Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
File: Ra868WfDt1lCmCfQ8LeGDN8czqY.mft (raw, json)
Hash identifier: DkUTCXaInOdkcJoo7bDQkqQv9FEt8wpM28h3jczRN00=
Subject key identifier: C5:C2:D8:37:F3:09:72:12:A1:DA:27:DB:2D:95:EE:F2:3C:A2:06:AC
Authority key identifier: 45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6
Certificate issuer: /CN=45af3af167c3b759429827d0f0b7860cdf1ccea6
Certificate serial: 019EBF5A25FEA64EC25A86F77234EB89F135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
Manifest number: 01D1
Signing time: Sat 13 Jun 2026 05:00:16 +0000
Manifest this update: Sat 13 Jun 2026 05:00:16 +0000
Manifest next update: Sun 14 Jun 2026 05:00:16 +0000
Files and hashes: 1: Ra868WfDt1lCmCfQ8LeGDN8czqY.crl (hash: Hoy9pL7i+AfIQHjauGhUEhYAPpDvJj7xnPf/mZM8J64=)
2: VCWBfoKrWWkzFJ_z0Uqkl5tqGCE.asa (hash: QJPQvnGP6JgqgsggAhK1tFaR42Tpp8Mfq5dK7EmGgjQ=)
3: kwWcRmvRx5T1SfJjFcB0B4-fP7I.roa (hash: OTIeGatbvYqV42xgky/BM9cLbBpLjdn3WCjVIYmAW8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:25:fe:a6:4e:c2:5a:86:f7:72:34:eb:89:f1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45af3af167c3b759429827d0f0b7860cdf1ccea6
Validity
Not Before: Jun 13 05:00:16 2026 GMT
Not After : Jun 14 05:00:16 2026 GMT
Subject: CN=c5c2d837f3097212a1da27db2d95eef23ca206ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6e:86:40:1b:78:d8:c1:90:82:e6:c1:95:45:
21:01:57:2b:99:a1:59:99:79:6e:54:12:79:80:3a:
f3:23:98:c6:77:06:80:87:97:1f:7b:c9:64:42:21:
71:c9:14:ba:2e:e9:67:55:38:7e:a7:bb:56:41:01:
fa:89:9f:45:f5:f5:32:f2:45:14:70:bc:2d:5b:e9:
69:33:af:e1:de:b7:91:46:62:d7:81:c6:cb:73:08:
5d:6c:e6:ac:85:3b:73:a9:05:f5:95:0a:50:fa:95:
1f:4e:2b:eb:b5:76:f1:bc:98:c0:37:0e:5b:77:2f:
7b:15:f2:e9:f0:c4:de:37:1d:8e:9e:56:e6:fa:3e:
6f:63:5a:d5:5f:ee:5e:45:27:88:23:15:b7:08:2b:
f4:f4:95:21:eb:af:cc:4a:4d:c5:6d:a1:8e:b9:c4:
f5:ca:e3:51:1b:5e:07:01:9d:54:5f:8f:38:65:de:
53:24:26:89:4c:28:e9:d1:d2:4c:e2:6a:be:af:61:
5e:f5:d3:0a:26:1e:b8:ab:6b:22:47:73:f3:e1:0f:
9d:1f:a3:b1:56:96:d7:1a:5d:b6:98:6d:41:6d:38:
dc:d1:e1:9b:59:8b:2c:eb:65:bc:8d:c3:41:fa:a5:
65:f8:8a:61:fa:d1:5f:82:ae:23:f4:cc:58:6e:25:
9c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C2:D8:37:F3:09:72:12:A1:DA:27:DB:2D:95:EE:F2:3C:A2:06:AC
X509v3 Authority Key Identifier:
keyid:45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:94:74:fb:11:b0:c1:8e:a4:4d:df:48:45:f0:ee:53:2b:05:
