Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
File: RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft (raw, json)
Hash identifier: ynA2J2EkM+vaVxrIIrFE2aKpDNkztdUFfCYgBX351A0=
Subject key identifier: A9:F9:3C:29:A6:F8:07:6B:7F:68:B2:0D:5B:C3:6F:DA:C7:05:D6:AB
Authority key identifier: 47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B
Certificate issuer: /CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b
Certificate serial: 019D3909DA92CA51E3A1E6B9349751E209BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
Manifest number: 0FA2
Signing time: Sun 29 Mar 2026 10:00:40 +0000
Manifest this update: Sun 29 Mar 2026 10:00:40 +0000
Manifest next update: Mon 30 Mar 2026 10:00:40 +0000
Files and hashes: 1: RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl (hash: nPfD3uQO5mse6e26F3VxW3KOSc6lGJPwdkoTbq+6VlA=)
2: VOdAaoK5rrL2aiIOKWb-yCi1KB0.roa (hash: 3z55MUcCGHXgB/Y4YMi8pDAR10sJJt845t8wllcRG2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:da:92:ca:51:e3:a1:e6:b9:34:97:51:e2:09:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b
Validity
Not Before: Mar 29 10:00:40 2026 GMT
Not After : Mar 30 10:00:40 2026 GMT
Subject: CN=a9f93c29a6f8076b7f68b20d5bc36fdac705d6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3c:54:2a:1a:a4:23:3b:63:25:22:c9:76:5f:
30:ca:be:15:d7:98:68:e4:5f:01:90:65:b9:f5:33:
d3:ef:f7:e0:d2:5d:d3:29:77:e6:65:75:db:d3:8f:
41:c7:31:7a:41:c4:76:8f:f1:ca:ea:42:67:9a:20:
65:93:90:01:5c:3a:b3:a3:cc:90:5c:7f:fc:86:b9:
35:15:e0:d6:46:a7:d7:b0:36:23:5f:d3:d6:4c:42:
64:f2:e1:ce:85:80:0a:3f:c6:7f:b6:93:e7:1f:4c:
66:4d:34:af:d8:8c:3f:76:35:20:6b:77:70:75:ac:
f2:7f:83:96:04:2e:b2:be:9d:45:cf:aa:a3:12:9a:
ad:25:5b:e5:55:63:19:95:31:33:c0:8d:42:bc:c3:
96:04:55:48:49:61:67:ac:84:53:4f:f5:2e:6f:47:
11:c7:bc:7b:ea:50:ce:cd:af:20:83:57:af:13:b1:
b3:ac:7d:8d:ce:ca:60:3d:77:08:d1:c7:09:43:37:
ce:a2:d5:d2:c5:1d:5f:e0:0d:87:97:cb:40:c2:b3:
c1:c9:5d:15:4f:42:91:38:02:aa:09:8a:22:72:aa:
0e:a5:18:d4:ac:4e:4d:2e:44:2d:ad:ea:c3:11:4f:
09:0c:f7:ad:8d:8f:31:2b:36:07:f7:85:0b:a3:25:
69:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F9:3C:29:A6:F8:07:6B:7F:68:B2:0D:5B:C3:6F:DA:C7:05:D6:AB
X509v3 Authority Key Identifier:
keyid:47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:da:9b:13:e4:c2:7c:a1:c4:d2:25:2a:8e:8a:94:df:59:26:
02:85:1e:55:c6:0e:27:da:00:a6:a7:79:05:81:26:51:0f:d9:
aa:10:b3:63:d5:7c:94:07:ed:05:ee:87:33:3e:ed:e7:6f:75:
19:9c:0f:8a:50:16:ef:63:15:43:8d:d0:e4:39:61:b4:dd:88:
a4:da:27:a5:dc:2a:02:3a:38:d1:f8:cb:5d:d5:0f:6f:ee:e7:
93:19:f3:1e:a4:2a:b4:f1:9d:0e:01:8c:a2:41:a7:c0:8e:48:
5b:a0:34:8d:05:29:ab:4b:e0:af:21:75:bd:a0:19:0f:d3:f8:
10:31:81:37:09:29:81:17:71:9f:f6:45:a8:8e:5a:66:93:25:
25:ba:06:8e:4b:d9:33:5c:ab:40:49:eb:1f:6b:a5:23:43:ed:
e6:8a:29:0b:bd:a5:43:8b:a7:20:4e:3c:a5:0c:44:ab:b7:79:
79:b1:d0:69:e2:63:47:6a:78:69:b7:34:e5:4b:24:c1:32:1f:
b2:75:61:8b:d6:b4:64:c9:d0:3b:15:be:8d:2d:ca:2c:e4:a7:
ab:09:d2:44:6a:83:9b:fd:9d:84:5f:5a:6a:bc:8e:0f:0a:6d:
08:41:3a:75:20:b3:31:ea:1e:eb:55:a0:dd:a4:0f:24:02:1c:
0a:5b:da:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:01:42 2026 by rpki-client