Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
File: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft (raw, json)
Hash identifier: btEPAbsEvEhrTtiwIR0ooWiboAQbQMrdiC6frnLEn5s=
Subject key identifier: B9:F2:53:D9:35:7E:4A:21:CD:27:5E:12:8C:7C:31:B8:57:AB:C8:B3
Authority key identifier: 45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
Certificate issuer: /CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Certificate serial: 019DD0BE9A8D5CBCE83610CAF439E29B431A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
Manifest number: 1393
Signing time: Mon 27 Apr 2026 21:00:45 +0000
Manifest this update: Mon 27 Apr 2026 21:00:45 +0000
Manifest next update: Tue 28 Apr 2026 21:00:45 +0000
Files and hashes: 1: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl (hash: 4Xbu1VDxpCx7bL6gNMBwC7Tq8uNin2iL1og5y58as2g=)
2: qJDNQCIShiElkTydihRoQ4bZNh8.roa (hash: boKmhzMkJFM950qaKYC/IewwayfQB6vcVhEgjzqGKmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:be:9a:8d:5c:bc:e8:36:10:ca:f4:39:e2:9b:43:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Validity
Not Before: Apr 27 21:00:45 2026 GMT
Not After : Apr 28 21:00:45 2026 GMT
Subject: CN=b9f253d9357e4a21cd275e128c7c31b857abc8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:0e:e0:2f:cc:77:b2:3a:11:22:87:66:7d:
b1:85:ee:db:c8:a7:23:72:52:74:34:2e:1c:3c:d8:
4a:bb:d3:21:0b:0b:f7:c0:58:23:5c:5b:3f:25:7c:
4f:05:6e:d4:ec:a2:d0:a0:0c:7f:7d:34:2b:c2:5c:
b4:eb:a7:c9:ac:b6:87:d9:ad:06:f8:43:86:8a:92:
6e:12:63:1d:b7:c4:31:35:60:31:89:5c:f6:ab:22:
09:c7:5f:fb:68:b0:cd:fa:01:b1:76:94:9b:b1:64:
70:f6:af:63:9b:cf:c8:e0:02:c0:2e:b9:64:20:74:
fb:9a:51:46:2f:92:9e:d1:cb:1e:92:f6:e5:41:21:
36:63:02:7c:5c:a2:90:a3:49:99:b9:be:8f:dc:3a:
3b:1c:03:e1:b2:ee:8d:29:0b:00:cd:2a:6b:22:51:
49:92:0e:d3:6a:7f:19:bf:0e:d4:66:a5:bd:b8:90:
ed:cf:f4:1a:ac:53:4f:75:2e:4f:ea:02:36:8f:6c:
7b:aa:51:aa:ac:40:4a:95:bc:6d:ab:f1:d5:3b:fc:
f2:3d:94:14:0d:fc:0e:66:4e:d7:d3:af:6e:6a:c6:
bf:59:66:84:04:de:e0:4a:89:d4:af:04:6a:8c:5f:
61:b1:4c:c7:83:f6:90:30:21:c0:95:46:51:5f:69:
5c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F2:53:D9:35:7E:4A:21:CD:27:5E:12:8C:7C:31:B8:57:AB:C8:B3
X509v3 Authority Key Identifier:
keyid:45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ed:1b:c8:e7:55:28:ed:a1:85:bf:a3:0e:7c:38:8b:b6:97:
1b:b9:f0:2e:e4:6d:2d:8b:ee:61:b1:f4:9b:ea:86:22:81:b4:
d5:91:8a:e1:e7:e5:4b:09:8e:82:4c:95:93:ee:cb:9a:ba:21:
b2:58:68:92:1e:6c:9f:56:85:1d:e3:55:03:a4:1c:bf:25:ea:
bb:4e:57:f4:60:5c:f9:c8:3d:82:43:1f:8f:08:03:28:8f:a6:
e2:c4:d3:9e:25:5d:7a:98:02:a3:61:23:a4:4e:24:7c:de:01:
91:60:21:57:f6:d1:1f:b4:94:a2:c7:2f:14:a7:a2:ce:8f:f2:
2a:73:ec:a1:bf:9d:4a:08:f8:20:9c:15:e7:d3:eb:ec:70:74:
c8:38:ea:d9:76:b7:8d:51:fd:ed:e4:ac:33:cd:9f:0c:44:8c:
6e:d3:da:0e:0d:52:f8:39:62:24:17:e1:71:9c:59:cb:c9:94:
d8:2f:03:24:3e:5d:f6:bb:c3:6d:2d:32:4f:4f:b8:26:9e:33:
de:90:e4:de:64:e3:8a:63:20:07:57:9f:eb:35:b4:7f:26:b7:
5b:44:0d:59:57:65:4d:cc:3f:2e:5b:3f:10:bc:f3:53:4b:52:
70:eb:85:da:1e:6c:2f:a1:01:28:76:a6:a2:ac:54:bb:04:cd:
f0:8e:18:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 05:29:19 2026 by rpki-client