Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
File: rf_xvXcSh87UxN1tioUdKtdwZh0.mft (raw, json)
Hash identifier: 426JNIdoebK8Y++kZrVwGAcezcYjLjiP9z1cMtLileo=
Subject key identifier: 28:DE:6A:92:A0:DB:AF:E7:F4:76:1E:4C:8E:31:24:1D:B1:57:57:58
Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
Certificate issuer: /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Certificate serial: 019D09D53E2E9748F2D0B816A17D2CA3384D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
Manifest number: 187A
Signing time: Fri 20 Mar 2026 06:01:03 +0000
Manifest this update: Fri 20 Mar 2026 06:01:03 +0000
Manifest next update: Sat 21 Mar 2026 06:01:03 +0000
Files and hashes: 1: YHt9YKkoQObFkpk4bFMfaZH83j0.roa (hash: 4fsNZayDAjiJa4ZZH0ABpTRn6fHRN9+IikwCGEjvWBc=)
2: rf_xvXcSh87UxN1tioUdKtdwZh0.crl (hash: R/LKh2u46UUagpkP4a3JaJuySzxmOK6ls8Cqyt6xkHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:09:d5:3e:2e:97:48:f2:d0:b8:16:a1:7d:2c:a3:38:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Validity
Not Before: Mar 20 06:01:03 2026 GMT
Not After : Mar 21 06:01:03 2026 GMT
Subject: CN=28de6a92a0dbafe7f4761e4c8e31241db1575758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d4:1f:f7:56:da:97:6a:b4:a3:31:29:a0:99:
a1:ba:4c:f4:97:f5:35:19:c5:4c:61:9e:68:ca:6c:
6a:e4:c5:80:9f:d8:57:d7:d0:19:78:b6:76:2b:3a:
9e:ec:be:90:77:da:0b:15:2d:1d:fb:c0:62:c5:5c:
e5:bc:fc:48:86:25:cd:64:55:93:76:7f:e1:41:63:
d3:99:cc:18:62:56:f8:97:55:eb:e2:32:5e:6e:51:
97:0d:fb:df:b5:e4:4f:62:64:40:7a:d2:76:47:98:
bd:cb:90:e0:3d:15:56:01:89:45:8c:29:b7:48:86:
04:64:7a:4a:fb:88:6e:35:58:69:b9:a3:82:9e:16:
17:25:70:74:fd:f1:46:a6:13:c2:ad:ed:c4:2f:d0:
e5:8e:27:64:8d:51:1a:e2:bf:16:8c:b0:0e:cf:57:
8f:b1:5c:34:26:91:d4:11:f3:11:08:12:01:5b:30:
aa:2d:cb:cb:5e:00:1e:20:c6:4a:22:6f:d7:11:70:
49:72:7d:4f:d6:f8:77:1d:d4:3c:6c:93:47:1f:81:
b1:8b:c5:6f:50:43:37:74:64:6e:82:86:45:dd:fe:
cb:13:4b:8c:12:bc:ba:90:6b:6b:04:03:4b:bb:d8:
85:01:4b:f4:87:8c:81:a4:30:70:a5:2d:d8:06:7b:
74:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DE:6A:92:A0:DB:AF:E7:F4:76:1E:4C:8E:31:24:1D:B1:57:57:58
X509v3 Authority Key Identifier:
keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:95:d1:c6:8b:32:a1:a7:9c:4d:4f:80:67:f4:12:a2:73:53:
23:f4:14:0d:0f:f9:ba:25:81:60:03:2f:55:fa:52:7d:b7:4e:
64:20:8b:6f:35:f3:e9:82:c0:76:f5:79:94:47:82:e6:9f:b2:
ff:6d:fe:e7:e7:db:be:d6:25:e4:67:a2:9b:69:f7:fa:b0:1c:
9a:d1:82:57:f6:43:da:48:c0:a4:8e:91:1f:f9:ba:4f:ca:82:
2e:63:67:bf:38:d2:08:9d:ed:1d:a6:56:93:93:a5:60:0a:44:
23:41:46:c9:2c:e1:87:6a:9a:26:f9:d0:0f:dc:f4:cd:70:7e:
ca:6c:c8:f9:6c:cb:b6:be:cc:ec:9a:59:3a:49:c0:1f:45:96:
3d:13:c3:8e:5e:86:5e:6d:8e:20:cb:42:2e:ee:77:df:37:69:
7c:2f:f4:1d:d4:4e:6f:7b:30:e1:90:e9:7a:20:e8:e7:19:6a:
d6:0e:2c:c4:38:c7:24:c8:06:b2:5c:18:6b:89:bb:ca:83:1c:
3b:1e:89:d9:c8:95:49:b7:9a:b0:ea:76:11:4c:e0:2b:22:ee:
3d:1b:b9:3f:bb:e1:01:a3:73:7d:15:91:fb:28:f7:db:7d:9f:
2e:c7:5f:5e:4f:d6:4e:f5:88:17:24:f6:71:4f:12:48:5b:be:
a6:30:0c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 13:56:17 2026 by rpki-client