Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
File: RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft (raw, json)
Hash identifier: 9x5Db/ZuAoPiDaZVaDGUcDuBjnFhYfRRQz9FQWFnJvc=
Subject key identifier: 29:CC:1E:EF:5A:CB:EA:6C:6E:3B:90:68:04:A8:B3:F7:B6:C7:C8:46
Authority key identifier: 47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB
Certificate issuer: /CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
Certificate serial: 019CE3DA32D6D3E140EADDF315D61D99A7AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
Manifest number: 0396
Signing time: Thu 12 Mar 2026 21:00:53 +0000
Manifest this update: Thu 12 Mar 2026 21:00:53 +0000
Manifest next update: Fri 13 Mar 2026 21:00:53 +0000
Files and hashes: 1: RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl (hash: LhTjLcZOPYHgRwIE6EbEQ+/C+b+R13dQsAnhHWKOKDM=)
2: ZS49NoR0xEt4EkcswjIY6hISabQ.roa (hash: l3Du0mInbrihmNOTEOBYAtuZ0coi5mG0KsyicEw3aoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:da:32:d6:d3:e1:40:ea:dd:f3:15:d6:1d:99:a7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
Validity
Not Before: Mar 12 21:00:53 2026 GMT
Not After : Mar 13 21:00:53 2026 GMT
Subject: CN=29cc1eef5acbea6c6e3b906804a8b3f7b6c7c846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:56:02:e1:be:f4:fc:19:7a:b6:d8:bb:6c:5a:
09:5a:e5:58:eb:35:b9:aa:59:2f:a5:6f:de:82:77:
c8:8a:48:16:76:ec:45:ee:f1:84:c1:e9:8f:15:7a:
3e:9a:53:1c:c4:1c:1b:17:aa:3b:78:8a:2a:76:89:
70:13:e2:55:9e:26:82:67:0a:61:a5:16:a3:b1:d4:
22:79:4e:1d:43:68:8c:1e:e1:c6:ae:81:3d:17:53:
9d:33:70:8e:b1:95:ad:10:7f:43:b9:bf:62:b9:fa:
3c:18:73:fb:15:c4:35:e0:21:89:6a:c5:0c:cd:d1:
cb:bc:cb:1f:50:b7:2b:e7:cf:5e:70:4a:6c:5f:59:
91:74:a6:ae:b4:e0:f0:fd:c4:d8:59:d8:c3:37:19:
4a:7c:0f:80:eb:06:5a:2e:6e:28:a9:8c:c1:50:e9:
17:92:51:37:e7:ad:22:a2:31:9e:ed:2c:18:f8:62:
4a:19:2e:b0:30:b1:ab:d6:0b:45:0d:5c:aa:ff:c4:
23:e6:ed:7d:6d:59:cf:51:a3:b1:59:04:55:b0:c3:
a8:3c:76:f5:7a:8c:e3:7a:9c:af:bf:24:63:88:07:
03:86:b1:ea:33:6c:00:b1:5b:ba:5c:ed:68:0a:88:
57:30:12:6a:51:84:b8:53:de:0b:47:bd:0d:e8:26:
00:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CC:1E:EF:5A:CB:EA:6C:6E:3B:90:68:04:A8:B3:F7:B6:C7:C8:46
X509v3 Authority Key Identifier:
keyid:47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:3d:e6:3c:27:ed:0c:da:e4:da:1b:91:d3:7a:da:0a:ca:a2:
c1:f4:07:b1:90:58:85:78:fe:58:ad:85:b8:06:19:51:83:15:
67:2c:47:9d:ff:1d:97:87:7f:0e:68:37:4a:5d:f4:e1:b5:1f:
62:52:67:b7:73:8c:4a:26:d7:c4:48:61:b0:82:94:72:71:7b:
74:b4:0d:3f:bf:8c:32:f2:71:be:0b:9d:d4:83:32:ef:0b:09:
03:94:95:6e:cb:e7:a4:4d:0b:f7:91:7a:e9:b5:74:6f:0a:b1:
9a:8e:9d:40:c0:61:65:bf:d5:85:0f:72:82:19:ed:ad:05:50:
33:4e:42:e3:52:db:9a:b9:5f:8b:f5:58:1d:6b:a8:9f:f7:22:
77:ad:65:f8:52:b3:97:3f:e8:3a:bb:f0:3b:85:de:d6:67:6d:
04:b0:8c:62:a7:b0:0a:0b:01:1a:96:89:67:7b:71:b0:20:83:
cd:b2:4a:a2:f2:77:8b:84:e8:67:29:c0:a5:00:8a:d1:7d:b6:
35:4d:a7:bb:51:01:cf:13:34:71:43:75:54:fd:82:6f:a4:ea:
f0:f4:ec:83:a7:03:ce:8e:d9:37:71:83:06:bf:59:b8:e5:6f:
8e:5a:8b:8a:de:4c:94:ba:c7:5a:5f:df:e7:64:ff:84:a3:7d:
2f:14:c3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:30:38 2026 by rpki-client