Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
File: Ra868WfDt1lCmCfQ8LeGDN8czqY.mft (raw, json)
Hash identifier: LWg7WIEMVna+B8za3g57eHDgyBPqeZLIocTu9fVQS1I=
Subject key identifier: 5F:A4:67:A3:B6:83:4C:0D:E9:13:67:21:60:72:CD:8D:92:6B:4C:52
Authority key identifier: 45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6
Certificate issuer: /CN=45af3af167c3b759429827d0f0b7860cdf1ccea6
Certificate serial: 019FA9ABDDF25897D136C05CD0F6415F9C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
Manifest number: 024B
Signing time: Tue 28 Jul 2026 17:00:40 +0000
Manifest this update: Tue 28 Jul 2026 17:00:40 +0000
Manifest next update: Wed 29 Jul 2026 17:00:40 +0000
Files and hashes: 1: 6Rb0s8AtCA3zfURLXXadfe9zOdg.asa (hash: wU9lPmeFxxV6If+3wmabkUhGfuw5KjLh16lQhbRcCzU=)
2: Ra868WfDt1lCmCfQ8LeGDN8czqY.crl (hash: ScW+S3q5+Dv0ujBabzpBiU3/B3OzfOqmnLQhgfGL6Y4=)
3: kwWcRmvRx5T1SfJjFcB0B4-fP7I.roa (hash: OTIeGatbvYqV42xgky/BM9cLbBpLjdn3WCjVIYmAW8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:dd:f2:58:97:d1:36:c0:5c:d0:f6:41:5f:9c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45af3af167c3b759429827d0f0b7860cdf1ccea6
Validity
Not Before: Jul 28 17:00:40 2026 GMT
Not After : Jul 29 17:00:40 2026 GMT
Subject: CN=5fa467a3b6834c0de91367216072cd8d926b4c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:50:16:25:a3:20:07:a9:e6:9d:a2:c7:67:
03:e3:b3:ed:33:8e:38:08:5b:45:da:86:12:a9:e4:
45:6b:eb:2c:bc:d3:af:a0:68:2c:8a:79:a1:ab:e4:
18:d3:69:59:d1:f9:bf:b6:87:7d:92:ab:3f:7a:54:
16:f3:de:34:47:48:e9:37:a6:83:3a:12:b8:1b:72:
03:63:c2:53:e3:9e:68:be:54:76:a9:ff:77:b4:e9:
fa:24:4b:69:6d:a8:e8:a7:47:07:ec:60:5e:8a:c7:
bc:98:3e:a8:2e:46:11:b6:58:f5:18:b6:6e:71:01:
e6:d0:66:33:1d:62:cf:f6:eb:80:8e:db:9d:1e:ee:
0c:00:17:ec:74:5d:8e:d6:25:1c:da:d9:f4:83:87:
b6:40:df:b6:34:b7:43:3c:86:e2:5e:27:eb:34:2a:
dc:27:6a:d0:34:a7:66:fa:86:c0:94:e5:96:68:cf:
c9:db:53:16:e8:95:b8:90:27:61:72:68:8c:90:42:
30:58:dd:47:b6:b1:74:7a:24:97:6e:61:be:d0:1a:
b5:ca:a8:2a:b3:4b:46:df:9d:e2:66:3b:38:c5:cc:
94:fc:51:f8:70:f7:d8:d8:f4:54:61:9d:78:df:a4:
2b:55:10:e3:fa:aa:4d:e6:cc:02:27:6b:75:c9:ca:
82:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A4:67:A3:B6:83:4C:0D:E9:13:67:21:60:72:CD:8D:92:6B:4C:52
X509v3 Authority Key Identifier:
keyid:45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7c:63:1a:6f:d8:08:46:1e:25:60:70:04:8d:9f:9b:28:52:
22:ac:b3:85:78:ef:76:8b:a9:12:02:e5:e3:46:85:4f:2c:27:
57:c4:db:0b:51:d1:03:c3:87:ae:2e:46:48:60:45:34:19:5d:
50:c0:d5:0f:a5:8e:5a:a8:3f:a5:e9:46:c2:3a:0c:3c:32:5d:
ef:57:ce:15:1e:04:69:bf:25:a3:86:8c:52:64:0f:01:27:db:
2f:3e:37:d0:61:8c:04:92:85:d0:89:bc:dd:f7:98:d9:2b:f0:
9a:e0:76:89:58:1f:7c:38:da:e3:24:0c:6c:e6:c1:b9:14:81:
72:ae:af:96:4d:85:21:d3:06:cb:47:a8:d8:2f:c7:c4:48:2c:
d7:93:97:9d:9a:1e:e7:b2:3f:b0:65:06:23:73:a6:85:51:40:
b5:ea:83:68:9a:27:1a:b9:31:25:43:58:d6:c1:fd:10:e4:63:
19:09:3b:22:d8:87:eb:19:fa:df:4f:14:84:b3:e9:66:2e:da:
a6:54:b1:9a:b7:69:b4:5f:95:0f:a1:65:bc:18:9a:22:73:0f:
e6:3a:53:de:2e:ad:bc:fe:64:79:27:6d:c5:6c:ed:09:02:76:
62:4c:35:ee:04:13:04:97:62:fd:bd:b6:8c:70:de:d0:9a:5f:
0f:91:ef:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:53:15 2026 by rpki-client