Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/RACrbRbCQdJkectXvk11NNdirGQ.mft
File: RACrbRbCQdJkectXvk11NNdirGQ.mft (raw, json)
Hash identifier: raoWOfjYSH2Wooholng1/3BjQpa/XIX6DE85iobpzD4=
Subject key identifier: 22:1C:17:98:E9:6E:1D:57:B0:10:0C:9F:39:DF:F3:DC:99:97:BA:32
Authority key identifier: 44:00:AB:6D:16:C2:41:D2:64:79:CB:57:BE:4D:75:34:D7:62:AC:64
Certificate issuer: /CN=4400ab6d16c241d26479cb57be4d7534d762ac64
Certificate serial: 01A0EB1D39740F9317013B6F48A2C3BA76AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RACrbRbCQdJkectXvk11NNdirGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/RACrbRbCQdJkectXvk11NNdirGQ.mft
Manifest number: F3
Signing time: Tue 29 Sep 2026 03:02:36 +0000
Manifest this update: Tue 29 Sep 2026 03:02:36 +0000
Manifest next update: Wed 30 Sep 2026 03:02:36 +0000
Files and hashes: 1: RACrbRbCQdJkectXvk11NNdirGQ.crl (hash: WuIykIJqRHVTQGyjIQo4ozFZeKJUF3Q6hYWXh2CebZI=)
2: m5gb-w9518gstz9yjRIAUkSRK_c.roa (hash: IVTdJ1T0IcnTvVeugDeWJR+5AmWQzeWUIlOuu0Rzbp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/RACrbRbCQdJkectXvk11NNdirGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/RACrbRbCQdJkectXvk11NNdirGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RACrbRbCQdJkectXvk11NNdirGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 03:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1d:39:74:0f:93:17:01:3b:6f:48:a2:c3:ba:76:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4400ab6d16c241d26479cb57be4d7534d762ac64
Validity
Not Before: Sep 29 03:02:36 2026 GMT
Not After : Sep 30 03:02:36 2026 GMT
Subject: CN=221c1798e96e1d57b0100c9f39dff3dc9997ba32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b7:09:e9:cf:e4:83:8b:21:06:20:dc:79:cd:
58:a0:a2:c4:22:a1:e3:ee:c3:32:42:46:63:87:8e:
65:05:b9:17:1e:b9:93:37:19:b9:1c:03:c4:03:0a:
58:25:4c:df:4a:69:cc:a7:c5:25:e3:9c:ec:93:e4:
dc:cb:89:18:dd:85:cc:20:74:47:0c:10:29:4b:79:
57:f0:8e:8c:6f:b7:15:f8:e1:2b:5f:24:ee:ee:e2:
5b:70:da:04:65:1f:84:c7:e5:68:fe:9a:bd:ee:f3:
54:ab:b5:72:f8:44:14:18:5f:cc:8e:20:1f:7a:55:
5c:9c:95:32:b0:d1:55:b4:d1:8a:e6:4e:9e:97:c6:
bf:fd:98:0b:ee:b6:93:d8:cb:e2:49:e9:8e:a6:cd:
97:4f:b5:9d:75:72:f1:6d:97:ac:1f:22:af:46:d0:
4d:90:26:27:66:55:5f:de:dd:e7:c1:f4:bb:fa:cc:
6b:85:5c:7a:e4:2d:7c:94:d7:37:a8:83:36:91:70:
fc:a8:f5:fc:b9:62:33:22:83:65:d6:05:42:db:31:
8d:27:8e:2d:30:cc:e9:f4:9a:f6:c1:a6:88:69:65:
80:d3:e2:ab:bc:ab:1f:c9:91:f1:93:3e:7a:62:e4:
7a:e8:82:50:7e:5d:b8:c6:0e:74:b9:f1:5b:53:8b:
69:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1C:17:98:E9:6E:1D:57:B0:10:0C:9F:39:DF:F3:DC:99:97:BA:32
X509v3 Authority Key Identifier:
