Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
File: RXqhx49syrxHtVEho1_zDZmCfuk.mft (raw, json)
Hash identifier: LWmIHR9liL3WRLTe6WTxj0paYgNZ+UnZWz6oRNVCcDw=
Subject key identifier: A1:AC:42:08:E1:DC:5C:82:63:9A:5E:88:3B:0C:E0:55:D6:12:38:01
Authority key identifier: 45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9
Certificate issuer: /CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
Certificate serial: 019D39AE897D5F33401BE541A582AFD422F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
Manifest number: 0B5F
Signing time: Sun 29 Mar 2026 13:00:32 +0000
Manifest this update: Sun 29 Mar 2026 13:00:32 +0000
Manifest next update: Mon 30 Mar 2026 13:00:32 +0000
Files and hashes: 1: 42mOJ3kHdwuFCzoSOI3N3ulVxfY.roa (hash: eqCYV3DSa0ilBw3MnAd/50LEsSGMdE5H8gvqRFLf8cs=)
2: RXqhx49syrxHtVEho1_zDZmCfuk.crl (hash: CvSztBy6gssJoL2c0gaSGcWSHUb+O9cjj5lziNvbn2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:89:7d:5f:33:40:1b:e5:41:a5:82:af:d4:22:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
Validity
Not Before: Mar 29 13:00:32 2026 GMT
Not After : Mar 30 13:00:32 2026 GMT
Subject: CN=a1ac4208e1dc5c82639a5e883b0ce055d6123801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:46:16:26:cb:f8:c3:4b:3c:bc:af:c7:1a:ed:
ff:f2:ac:e5:fe:1e:8b:6c:b3:b0:14:75:28:54:28:
6e:7f:0a:ff:c0:df:3e:a0:98:dc:6b:3a:16:c9:e3:
66:a5:fd:c6:af:87:b8:7b:bd:41:0b:b8:d6:e0:8e:
90:09:bf:5d:b9:f5:28:fc:f1:55:77:0a:97:a7:5b:
21:cb:9b:0b:1a:bb:d4:2c:f6:e2:59:82:df:23:16:
5e:df:36:8c:ee:8f:2d:58:4b:e8:27:e6:77:33:1a:
4a:05:79:cd:f4:b3:19:86:cf:10:63:27:cf:30:75:
1a:6f:80:a6:f5:3c:d1:4c:90:e3:d0:71:fa:be:b4:
0c:f0:ea:13:20:dd:b9:e7:44:d1:9a:b1:f5:dd:39:
9a:ad:19:0e:ee:2d:03:d9:1f:fc:bc:77:8a:4e:c9:
26:38:2b:e6:81:f2:37:7a:fd:23:8d:2f:32:b0:cd:
4e:23:6a:0e:4b:e7:1e:34:f6:1e:2e:60:2b:69:dc:
49:3b:e7:bc:00:b1:5a:1f:b4:f4:7b:37:ea:8c:92:
13:d9:8e:b2:b9:a8:26:40:10:2d:ba:77:98:4a:0d:
24:27:15:ec:3a:30:32:3a:af:c2:6b:92:f3:48:1f:
c8:8d:54:c6:1f:45:51:d6:5e:8c:e6:2d:2c:84:60:
b1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AC:42:08:E1:DC:5C:82:63:9A:5E:88:3B:0C:E0:55:D6:12:38:01
X509v3 Authority Key Identifier:
keyid:45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fd:4a:cb:ee:0d:6a:04:e1:ad:49:43:ab:4e:d7:c2:80:0a:
7a:f8:39:d6:58:26:e0:d7:51:cd:f2:8d:cd:4c:d7:d9:d8:ca:
ee:de:ad:4c:a7:8a:9a:cc:0b:01:72:99:f2:ab:7c:74:d3:e0:
be:af:5a:d8:59:cc:9c:e4:79:c9:22:67:e0:dc:b0:a1:39:bd:
5e:81:b6:e2:79:3c:0d:9b:71:f4:20:d2:70:6a:d0:94:5b:32:
b5:c9:9b:d1:80:20:9a:42:b6:11:b0:33:3a:9c:74:ce:58:a2:
76:d9:62:c8:8c:77:1c:55:36:fa:63:ab:82:28:67:59:7a:f3:
aa:b2:50:f3:ca:ca:99:4d:5b:40:9d:a7:aa:e9:0d:2a:9e:66:
e3:f2:ac:6e:31:de:73:04:a0:bf:0f:0f:87:18:0d:43:21:e3:
2c:79:d4:ba:a3:1d:9b:40:55:67:d4:ed:09:d0:a7:b4:98:d1:
17:4f:ee:4c:e5:88:0f:ac:ab:cd:35:6d:52:5b:6a:91:ea:e0:
71:1a:fe:8f:67:08:63:63:4c:07:a4:90:6c:77:c5:73:4f:08:
40:de:07:18:c5:5e:08:bb:9a:fa:17:f1:f7:3d:ae:17:cd:7b:
44:45:65:98:12:99:aa:90:80:ce:ca:ac:fd:c1:b9:35:f6:5e:
26:9f:5c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:45 2026 by rpki-client