8:07:f4:9d:36:d5:ac:c5:
9e:ad:7f:2d:a8:e5:ac:53:fb:1a:f0:1a:f4:a6:ff:1b:1a:c7:
ac:c8:34:3f:6c:ee:e6:91:e1:7f:6f:4a:f0:f8:8e:b3:a5:1e:
d8:c6:58:f2:0e:37:44:dc:92:1b:82:f7:ba:cc:49:16:d2:66:
02:1f:44:45:d0:4a:49:60:4e:34:a1:66:e2:11:7c:c8:7d:e4:
32:8e:a2:da:4d:4a:ef:8b:a1:33:37:ea:7a:ed:1d:c7:b6:fc:
9a:a2:a8:7a:ae:1f:67:34:aa:ff:56:c3:89:1e:78:67:87:5a:
d5:51:8d:b3:57:2a:a4:d5:6b:c9:7b:2c:1d:29:d9:12:84:f9:
fc:73:ce:78:d9:25:79:ba:c0:dd:71:ca:f6:02:5f:0b:fb:1b:
29:a9:b5:dc:4d:63:28:a1:67:b5:b6:1c:4e:e2:55:92:77:45:
46:fc:18:97:ae:ab:02:75:20:04:13:14:4d:7f:c5:e1:23:f3:
a6:a2:9d:12:4d:c3:0e:b5:5a:3c:1d:a8:f4:b9:d6:23:71:b4:
17:54:df:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:01:43 2026 by rpki-client