Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
File: RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft (raw, json)
Hash identifier: yfHeeibhZtkbIlFv8Xiw32Awwxk0Lo8xx7xd3azRCs8=
Subject key identifier: BA:CD:D9:BA:6D:06:84:94:13:8F:48:2F:19:53:C2:35:23:67:E7:95
Authority key identifier: 47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB
Certificate issuer: /CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
Certificate serial: 019DCB98DB619320189CB38FA48D45604FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
Manifest number: 040E
Signing time: Sun 26 Apr 2026 21:01:25 +0000
Manifest this update: Sun 26 Apr 2026 21:01:25 +0000
Manifest next update: Mon 27 Apr 2026 21:01:25 +0000
Files and hashes: 1: RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl (hash: T1rEq7GWJHvfMDYwPt2PPUR0jeHsXoDB3d+LQxpoiug=)
2: ZS49NoR0xEt4EkcswjIY6hISabQ.roa (hash: l3Du0mInbrihmNOTEOBYAtuZ0coi5mG0KsyicEw3aoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 21:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cb:98:db:61:93:20:18:9c:b3:8f:a4:8d:45:60:4f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
Validity
Not Before: Apr 26 21:01:25 2026 GMT
Not After : Apr 27 21:01:25 2026 GMT
Subject: CN=bacdd9ba6d068494138f482f1953c2352367e795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:1e:12:69:ea:d4:de:ed:59:6e:ce:63:40:
63:32:3f:99:3e:6b:7b:d2:b1:04:8b:20:3e:5f:43:
de:10:ab:cd:e5:14:5e:42:c3:98:1f:6b:16:a3:30:
02:62:10:00:44:9b:d8:c5:64:67:f1:85:e3:a0:3b:
37:2d:6a:11:b0:9a:c1:31:c8:29:dc:1e:f0:b6:f2:
41:02:9a:6f:0a:73:10:48:09:35:90:97:88:a5:6c:
af:6a:c0:3f:1a:cc:be:21:ad:ca:ef:d2:17:fa:ac:
ef:f2:d7:2e:db:59:16:7b:e4:40:d9:98:03:be:aa:
3c:09:28:6f:55:f2:f0:3f:d4:d9:e3:bb:db:e8:3d:
0d:29:19:87:d7:96:a9:c5:03:c1:2b:75:3a:f4:62:
5e:44:d1:ef:5f:29:36:89:58:ba:8d:6e:e0:ef:a6:
08:92:ef:34:a9:17:e8:7a:19:9f:03:68:c9:08:97:
1a:e2:b6:9d:5a:7e:a5:9c:83:ad:3a:b8:90:33:f6:
88:a5:63:26:e8:65:28:e7:6c:e8:87:ab:8f:d3:b5:
3c:86:26:05:79:9a:73:44:e7:43:20:a4:75:26:9b:
26:54:e5:92:d4:ad:1b:61:ab:85:42:b9:aa:fe:47:
16:92:83:45:30:44:1c:72:cb:db:ac:48:0e:4f:36:
c7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CD:D9:BA:6D:06:84:94:13:8F:48:2F:19:53:C2:35:23:67:E7:95
X509v3 Authority Key Identifier:
keyid:47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:27:44:dd:0f:a1:dd:93:4a:53:27:e5:7f:eb:60:aa:ec:42:
4e:1a:5b:54:77:8d:da:72:bf:b6:25:10:74:63:22:7b:46:e0:
5f:ba:09:e6:7f:11:5c:cf:8d:b3:2f:d7:b6:c1:31:22:69:dc:
85:38:ec:30:ff:13:b7:d9:96:76:f2:d9:64:1c:4f:f5:88:08:
56:08:84:85:d2:ad:66:9c:60:49:8d:89:7e:03:d1:96:2c:6d:
33:41:bc:26:2c:cf:df:a8:ba:d7:36:a0:aa:77:6a:a1:f4:78:
50:e9:3d:c8:73:49:77:bf:c5:92:6e:fc:df:9c:af:ed:54:b1:
4c:8f:53:32:ce:2f:9b:af:a7:a7:c9:ad:78:a9:8c:fa:fd:17:
31:02:78:5a:15:37:db:77:8d:2d:a2:43:94:a0:6f:ff:6c:3f:
ac:c8:5d:e9:58:38:7f:ce:9b:0c:3e:bc:35:13:9e:cd:83:18:
37:8c:08:28:82:d7:3e:62:c1:0e:c3:3e:c7:34:a6:ba:55:44:
a7:c0:35:d0:8c:98:96:25:6c:39:22:a3:bf:dd:fd:45:19:ea:
2c:23:d4:91:18:64:05:7a:87:38:fc:1a:14:f7:27:a7:09:0b:
04:9f:ea:0a:f8:da:67:f8:38:f2:a3:ef:87:ac:47:9c:bc:d4:
28:9d:4d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:21:04 2026 by rpki-client