Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
File: r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft (raw, json)
Hash identifier: rTTeHrp8u0JCy/YixwoDetwuhlwCTbGJXkGJz4zbyH8=
Subject key identifier: 4E:AA:6D:01:AB:D7:23:5B:8B:20:3B:FF:DA:09:51:B4:31:B0:DB:F3
Authority key identifier: AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
Certificate issuer: /CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Certificate serial: 019D38D2F9E2C4BF5731FD6D0243FC891258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
Manifest number: 157D
Signing time: Sun 29 Mar 2026 09:00:43 +0000
Manifest this update: Sun 29 Mar 2026 09:00:43 +0000
Manifest next update: Mon 30 Mar 2026 09:00:43 +0000
Files and hashes: 1: r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl (hash: HmJYPWmWrUEO3eJ+PTpYnuZ3yZF3gaMjzm0ZBqEYOXQ=)
2: sXuiRHlvEW8rrBF1Ev9CogiLSCQ.roa (hash: pLvRlLK05UpElewJM59U7OVcLxC0+h1J9DGDrZTZEFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f9:e2:c4:bf:57:31:fd:6d:02:43:fc:89:12:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Validity
Not Before: Mar 29 09:00:43 2026 GMT
Not After : Mar 30 09:00:43 2026 GMT
Subject: CN=4eaa6d01abd7235b8b203bffda0951b431b0dbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:92:b8:64:c1:74:d7:3d:d4:05:1d:cb:bd:
0e:ce:26:d1:ad:eb:09:82:8d:ec:10:81:30:b1:15:
e9:4c:6c:45:7f:dd:44:eb:e2:68:1e:1e:24:a9:b3:
cf:f7:4f:14:ea:dd:f7:52:90:64:8d:78:bc:b7:d1:
47:f4:b7:fc:aa:ef:db:fc:b1:0d:b0:fe:a8:be:2d:
c8:27:6e:55:f2:1e:15:1d:cc:3f:e5:6a:0c:0c:fc:
9e:c0:27:fd:75:41:6d:9d:a5:aa:71:61:11:94:02:
c0:f4:2c:9d:4f:71:e5:5e:aa:d4:15:59:5d:0a:0c:
2f:f9:3b:4b:c1:11:4e:3f:fe:95:9c:c2:1f:f5:5f:
33:59:fd:f1:1d:5a:df:4a:bb:06:e7:d3:47:a3:16:
ef:20:52:11:72:f0:d4:bc:10:37:df:4d:0b:2e:51:
84:d0:6f:57:a1:f3:1a:b3:30:c5:a4:60:f0:fb:fe:
72:a2:b7:ee:f7:33:65:40:8e:14:2a:66:bb:0a:75:
d9:85:f0:de:db:0f:05:3b:0a:74:44:d1:a4:20:61:
17:9e:b0:20:3f:cf:dc:d1:86:50:8c:d5:5d:b3:57:
d8:03:28:70:38:b9:47:55:5e:f7:bb:59:8a:67:6d:
9b:e7:8d:5e:23:ba:3c:82:36:ab:e4:48:71:92:c8:
12:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AA:6D:01:AB:D7:23:5B:8B:20:3B:FF:DA:09:51:B4:31:B0:DB:F3
X509v3 Authority Key Identifier:
keyid:AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:89:7b:81:0e:e9:bf:ec:82:ba:f3:67:63:03:06:d3:41:21:
42:80:b5:79:0c:48:24:3d:d4:3b:08:eb:4e:91:30:b2:80:c2:
78:ad:66:48:8c:b5:be:0c:1e:93:96:13:5b:09:de:f2:d7:5f:
f7:b5:32:e7:94:de:8e:85:a8:86:29:73:a8:5e:9c:8d:6d:cd:
38:3f:86:91:66:f4:ec:34:97:70:c2:68:6d:93:d3:2f:73:c0:
3f:37:9c:c6:18:16:64:9b:ff:b8:d5:16:ff:22:ef:74:ec:68:
d2:fb:36:68:4e:81:6c:98:f0:66:08:fa:eb:c0:57:19:33:39:
22:8f:ab:f7:e8:f9:d0:9d:0e:94:19:c0:6e:d2:e8:b1:17:53:
61:17:f5:6b:dc:5e:77:1b:8f:e5:cb:e5:69:b1:50:c2:19:49:
d6:e6:09:92:f2:24:9c:59:c2:c7:ff:89:d3:d5:9d:74:74:29:
be:68:da:f2:05:2a:aa:38:13:ff:35:69:35:5f:c4:a6:2a:a1:
1a:8f:69:c2:31:6b:65:72:4a:a8:80:ed:e2:bb:ae:c3:fc:5f:
91:79:6c:da:5d:3b:fe:6d:2e:a6:12:b7:ea:62:ae:8d:e3:59:
a8:ac:e2:90:b5:82:20:d1:af:01:a9:24:9e:26:ab:1d:3b:f4:
65:ac:e3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:45 2026 by rpki-client