Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
File: RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft (raw, json)
Hash identifier: OB3b2NdCprxSFmqrPpjUFZEN8CVKPfV4sp5fBxZsqPU=
Subject key identifier: 19:36:49:23:B4:97:17:26:23:62:37:F3:48:8C:8C:85:DE:1B:81:E3
Authority key identifier: 45:76:70:54:D1:93:A3:B8:D6:C2:C0:09:F5:9C:F6:43:E1:49:E3:9F
Certificate issuer: /CN=45767054d193a3b8d6c2c009f59cf643e149e39f
Certificate serial: 019D37BFFFBB73AF7463FE2A59C9CB15AFF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 04:00:22 +0000
Manifest this update: Sun 29 Mar 2026 04:00:22 +0000
Manifest next update: Mon 30 Mar 2026 04:00:22 +0000
Files and hashes: 1: 3n3qv-NIFDfYNIwq893hOV2mItU.roa (hash: fPlKtrxURx2WVwQAzRf5x0bQA1CR4xrOvVBRMEkFGho=)
2: RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl (hash: Xrq15dkrkg8m0LB3+XkgwynNcjA7FYkLP+yWfM02VLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:ff:bb:73:af:74:63:fe:2a:59:c9:cb:15:af:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45767054d193a3b8d6c2c009f59cf643e149e39f
Validity
Not Before: Mar 29 04:00:22 2026 GMT
Not After : Mar 30 04:00:22 2026 GMT
Subject: CN=19364923b4971726236237f3488c8c85de1b81e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:88:c9:65:d4:e9:fd:04:f5:38:d8:0a:af:
4a:bc:94:54:b6:9f:ad:e4:51:e6:a8:12:42:45:2b:
38:e1:23:4a:89:87:29:27:3d:41:6a:0d:3b:d7:86:
82:16:5a:c2:d9:ee:f0:38:46:7c:73:e6:2e:32:07:
ba:e2:d9:f3:6f:6b:b6:e6:45:91:63:09:55:9e:8a:
d6:c4:43:dc:bf:de:91:2f:35:d9:90:d0:be:67:cc:
8f:3b:a4:8d:d5:04:b0:b9:1a:95:ed:aa:1e:2c:be:
00:9e:04:fa:f6:95:06:23:21:de:eb:d5:eb:4f:c0:
70:61:5b:c6:a0:1f:74:bb:8f:3d:9d:3f:26:e6:0c:
98:e1:8e:af:44:7d:5d:3d:29:aa:1a:31:6a:4d:cf:
35:00:51:a9:29:37:28:4a:fc:0e:a1:bd:0d:82:29:
f7:38:16:04:db:b2:cc:79:17:ba:42:68:e1:80:8b:
f9:50:d4:fe:70:22:0a:8e:75:ba:27:44:58:94:2c:
58:b0:5f:b5:74:93:88:46:5b:87:1c:7f:a9:bf:ab:
7e:d4:df:76:41:54:c7:2d:ad:63:32:40:16:f6:0f:
d9:36:9d:26:21:9b:6a:e7:59:aa:93:f6:c5:fb:0f:
81:4f:b0:7b:45:f0:54:b4:aa:77:df:7b:f0:99:a9:
84:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:36:49:23:B4:97:17:26:23:62:37:F3:48:8C:8C:85:DE:1B:81:E3
X509v3 Authority Key Identifier:
keyid:45:76:70:54:D1:93:A3:B8:D6:C2:C0:09:F5:9C:F6:43:E1:49:E3:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f0:a5:51:28:79:f8:ea:ff:1b:ac:59:a6:56:54:f5:ee:f4:
