Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
File: txRZXFDDUZIbDemldUChXlwcYYo.mft (raw, json)
Hash identifier: Q7wxtDiBODhHe+RY9Ngdzl1hzQFELQuutb57rKGlVyQ=
Subject key identifier: 52:85:89:5C:B8:B9:4B:7B:BB:89:2B:D6:48:B9:2C:2D:19:78:3E:7A
Authority key identifier: B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
Certificate issuer: /CN=b714595c50c351921b0de9a57540a15e5c1c618a
Certificate serial: 019D37F7605A69A31A91DA4ADC36E2850E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
Manifest number: 12F1
Signing time: Sun 29 Mar 2026 05:00:51 +0000
Manifest this update: Sun 29 Mar 2026 05:00:51 +0000
Manifest next update: Mon 30 Mar 2026 05:00:51 +0000
Files and hashes: 1: GuWBmwhJapEp_BmmuNbZSMGsF-Y.roa (hash: XKoJ/kEd+7q2jht4EhlLR7+g4VG6e/EP//UCSF6Kcuw=)
2: txRZXFDDUZIbDemldUChXlwcYYo.crl (hash: Tv7nB/zAKfocM8yHgkAE22w9dWQkBdveXub2BbdCw/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:60:5a:69:a3:1a:91:da:4a:dc:36:e2:85:0e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b714595c50c351921b0de9a57540a15e5c1c618a
Validity
Not Before: Mar 29 05:00:51 2026 GMT
Not After : Mar 30 05:00:51 2026 GMT
Subject: CN=5285895cb8b94b7bbb892bd648b92c2d19783e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:81:92:bf:3a:45:46:cd:c3:a4:87:d2:b8:79:
23:0a:ea:a8:df:bc:dd:62:e8:8f:e6:6b:29:da:fc:
4e:84:8b:6c:4e:f0:3d:9c:6a:81:d5:fc:f2:22:3a:
5d:38:c6:d8:3f:8a:5d:18:e0:85:2b:c3:8c:ef:89:
5e:51:75:d1:6d:c7:51:96:e4:4f:31:a8:4e:cf:f6:
59:88:ab:60:e9:97:02:19:eb:44:e7:1b:a3:02:4e:
80:4f:ea:c4:6f:c2:31:e6:e2:96:83:7d:a1:56:bb:
e3:77:59:9a:ad:86:ee:59:00:3c:02:07:0c:22:0d:
10:d1:a4:51:4b:16:5a:85:36:bd:d5:21:b5:6a:b4:
1e:d5:7a:9e:fc:40:26:77:af:09:a7:32:55:5d:31:
c2:86:5a:00:04:2c:53:a2:17:9d:df:7d:40:8a:d9:
76:68:38:db:30:5f:7b:29:52:26:26:94:9d:79:29:
7d:53:eb:56:68:88:4f:0f:6b:07:80:b7:2f:ad:2b:
3c:0b:d5:6d:0c:52:0a:06:dc:19:eb:d0:b7:2d:f7:
4b:af:77:ee:4d:53:b3:fe:9a:99:e1:a5:65:1b:1f:
a9:8d:51:94:11:7e:05:fd:83:d9:d6:75:5e:b7:7b:
31:3b:fa:2e:66:c9:bc:1b:c2:56:ab:61:90:64:0b:
47:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:85:89:5C:B8:B9:4B:7B:BB:89:2B:D6:48:B9:2C:2D:19:78:3E:7A
X509v3 Authority Key Identifier:
keyid:B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:42:22:31:1d:d7:1a:c0:ce:fb:5a:78:57:ac:c9:d6:2f:4c:
cb:1f:bf:8e:71:26:83:cc:64:68:6b:ee:f4:82:52:0a:7f:17:
f8:a1:14:70:f4:4d:56:9b:aa:29:2f:e7:1b:33:0e:c0:0c:e8:
4f:76:fe:36:5e:3e:5a:38:d6:45:19:93:17:61:91:ac:e6:d0:
f9:99:72:a9:4f:66:bc:1c:4c:70:3f:8c:d7:9a:83:ed:0c:f0:
78:a4:4e:53:7c:51:11:24:66:3c:df:c6:0c:73:dd:bd:0d:67:
a2:41:cc:96:ce:fa:57:89:75:44:0e:b7:c2:c1:38:1a:8b:7d:
4f:15:b0:72:06:12:91:e2:72:d6:46:37:31:45:51:e1:a6:31:
af:c6:4f:47:61:bd:67:41:d4:56:9f:fb:4f:4d:2d:d1:2b:2a:
17:3e:15:49:ab:9f:f6:08:47:c6:5d:da:19:4d:03:46:f6:6a:
8c:89:f2:a5:c1:a4:f7:8b:79:b1:b3:93:cb:86:e0:51:24:d2:
d8:5a:25:0a:6a:36:d9:ab:86:0f:cc:c7:d6:87:d7:94:3f:f3:
3b:4c:5d:b3:09:bd:80:79:7c:23:0a:16:fa:09:0f:fa:36:6b:
32:a9:a1:7a:d4:40:24:4b:c8:d3:7f:71:e7:7c:4b:c1:59:b5:
89:1d:c0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:02 2026 by rpki-client