Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
File: Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft (raw, json)
Hash identifier: pbeZrz2cBraaZ02OKaa4bLb8rZ2PC1EOoEUMwoUMIwI=
Subject key identifier: 8A:AC:DA:C6:A1:8A:7A:D3:3D:CB:60:2D:3E:55:1A:46:35:40:E6:64
Authority key identifier: 47:1D:73:71:24:13:46:C6:EA:9A:47:69:46:80:21:72:CA:07:56:6B
Certificate issuer: /CN=471d7371241346c6ea9a476946802172ca07566b
Certificate serial: 019D38657469B174F8861A428AC0C428B5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
Manifest number: 0BC4
Signing time: Sun 29 Mar 2026 07:01:06 +0000
Manifest this update: Sun 29 Mar 2026 07:01:06 +0000
Manifest next update: Mon 30 Mar 2026 07:01:06 +0000
Files and hashes: 1: Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl (hash: +GZRLxsiH1+gfvEdT589O3aNkQVteC+JNHvTB1EQvNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:74:69:b1:74:f8:86:1a:42:8a:c0:c4:28:b5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=471d7371241346c6ea9a476946802172ca07566b
Validity
Not Before: Mar 29 07:01:06 2026 GMT
Not After : Mar 30 07:01:06 2026 GMT
Subject: CN=8aacdac6a18a7ad33dcb602d3e551a463540e664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:f5:3d:28:08:5e:4c:18:cc:7c:5f:a7:f9:
24:25:f8:81:35:3d:d7:99:45:17:67:94:2c:7e:58:
c6:08:4b:38:3b:98:75:a0:0b:c7:49:fc:b2:0e:e3:
49:f7:7d:42:17:9d:18:8b:d9:50:54:f2:cc:43:ec:
46:78:d7:52:4e:5a:29:78:b3:fc:4d:b8:39:10:23:
a8:1f:31:cd:23:06:5d:72:fa:28:28:38:e1:ec:77:
5a:70:3a:8a:52:65:5d:f9:99:24:51:aa:68:99:da:
d9:70:88:4b:02:5b:28:4c:41:de:a7:bc:f6:9b:e4:
ae:34:0c:c2:bf:95:de:a3:74:39:a2:b6:f2:b1:bc:
4d:63:aa:47:af:24:70:18:41:36:df:f7:e3:5c:30:
0f:40:bc:de:66:d3:e9:3e:77:8c:67:44:7d:4e:ce:
2e:c8:b8:6b:34:ae:49:9a:2d:aa:37:ab:29:fa:44:
0c:be:77:2f:5d:ad:b7:3d:5a:48:48:ca:90:fc:b2:
71:22:27:e2:a4:4c:4f:a5:1e:dd:60:ec:f0:9a:13:
3c:85:cd:f4:b1:b8:37:bc:f9:db:45:2d:47:e0:35:
bc:9f:cc:0e:de:e3:57:1b:6c:62:1b:b3:16:03:e7:
8e:82:14:fc:08:dc:0b:89:c2:1a:29:4e:4f:11:81:
1d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AC:DA:C6:A1:8A:7A:D3:3D:CB:60:2D:3E:55:1A:46:35:40:E6:64
X509v3 Authority Key Identifier:
keyid:47:1D:73:71:24:13:46:C6:EA:9A:47:69:46:80:21:72:CA:07:56:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:2a:00:9d:75:35:05:56:4a:4d:6b:09:83:20:21:b4:5f:76:
d0:cc:1a:db:60:d9:8b:10:5c:8d:31:08:e3:9d:cb:3b:48:d9:
75:b8:6e:02:8b:14:65:b8:a8:c5:65:3a:c1:bd:2c:98:df:05:
e4:26:c4:d1:42:77:1d:a5:e8:c3:89:94:4a:ac:4a:8b:25:8a:
46:04:af:55:4f:21:33:f9:94:68:d1:e2:45:c4:49:a1:95:8d:
84:30:e8:af:70:ea:ea:4f:44:dd:9d:94:15:51:ea:7c:e7:83:
f3:84:1e:b4:9e:b3:26:56:d9:e9:f7:f9:3b:07:67:ba:e4:50:
0e:15:46:54:59:4c:eb:60:87:4d:68:78:ed:89:ae:d0:c7:da:
2b:03:c1:f3:0a:3d:e8:2e:38:d3:de:84:63:26:5a:21:42:33:
2e:fe:55:a7:29:39:26:68:b6:00:f7:c2:14:b4:56:03:a9:39:
b2:8c:23:d2:f7:8c:96:9a:ac:a6:84:2a:17:a9:7e:cd:c8:29:
48:ac:c5:f3:69:04:e5:87:42:01:b9:aa:70:8f:07:b5:8d:4d:
ca:df:d4:a2:80:7d:ad:77:d0:41:e1:68:20:69:a9:30:8c:31:
1f:ee:13:83:07:99:db:69:22:69:72:b9:13:20:ef:32:46:ba:
2c:c4:03:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:32 2026 by rpki-client