Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
File: rRfnAW-VOg5izKRWb_nRBSww8lo.mft (raw, json)
Hash identifier: BREiCqZTqTsDnyJqWbvz22+HjAH0HdKXnIHsDHV4JqA=
Subject key identifier: BB:44:B9:9C:D6:F0:7F:23:1E:7C:D4:2D:6D:B2:B1:BD:D8:39:0C:E4
Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Certificate serial: 019DB05810914E310E6FF7B174715CCA5C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
Manifest number: 0803
Signing time: Tue 21 Apr 2026 14:00:54 +0000
Manifest this update: Tue 21 Apr 2026 14:00:54 +0000
Manifest next update: Wed 22 Apr 2026 14:00:54 +0000
Files and hashes: 1: 69yOYQhcSzVteXbmSSuXjdooyOA.roa (hash: 2ZA47QSgmHPBZuYu1sYyxVw+wEl4vjMSOZuQJyxjjcA=)
2: DaNzl7w617W61WMkK2mhl8jN5wU.roa (hash: KfPIGqY3EVhRc2Ytnf57ChmISLtMr8fTABQiZHidkaM=)
3: rRfnAW-VOg5izKRWb_nRBSww8lo.crl (hash: w00eELr5Kfxamkbp4Mq/XuYP8yCwtO7vnh3xBgyvFCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:58:10:91:4e:31:0e:6f:f7:b1:74:71:5c:ca:5c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Validity
Not Before: Apr 21 14:00:54 2026 GMT
Not After : Apr 22 14:00:54 2026 GMT
Subject: CN=bb44b99cd6f07f231e7cd42d6db2b1bdd8390ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:12:23:5f:8e:e1:1c:0e:f5:8a:64:c4:f1:
ce:81:fa:ba:37:54:d9:27:35:57:75:c9:d9:fd:30:
8c:da:bc:77:51:5d:74:22:5c:a3:5d:0f:e0:83:bb:
2b:be:1a:ef:a0:37:7c:1b:69:54:90:89:8e:e9:f0:
de:8b:83:63:32:7f:2a:c0:ef:dc:bb:c0:84:7b:05:
1f:54:25:34:ba:aa:df:a2:90:fa:1f:b0:a6:11:b2:
56:84:d9:38:65:60:f2:1a:d9:58:cd:18:4d:a6:21:
45:6b:50:06:98:86:f1:e3:2c:6f:43:c8:37:18:68:
d0:38:69:53:14:2e:c7:53:dc:33:4b:d4:17:1c:e2:
b6:00:5d:4c:94:af:be:d6:6e:60:98:1b:02:d5:1a:
a6:b3:b7:98:cb:9b:88:6d:0d:dc:3b:f5:e1:1f:91:
2a:16:2f:69:f6:90:53:82:d3:9f:49:06:a2:21:cb:
61:1b:9b:35:e2:d9:b9:6a:96:9d:64:de:ea:6e:70:
a8:aa:a3:ec:51:95:b5:73:6d:9d:45:39:f3:28:cf:
e2:28:09:7e:ef:eb:c4:18:b1:4d:a3:c0:c8:58:9c:
2a:fc:d3:2b:d6:dc:3d:3a:6e:34:70:93:42:9d:39:
be:77:cf:bd:5c:8d:f6:d0:fd:14:a6:21:1c:6c:e4:
7e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:44:B9:9C:D6:F0:7F:23:1E:7C:D4:2D:6D:B2:B1:BD:D8:39:0C:E4
X509v3 Authority Key Identifier:
keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:cd:2b:d4:66:c7:7c:b4:77:ce:02:f9:74:5d:6c:47:21:cd:
6f:5f:bf:7a:76:a4:a3:59:15:80:1f:66:18:d5:9e:b7:c1:e4:
79:a7:af:b8:23:4b:11:ff:16:aa:50:6b:5a:f7:95:d6:e4:5f:
b4:2a:88:65:dd:ad:1e:be:5c:43:62:ed:83:58:e2:21:f3:46:
68:83:ac:e6:dc:fe:2a:c3:ad:b8:11:2f:ff:3a:ef:05:1a:85:
9a:63:03:75:0f:41:f5:52:ac:ab:61:ad:41:74:e5:1e:b3:be:
83:d8:c3:b8:1e:68:c6:06:2c:40:58:4c:2f:e6:57:0b:bd:10:
f8:66:d0:b9:cf:10:08:31:ee:16:c8:23:48:9a:75:32:06:db:
cc:ee:49:f4:0c:ac:0f:cc:dc:4b:2c:c2:7e:3a:7f:3b:41:f2:
8d:32:7f:af:cc:37:82:c8:37:d7:68:06:b7:81:d0:38:4b:46:
38:71:58:41:44:36:ec:6c:0c:4b:9e:2f:12:e5:72:bc:7b:3e:
81:d3:5e:87:68:c7:b2:9a:46:4f:38:9e:ca:d7:f8:5f:e8:7d:
6c:22:56:4f:5b:66:09:81:2e:af:72:4b:4b:b1:fb:37:75:f3:
ef:0e:54:89:15:1d:03:c8:a7:9c:35:4f:99:d8:d3:b0:62:58:
4a:33:d2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 21:34:24 2026 by rpki-client