Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
File: Ra868WfDt1lCmCfQ8LeGDN8czqY.mft (raw, json)
Hash identifier: 0tLQn5SNGgefMd/ANCqt6QcsfG2102xXNknxUv1xec8=
Subject key identifier: C6:9C:E9:E4:33:9F:B2:71:A1:03:5C:FC:90:48:6A:0D:11:0A:49:0C
Authority key identifier: 45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6
Certificate issuer: /CN=45af3af167c3b759429827d0f0b7860cdf1ccea6
Certificate serial: 019CA869CBBAC42AF46117D3DF8FD5FC01B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
Manifest number: BC
Signing time: Sun 01 Mar 2026 08:00:31 +0000
Manifest this update: Sun 01 Mar 2026 08:00:31 +0000
Manifest next update: Mon 02 Mar 2026 08:00:31 +0000
Files and hashes: 1: Ra868WfDt1lCmCfQ8LeGDN8czqY.crl (hash: hp/nzMmRlThWA5rFupmbMvyo2ia7gK2usJ/770JMuQQ=)
2: VCWBfoKrWWkzFJ_z0Uqkl5tqGCE.asa (hash: QJPQvnGP6JgqgsggAhK1tFaR42Tpp8Mfq5dK7EmGgjQ=)
3: kwWcRmvRx5T1SfJjFcB0B4-fP7I.roa (hash: OTIeGatbvYqV42xgky/BM9cLbBpLjdn3WCjVIYmAW8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:69:cb:ba:c4:2a:f4:61:17:d3:df:8f:d5:fc:01:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45af3af167c3b759429827d0f0b7860cdf1ccea6
Validity
Not Before: Mar 1 08:00:31 2026 GMT
Not After : Mar 2 08:00:31 2026 GMT
Subject: CN=c69ce9e4339fb271a1035cfc90486a0d110a490c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:b0:54:04:fa:85:f9:43:00:84:80:3b:b0:
25:8f:4d:54:62:48:35:6b:6a:aa:82:a4:54:d0:84:
49:01:54:ce:4a:5f:08:57:dd:58:5a:6f:a8:7e:4c:
a0:68:3e:0b:f0:a0:55:bf:f4:31:a8:76:24:32:38:
c6:45:79:f8:3e:54:cf:01:ac:20:83:7f:fe:72:70:
c4:df:62:23:0b:bf:d4:ce:be:15:d9:1b:96:b2:c7:
9a:24:10:6f:0e:d4:9d:b5:60:06:ac:cb:16:17:d7:
45:cc:e3:a0:97:0f:48:65:f2:6d:85:a7:10:2b:f7:
a8:0a:3d:7d:9d:f1:6f:aa:f1:dd:4d:ca:0d:ca:1c:
a4:4e:06:fb:70:d5:c4:ab:83:1b:9d:27:bd:bb:64:
6d:2d:b1:52:82:cd:a1:84:96:b9:06:a5:4e:69:f1:
a2:af:4f:1c:42:75:07:c9:8d:81:f0:ce:45:80:1b:
bf:c5:24:46:d9:31:13:1e:ef:9c:e4:ba:98:df:17:
69:87:b4:63:16:98:df:38:7e:b0:e1:44:1f:fc:7a:
31:e5:d0:2f:bb:ad:fc:f1:61:ba:ac:ff:d9:21:0f:
77:43:8b:0d:d5:fe:7f:ce:81:2e:df:57:43:c5:07:
da:b9:54:68:ee:ec:df:d6:90:80:15:c9:2c:bb:52:
97:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9C:E9:E4:33:9F:B2:71:A1:03:5C:FC:90:48:6A:0D:11:0A:49:0C
X509v3 Authority Key Identifier:
keyid:45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:61:c0:10:51:5e:4e:ce:e5:f4:c1:15:75:90:51:9f:0a:db:
c3:38:22:ba:89:c8:34:78:d3:c2:dd:ad:87:23:57:ed:63:76:
f8:df:e3:69:dc:58:aa:06:20:2c:8c:8b:ab:45:02:31:c0:a6:
fb:17:6f:42:05:45:19:60:b7:41:a6:73:f5:c2:91:3e:62:e7:
97:e5:2a:82:87:51:d5:73:de:df:69:3c:8b:f6:4e:60:26:e0:
6e:4f:0d:99:4b:ea:79:e9:9b:39:12:ea:31:b2:d0:b0:92:ca:
b5:07:e8:90:51:47:23:01:3e:04:8c:e0:e8:67:25:07:1e:06:
55:ff:a3:eb:2b:80:f1:19:ca:ce:08:09:9c:b9:cb:8e:6d:c8:
b1:3d:fa:e0:68:f5:63:8b:04:35:ed:22:1a:15:60:6c:4e:de:
fa:ae:91:91:dc:9e:09:7f:7d:c7:58:e8:c3:bf:ae:b7:75:4e:
51:0b:d1:21:9d:b2:bf:7e:62:c6:c2:80:a9:d1:ef:a3:86:d9:
05:ec:6e:ff:6c:3a:2e:70:ee:8a:f7:0f:74:36:b2:c3:9c:56:
c6:8b:b9:25:b7:44:06:e4:4a:b3:34:a7:ed:19:bc:96:a8:76:
53:04:5f:a1:b9:09:3d:43:b9:8a:e5:e0:02:7b:71:3c:ad:03:
cb:b9:7f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:39 2026 by rpki-client