Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
File: RxS79TeHr06TXTCkjoglotoUoIs.mft (raw, json)
Hash identifier: /MnFGihMGzSdhEedvpNZOfQV3vmKRgzAr1iIj3K9Mek=
Subject key identifier: D6:8F:59:72:7E:A4:70:54:1C:C8:70:F9:B4:74:00:D9:E4:0C:47:63
Authority key identifier: 47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B
Certificate issuer: /CN=4714bbf53787af4e935d30a48e8825a2da14a08b
Certificate serial: 019D39AE6C55BCB2883C251D1258E78A0B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
Manifest number: 01CE
Signing time: Sun 29 Mar 2026 13:00:25 +0000
Manifest this update: Sun 29 Mar 2026 13:00:25 +0000
Manifest next update: Mon 30 Mar 2026 13:00:25 +0000
Files and hashes: 1: RxS79TeHr06TXTCkjoglotoUoIs.crl (hash: dxyQErIVTB2dImt+MJzPLyxaGgKdBb7XTI2n+HNsej0=)
2: o-mtc665fbhvSfNUs9vwAj_na4c.roa (hash: CKoVltX9Hmfz+Z2sk8sI92L3m9MX0WVmDaQsoWexPl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:6c:55:bc:b2:88:3c:25:1d:12:58:e7:8a:0b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4714bbf53787af4e935d30a48e8825a2da14a08b
Validity
Not Before: Mar 29 13:00:25 2026 GMT
Not After : Mar 30 13:00:25 2026 GMT
Subject: CN=d68f59727ea470541cc870f9b47400d9e40c4763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ac:de:d3:82:58:29:42:39:37:c5:55:8a:c5:
33:7e:33:09:af:53:1e:cd:46:6e:71:8d:61:f3:49:
eb:ce:85:6f:a7:65:cb:a5:a9:e5:c6:44:21:77:df:
63:c5:48:9a:b1:1d:8d:79:d0:39:93:6f:f9:3d:d5:
71:bb:94:2c:e1:0c:fd:02:7e:ff:05:24:ea:97:5f:
09:c9:f1:22:2e:3a:39:cb:99:75:57:2c:20:49:93:
cc:d3:08:54:be:4a:6e:34:f3:51:07:1e:80:19:34:
32:86:4d:03:1e:f7:e2:e7:db:9f:2f:ae:3f:f7:4b:
74:56:46:6b:ec:32:a3:2e:db:2c:c1:82:c4:fc:d1:
d0:a6:31:dd:63:9f:e8:f3:c5:c6:d0:29:84:90:85:
15:e3:47:9a:36:38:21:d0:a5:e9:2f:9b:54:b2:56:
39:a4:d5:a6:c5:5f:fb:f4:40:25:d7:26:d2:f5:cb:
f7:e1:ef:ea:97:49:fe:eb:c0:91:82:d0:e1:f2:79:
e4:dd:07:cf:81:31:e0:3f:2e:72:e4:c6:c6:1f:f8:
db:fd:34:0a:08:38:61:08:56:5f:d6:9d:6f:dc:59:
5a:8c:27:90:5e:45:ec:b3:1c:fc:ca:79:15:09:05:
0c:fe:76:89:7a:17:e5:be:93:f0:a7:45:bd:c6:8b:
af:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8F:59:72:7E:A4:70:54:1C:C8:70:F9:B4:74:00:D9:E4:0C:47:63
X509v3 Authority Key Identifier:
keyid:47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:25:9a:f8:f8:18:d0:73:54:6f:c8:09:9e:62:52:a2:88:b6:
09:47:14:e9:20:2e:9d:19:42:3e:98:fc:62:6e:36:26:1e:0e:
7d:cd:ae:52:bd:17:ff:cc:76:91:a5:d9:6e:20:6a:51:84:d1:
f5:6b:10:5a:dd:1c:ff:56:aa:8c:93:90:bd:5a:43:40:94:36:
45:5b:4a:4f:3b:1f:2b:ae:ed:92:a2:dd:13:73:1c:8c:55:fe:
0c:e4:61:3f:57:e2:a3:97:92:8e:03:04:3f:c2:f3:05:86:92:
e7:8b:14:fe:78:d9:a3:29:3b:16:83:0b:63:a6:f5:81:5c:fb:
88:23:16:d4:3f:53:7c:68:d3:d3:01:27:9f:79:2f:3f:f3:d2:
05:fc:20:3a:49:22:24:ea:22:45:4b:c1:e5:59:56:8c:ac:7a:
a1:0e:f6:c1:fe:8a:c8:5c:58:7f:3b:77:57:1a:b4:52:52:41:
44:2e:d8:4a:86:c7:fc:35:c0:16:0d:2b:5e:75:95:8a:e6:61:
6e:f3:12:22:8c:46:8f:9e:50:4c:57:a7:f3:aa:8d:cb:8b:2f:
67:b8:4d:ca:7a:53:33:70:3f:a1:97:39:2c:83:34:c5:08:86:
b6:36:3f:e0:94:7e:79:97:11:8c:4c:31:58:89:c3:96:56:e7:
85:80:4a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:56:53 2026 by rpki-client