56:5f:2e:f1:d7:51:54:ed:1d:e4:e7:de:b9:2f:40:31:dc:70:
11:c0:2d:ee:f3:a3:05:70:78:8f:a2:35:8d:1b:60:9c:e8:9b:
64:2e:25:4a:89:5a:99:a5:f8:81:3a:3d:b4:d0:8a:3f:f3:93:
ca:24:fb:35:c6:19:e6:49:0d:14:d6:5a:ad:13:31:07:05:2d:
15:5b:78:a3:f2:15:35:2d:c2:d4:8c:c9:61:ae:6c:19:8b:92:
a1:ca:59:ea:81:3d:e7:f2:c0:c7:b5:df:45:d3:3c:b5:60:32:
9b:ff:68:e4:ba:74:41:bb:06:e7:21:b7:ff:ea:69:93:2a:f7:
f9:81:ab:5d:8a:c5:a0:d0:d0:9d:07:68:be:45:68:f6:01:8f:
55:dd:78:35:dd:a2:81:63:ef:d1:a8:6a:d3:85:5a:b1:eb:e9:
be:cf:d3:b7:31:79:fb:51:95:d8:d6:74:3a:c1:67:fd:f2:f6:
8d:ae:62:bb:e9:cc:ac:7f:04:cd:57:b7:82:ef:80:b6:63:f0:
35:27:b0:85:7d:6c:bc:90:af:bf:bf:df:f4:95:40:c5:b0:ef:
38:f3:14:db:69:cb:08:f8:e0:c0:66:29:fc:a6:0f:1e:88:66:
83:3c:22:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03v/+7c690Y/4qWcnLFa/5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NzY3MDU0ZDE5M2EzYjhkNmMyYzAwOWY1OWNmNjQzZTE0
OWUzOWYwHhcNMjYwMzI5MDQwMDIyWhcNMjYwMzMwMDQwMDIyWjAzMTEwLwYDVQQD
EygxOTM2NDkyM2I0OTcxNzI2MjM2MjM3ZjM0ODhjOGM4NWRlMWI4MWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwCIyWXU6f0E9TjYCq9KvJRUtp+t
5FHmqBJCRSs44SNKiYcpJz1Bag0714aCFlrC2e7wOEZ8c+YuMge64tnzb2u25kWR
YwlVnorWxEPcv96RLzXZkNC+Z8yPO6SN1QSwuRqV7aoeLL4AngT69pUGIyHe69Xr
T8BwYVvGoB90u489nT8m5gyY4Y6vRH1dPSmqGjFqTc81AFGpKTcoSvwOob0Ngin3
OBYE27LMeRe6QmjhgIv5UNT+cCIKjnW6J0RYlCxYsF+1dJOIRluHHH+pv6t+1N92
QVTHLa1jMkAW9g/ZNp0mIZtq51mqk/bF+w+BT7B7RfBUtKp333vwmamEuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBk2SSO0lxcmI2I380iMjIXeG4HjMB8GA1UdIwQY
MBaAFEV2cFTRk6O41sLACfWc9kPhSeOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlhad1ZOR1RvN2pXd3NBSjlaejJRLUZKNDU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yOGEzYTktZmQ0My00ODljLWJjYzgt
YjgwYTIzYWM3ODkzLzEvUlhad1ZOR1RvN2pXd3NBSjlaejJRLUZKNDU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8yOGEzYTktZmQ0My00ODljLWJjYzgtYjgwYTIzYWM3ODkz
LzEvUlhad1ZOR1RvN2pXd3NBSjlaejJRLUZKNDU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvClUSh5
+Or/G6xZplZU9e70Vl8u8ddRVO0d5OfeuS9AMdxwEcAt7vOjBXB4j6I1jRtgnOib
ZC4lSolamaX4gTo9tNCKP/OTyiT7NcYZ5kkNFNZarRMxBwUtFVt4o/IVNS3C1IzJ
Ya5sGYuSocpZ6oE95/LAx7XfRdM8tWAym/9o5Lp0QbsG5yG3/+ppkyr3+YGrXYrF
oNDQnQdovkVo9gGPVd14Nd2igWPv0ahq04Vasevpvs/TtzF5+1GV2NZ0OsFn/fL2
ja5iu+nMrH8EzVe3gu+AtmPwNSewhX1svJCvv7/f9JVAxbDvOPMU22nLCPjgwGYp
/KYPHohmgzwitQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:19 2026 by rpki-client