keyid:44:00:AB:6D:16:C2:41:D2:64:79:CB:57:BE:4D:75:34:D7:62:AC:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RACrbRbCQdJkectXvk11NNdirGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/RACrbRbCQdJkectXvk11NNdirGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/RACrbRbCQdJkectXvk11NNdirGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e7:3c:30:17:6f:ac:42:26:53:a3:99:82:31:db:7b:01:3f:
7b:4d:f4:ca:11:49:75:18:72:6e:e1:41:10:12:1f:5d:e8:86:
85:b2:79:11:46:f3:7e:1e:ae:ae:a9:82:49:0d:4a:98:70:f4:
ad:28:29:f9:69:50:a9:e7:02:f7:25:7f:c0:6c:32:af:09:29:
bf:21:72:cb:d4:84:12:b1:7b:73:28:08:3b:d9:97:b8:7b:65:
22:6e:73:15:12:1c:5d:92:82:de:74:c9:51:0d:45:20:17:6c:
1f:e0:e7:a5:1d:d7:92:e4:bc:15:f8:b9:68:97:be:2c:e2:b2:
47:71:79:bd:ac:2c:81:18:63:07:36:b6:ff:d0:93:22:53:d5:
57:07:f0:7d:63:83:28:ea:03:e1:44:53:9d:a1:88:1b:bd:d5:
0b:cf:2d:fd:79:a6:fb:8d:ff:69:3d:a8:42:16:ba:0f:d4:10:
46:c6:5f:d3:ba:bc:82:07:fa:0b:83:eb:b3:af:35:b8:ac:63:
fd:55:df:09:bb:e6:cb:55:a2:c0:8a:8d:9d:42:59:c9:f1:21:
56:19:1b:97:72:38:24:f2:b6:52:61:df:ce:30:39:e8:8d:83:
2b:60:99:f5:88:63:a2:17:9f:93:44:bd:27:5d:6e:15:3c:0b:
99:02:ec:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrHTl0D5MXATtvSKLDunasMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MDBhYjZkMTZjMjQxZDI2NDc5Y2I1N2JlNGQ3NTM0ZDc2
MmFjNjQwHhcNMjYwOTI5MDMwMjM2WhcNMjYwOTMwMDMwMjM2WjAzMTEwLwYDVQQD
EygyMjFjMTc5OGU5NmUxZDU3YjAxMDBjOWYzOWRmZjNkYzk5OTdiYTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLcJ6c/kg4shBiDcec1YoKLEIqHj
7sMyQkZjh45lBbkXHrmTNxm5HAPEAwpYJUzfSmnMp8Ul45zsk+Tcy4kY3YXMIHRH
DBApS3lX8I6Mb7cV+OErXyTu7uJbcNoEZR+Ex+Vo/pq97vNUq7Vy+EQUGF/MjiAf
elVcnJUysNFVtNGK5k6el8a//ZgL7raT2MviSemOps2XT7WddXLxbZesHyKvRtBN
kCYnZlVf3t3nwfS7+sxrhVx65C18lNc3qIM2kXD8qPX8uWIzIoNl1gVC2zGNJ44t
MMzp9Jr2waaIaWWA0+KrvKsfyZHxkz56YuR66IJQfl24xg50ufFbU4tphQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIcF5jpbh1XsBAMnznf89yZl7oyMB8GA1UdIwQY
MBaAFEQAq20WwkHSZHnLV75NdTTXYqxkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkFDcmJSYkNRZEprZWN0WHZrMTFOTmRpckdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iYTdmZDYtYjNhOC00OTMxLWFjMDUt
YWI0ODg3YzYzZWE1LzEvUkFDcmJSYkNRZEprZWN0WHZrMTFOTmRpckdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9iYTdmZDYtYjNhOC00OTMxLWFjMDUtYWI0ODg3YzYzZWE1
LzEvUkFDcmJSYkNRZEprZWN0WHZrMTFOTmRpckdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOc8MBdv
rEImU6OZgjHbewE/e030yhFJdRhybuFBEBIfXeiGhbJ5EUbzfh6urqmCSQ1KmHD0
rSgp+WlQqecC9yV/wGwyrwkpvyFyy9SEErF7cygIO9mXuHtlIm5zFRIcXZKC3nTJ
UQ1FIBdsH+DnpR3XkuS8Ffi5aJe+LOKyR3F5vawsgRhjBza2/9CTIlPVVwfwfWOD
KOoD4URTnaGIG73VC88t/Xmm+43/aT2oQha6D9QQRsZf07q8ggf6C4Prs681uKxj
/VXfCbvmy1WiwIqNnUJZyfEhVhkbl3I4JPK2UmHfzjA56I2DK2CZ9Yhjohefk0S9
J11uFTwLmQLsUg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 13:35:48 2026 by rpki-client