Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
File: rxfMznTBr7qDt7qF2XcSsrzEpeg.mft (raw, json)
Hash identifier: +OwHiND7Oh/4YS+4z0i29wMJ5hugSCMaAGO+6dkSesE=
Subject key identifier: B6:BD:EE:7F:FA:42:73:42:50:C8:88:A1:0C:C6:1E:BA:7F:D1:69:A2
Authority key identifier: AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
Certificate issuer: /CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Certificate serial: 019EBA347F59E0802139C84BCB2A1265C2E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
Manifest number: 0385
Signing time: Fri 12 Jun 2026 05:01:03 +0000
Manifest this update: Fri 12 Jun 2026 05:01:03 +0000
Manifest next update: Sat 13 Jun 2026 05:01:03 +0000
Files and hashes: 1: fWVWhQr_IOS3Ere6cXK65HkUY_E.roa (hash: 6xJw6F8DBsgdoe+Xw5KCeHZGXvkk/TDJRq4n5OCTKlI=)
2: rxfMznTBr7qDt7qF2XcSsrzEpeg.crl (hash: Hol53syrtBxC6wlM2SDEumIYkC0kS2JV2/GscWfwe60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:34:7f:59:e0:80:21:39:c8:4b:cb:2a:12:65:c2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Validity
Not Before: Jun 12 05:01:03 2026 GMT
Not After : Jun 13 05:01:03 2026 GMT
Subject: CN=b6bdee7ffa42734250c888a10cc61eba7fd169a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:3d:b6:8e:46:a1:53:7d:73:d1:ba:ba:03:
0a:9e:66:98:7a:88:8f:16:8b:51:45:4a:ec:8c:34:
b6:d9:3c:7b:b1:ad:49:08:75:9f:29:ed:bb:e0:fb:
cb:e1:c7:cb:65:51:0d:73:50:e1:90:91:42:80:d8:
fd:fd:9f:9f:cc:13:45:fc:52:9d:b4:5f:6d:91:5f:
15:28:49:c3:f2:d4:51:ab:d6:a4:fc:15:4e:52:45:
19:b9:ed:b2:e1:a4:a1:fd:f9:b9:76:de:65:9d:9d:
fc:72:1f:04:d5:c5:87:cb:15:57:fa:5d:8a:9a:9d:
3f:c3:4b:fa:93:43:71:1b:9e:1b:0a:cd:96:64:ef:
d9:b6:23:bb:6a:2b:39:3b:bf:b8:91:ce:17:4d:e2:
d0:3d:6d:b4:31:9c:ee:b9:91:c5:d2:da:f7:3e:dd:
2c:13:90:57:d1:40:34:c8:1f:d2:eb:15:e7:c1:43:
5c:84:e4:b5:cf:cb:4c:62:86:9c:b6:bf:64:40:46:
fa:b0:68:5c:0b:ec:ae:01:d0:2a:24:68:a6:9f:05:
43:72:01:82:f9:13:9b:55:05:1d:c0:17:32:df:54:
34:f7:4c:cb:a5:b4:2f:79:34:a4:5a:07:f1:3a:06:
f7:df:f5:0e:e4:ad:20:49:46:53:90:4a:f0:92:15:
0c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BD:EE:7F:FA:42:73:42:50:C8:88:A1:0C:C6:1E:BA:7F:D1:69:A2
X509v3 Authority Key Identifier:
keyid:AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:cd:f8:05:dc:57:2c:dc:59:7c:f5:8c:cd:45:5e:b0:7c:6f:
33:a5:be:8b:89:ed:b1:50:de:cd:e8:77:8c:40:2a:d3:95:44:
d4:21:84:17:c0:50:1d:3c:52:12:34:b2:ce:bd:04:b3:a4:e9:
18:f4:96:cb:ed:e4:c0:58:ac:a2:96:c6:db:49:26:d4:1e:ef:
d0:8f:44:51:34:77:8d:cb:3f:50:36:d8:28:2b:12:11:64:d4:
24:6b:05:5c:00:2a:00:e3:e1:79:87:27:d3:31:6b:b7:bc:45:
35:6b:7c:80:6d:0b:fb:64:52:98:a8:db:55:82:6b:f7:40:9c:
13:09:b8:0f:ae:87:29:49:d9:6d:df:4b:5e:46:b5:34:66:34:
ef:3f:d3:97:60:7d:c5:21:cc:03:58:d2:1c:66:c3:3a:c2:06:
60:31:a9:71:2f:69:19:50:69:ac:c8:5d:61:5c:3d:ec:6d:72:
6e:4b:52:e2:83:94:08:be:1b:9e:e5:d7:e3:24:bf:86:a9:6c:
a0:6e:3b:9b:96:ec:29:e4:04:16:0d:3e:51:33:49:74:44:b9:
2c:b8:1d:ff:78:ea:61:ce:b0:f6:7b:8d:ce:e7:ce:a0:c3:b8:
83:3f:7c:c9:6e:cc:e6:81:d9:6b:c6:ac:df:ec:8c:56:3a:d0:
0a:70:92:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:10:15 2026 by rpki-client