Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
File: txRZXFDDUZIbDemldUChXlwcYYo.mft (raw, json)
Hash identifier: hSZFC2rsEHribmijNeyO5wT0t6Mnd1xJH9rWfJ6vffM=
Subject key identifier: 42:DB:72:90:78:EB:DB:F9:55:60:64:19:1E:76:1F:4C:7B:F5:0F:DF
Authority key identifier: B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
Certificate issuer: /CN=b714595c50c351921b0de9a57540a15e5c1c618a
Certificate serial: 01A186AD3FE46AA073557F63C6D33A63F424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
Manifest number: 152C
Signing time: Thu 29 Oct 2026 08:01:03 +0000
Manifest this update: Thu 29 Oct 2026 08:01:03 +0000
Manifest next update: Fri 30 Oct 2026 08:01:03 +0000
Files and hashes: 1: GuWBmwhJapEp_BmmuNbZSMGsF-Y.roa (hash: XKoJ/kEd+7q2jht4EhlLR7+g4VG6e/EP//UCSF6Kcuw=)
2: txRZXFDDUZIbDemldUChXlwcYYo.crl (hash: NXsy9y/U149f4bTJMahQ1uLiwr3Uw7zLYpZg94Cw/QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:ad:3f:e4:6a:a0:73:55:7f:63:c6:d3:3a:63:f4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b714595c50c351921b0de9a57540a15e5c1c618a
Validity
Not Before: Oct 29 08:01:03 2026 GMT
Not After : Oct 30 08:01:03 2026 GMT
Subject: CN=42db729078ebdbf9556064191e761f4c7bf50fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d3:5a:44:76:b2:c1:aa:6c:f2:96:f9:2e:d8:
56:4f:5f:28:17:58:09:54:7d:2d:b8:e1:86:21:e2:
a5:44:08:ec:57:1a:83:78:f8:6d:c0:64:0f:49:c2:
b7:7c:fd:85:8b:4a:36:f2:a3:67:7c:64:ea:f8:50:
0e:25:c0:80:e8:d0:84:36:8a:35:2d:a6:51:80:10:
92:04:da:72:09:26:39:b0:a5:ac:7d:11:aa:f8:df:
fa:ff:ed:69:18:f6:dd:9d:af:60:83:01:eb:09:9e:
71:21:19:4c:83:a5:95:a8:30:a1:64:a9:42:88:e5:
db:62:64:a5:6a:c5:a7:c0:d2:26:eb:39:ee:b5:a9:
bc:e3:89:dd:97:05:28:98:1b:46:e3:8c:24:73:9a:
0b:d9:b8:85:c3:3f:cc:b1:99:d2:9f:10:11:70:3b:
76:18:86:ed:71:9d:e0:1e:18:20:de:70:3f:0c:c3:
b0:dc:b2:9f:86:d4:86:29:a6:54:40:77:b8:cd:af:
a3:00:6e:4c:8b:a1:60:a8:a9:e5:55:f7:ac:e0:82:
2d:ee:3f:4f:5a:68:72:fc:33:24:f8:85:8d:9a:65:
1e:32:0a:61:d8:54:1d:be:d0:61:ae:42:d8:3a:28:
9d:fe:cc:41:fe:04:43:98:7a:45:bb:03:af:29:e8:
45:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DB:72:90:78:EB:DB:F9:55:60:64:19:1E:76:1F:4C:7B:F5:0F:DF
X509v3 Authority Key Identifier:
keyid:B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:92:66:73:d8:48:52:96:52:b1:b5:2d:fc:67:db:f5:23:5f:
3f:93:df:52:04:0c:4a:12:58:15:a0:83:35:c9:3a:6a:1a:a2:
84:85:6a:f1:18:f7:7a:2d:07:46:42:32:56:db:6a:cb:7b:58:
34:bf:93:89:b4:22:3e:6f:bc:c2:27:0e:65:c1:4e:04:15:ec:
3a:9b:00:5c:32:2c:62:98:0e:26:1d:ca:c6:d0:b1:cd:ef:89:
b7:39:9a:b5:9a:c9:24:46:84:b6:11:b2:92:77:90:48:91:91:
11:ca:89:ac:f6:ec:20:70:59:f7:19:52:30:3b:21:fd:d4:c6:
d6:d9:88:69:46:f5:dd:0d:d3:f7:cd:e1:6a:7f:53:2b:9e:06:
b6:32:92:d7:b7:10:59:54:77:ba:c1:f5:70:45:e7:74:b0:0a:
9e:4b:9c:f3:3d:cd:1e:33:95:ec:d4:78:b1:9d:41:92:b0:f0:
28:09:ac:7c:71:3f:38:e0:f8:58:b7:ff:53:f3:1b:63:d1:6b:
e4:90:94:a8:17:08:60:36:20:79:07:85:b9:05:3f:f4:85:82:
c3:e9:2e:57:e2:4f:c1:dc:ec:3f:81:0c:46:f2:4a:7b:ba:5e:
04:76:80:2b:d9:b2:cd:1d:18:7f:17:83:57:a1:55:b5:c2:94:
56:de:f7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:24:31 2026 by rpki-client