Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
File: RcXBJi6D17-pAsLIYqFfHkLSVZE.mft (raw, json)
Hash identifier: 4OFyRhozG6hCSjSytaovjly4j42UsdndQNRd9FNza1M=
Subject key identifier: 32:9A:FC:82:9B:1C:DE:0A:D1:BA:F7:F7:0F:4B:BE:AA:62:10:C2:39
Authority key identifier: 45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
Certificate issuer: /CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Certificate serial: 019D3940C78795A7A39772ADF6D20C9931FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
Manifest number: 0861
Signing time: Sun 29 Mar 2026 11:00:39 +0000
Manifest this update: Sun 29 Mar 2026 11:00:39 +0000
Manifest next update: Mon 30 Mar 2026 11:00:39 +0000
Files and hashes: 1: RcXBJi6D17-pAsLIYqFfHkLSVZE.crl (hash: OEMZsHY7Z29M4Rkl5MSbjL1803J5Hz0n/GyuxHpl0vs=)
2: fpoDjOJ9QESVX1PbeV9GOhFqUeA.roa (hash: nvenMpmvgQohsKJVJpGxy+qy+qgPY9hH3SAbWuq6Adk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:c7:87:95:a7:a3:97:72:ad:f6:d2:0c:99:31:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Validity
Not Before: Mar 29 11:00:39 2026 GMT
Not After : Mar 30 11:00:39 2026 GMT
Subject: CN=329afc829b1cde0ad1baf7f70f4bbeaa6210c239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1e:ba:4e:63:df:f2:6b:b3:11:08:6c:f5:9f:
eb:39:93:cb:df:6a:b7:d0:4f:07:f7:34:c4:ef:3a:
3b:c0:e1:22:7c:83:d5:fa:c8:ef:90:fa:ad:31:f4:
a5:fe:9d:6a:e6:7e:0f:f9:5e:b1:00:78:9b:54:bd:
51:8f:45:d0:27:17:9b:78:cb:44:f4:55:58:f1:d3:
ee:c3:2d:f3:33:be:e4:95:3c:be:44:42:2d:4b:6a:
b5:4a:c8:a2:d1:15:d0:93:30:4b:4e:15:8b:34:55:
08:a5:20:a4:fc:5f:bc:d1:df:0d:e8:ac:f6:5c:ff:
67:32:ed:0d:fd:9b:7c:33:b5:33:ce:92:de:77:ea:
cd:6b:e3:5a:69:87:c8:f7:4b:60:e3:13:67:0e:01:
6d:d9:4f:db:7b:5f:68:0c:2a:49:53:94:94:82:2a:
c4:42:11:f8:fd:35:9a:a7:de:f9:cd:b8:8b:af:79:
28:b9:58:45:01:f5:a3:69:00:cc:86:b7:8b:2b:07:
42:85:f7:00:f4:c2:89:1c:05:10:53:ce:b1:76:1b:
c1:7d:bc:9c:bc:f0:31:f4:5a:47:a7:57:78:e5:c1:
73:ac:9f:01:34:dc:a8:e4:36:de:da:13:a2:0c:41:
ba:6e:52:4b:62:9e:9f:27:06:be:7f:27:a5:b7:83:
8a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9A:FC:82:9B:1C:DE:0A:D1:BA:F7:F7:0F:4B:BE:AA:62:10:C2:39
X509v3 Authority Key Identifier:
keyid:45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:de:67:7a:13:1e:1d:4c:b3:ff:d2:06:27:f6:f3:6f:a9:2c:
3e:fa:c4:6c:d8:4e:a0:e0:f9:d0:4a:3f:1d:66:cd:97:af:07:
22:bb:c5:b7:e1:a4:a4:9a:f1:f6:ed:50:fc:84:da:45:35:5b:
a4:8c:4c:50:2f:a1:4d:7b:20:0b:b2:4c:1e:a0:2e:fc:c2:bf:
c9:e1:da:b8:38:a1:e7:6e:a8:3a:cd:08:13:95:22:33:35:5e:
5e:ee:e5:d9:7a:64:a8:a9:4b:74:6a:84:d1:57:dc:17:68:1e:
5d:99:39:bb:67:3e:e3:ad:e8:eb:dc:1b:80:b5:76:82:ba:87:
25:ed:b5:d6:54:fd:c5:47:47:90:8e:ab:0e:fa:4d:a1:bc:65:
47:81:8e:d1:b0:c1:28:56:39:24:58:d4:6c:18:9b:76:fd:5a:
8d:47:d0:de:0b:35:1f:fe:9d:7c:68:15:05:31:74:7d:fa:bd:
c2:90:18:99:9c:55:da:e7:dc:22:7d:43:66:4f:3d:58:42:72:
01:30:3a:91:21:f9:b6:26:22:91:0e:b0:40:7b:2f:25:49:51:
64:60:c1:7b:80:07:55:08:fc:cd:be:fc:fe:11:83:e3:ef:9c:
65:c5:c8:4e:27:31:fe:32:78:54:d1:43:a2:e8:c0:3c:13:f5:
a5:73:15:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:54 2026 by rpki-client