c9:65:2d:2b:c4:fa:18:35:f8:44:cd:42:d0:8d:e5:52:fa:d3:
ca:b7:65:f6:9b:54:f5:d7:a0:be:33:ce:e5:af:3a:c5:7e:5e:
20:f0:b8:ff:07:9d:1c:01:a6:76:74:c3:cb:19:80:a6:b6:9d:
3d:14:5a:2f:b1:df:cc:cb:db:d9:0c:aa:32:6c:f4:18:ea:8c:
72:2f:da:b3:cf:d1:4d:fe:3a:b0:15:e6:4a:96:0b:fd:1c:55:
31:a3:d8:21:09:c9:f9:b9:66:ba:49:54:8d:88:f5:27:38:ab:
b1:e6:75:14:b3:10:eb:8a:63:db:b8:71:e9:08:0d:66:1b:b8:
bc:c1:1a:9b:94:f4:ea:28:41:17:2d:69:18:0f:ca:01:cc:f4:
24:a8:bb:fc:29:60:71:99:67:80:5e:fe:ea:57:ed:28:22:60:
57:6a:27:c7:39:f6:08:0a:3d:84:eb:d7:ee:f0:04:07:b6:d2:
7d:dd:bb:31:3e:0b:58:0c:09:d4:52:12:cb:3d:98:f3:cf:70:
22:ec:2d:d5:3f:51:df:4e:fa:a1:3d:da:6b:77:1f:20:02:03:
4a:31:f0:11:a7:8f:1d:4d:e5:ac:9d:81:b1:3e:af:62:6b:a6:
44:7d:36:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WiX+pk7CWob3cjTrifE1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YWYzYWYxNjdjM2I3NTk0Mjk4MjdkMGYwYjc4NjBjZGYx
Y2NlYTYwHhcNMjYwNjEzMDUwMDE2WhcNMjYwNjE0MDUwMDE2WjAzMTEwLwYDVQQD
EyhjNWMyZDgzN2YzMDk3MjEyYTFkYTI3ZGIyZDk1ZWVmMjNjYTIwNmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG6GQBt42MGQgubBlUUhAVcrmaFZ
mXluVBJ5gDrzI5jGdwaAh5cfe8lkQiFxyRS6LulnVTh+p7tWQQH6iZ9F9fUy8kUU
cLwtW+lpM6/h3reRRmLXgcbLcwhdbOashTtzqQX1lQpQ+pUfTivrtXbxvJjANw5b
dy97FfLp8MTeNx2Onlbm+j5vY1rVX+5eRSeIIxW3CCv09JUh66/MSk3FbaGOucT1
yuNRG14HAZ1UX484Zd5TJCaJTCjp0dJM4mq+r2Fe9dMKJh64q2siR3Pz4Q+dH6Ox
VpbXGl22mG1BbTjc0eGbWYss62W8jcNB+qVl+Iph+tFfgq4j9MxYbiWcKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXC2DfzCXISodon2y2V7vI8ogasMB8GA1UdIwQY
MBaAFEWvOvFnw7dZQpgn0PC3hgzfHM6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmE4NjhXZkR0MWxDbUNmUThMZUdETjhjenFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yNDBjMmEtMWViYi00ODQ0LTg0MTQt
NjY5N2U0MGIwOTAzLzEvUmE4NjhXZkR0MWxDbUNmUThMZUdETjhjenFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8yNDBjMmEtMWViYi00ODQ0LTg0MTQtNjY5N2U0MGIwOTAz
LzEvUmE4NjhXZkR0MWxDbUNmUThMZUdETjhjenFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJR0+xGw
wY6kTd9IRfDuUysFyWUtK8T6GDX4RM1C0I3lUvrTyrdl9ptU9degvjPO5a86xX5e
IPC4/wedHAGmdnTDyxmApradPRRaL7HfzMvb2QyqMmz0GOqMci/as8/RTf46sBXm
SpYL/RxVMaPYIQnJ+blmuklUjYj1JzirseZ1FLMQ64pj27hx6QgNZhu4vMEam5T0
6ihBFy1pGA/KAcz0JKi7/ClgcZlngF7+6lftKCJgV2onxzn2CAo9hOvX7vAEB7bS
fd27MT4LWAwJ1FISyz2Y889wIuwt1T9R3076oT3aa3cfIAIDSjHwEaePHU3lrJ2B
sT6vYmumRH02cQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:38:32 2026 by rpki-client