Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
File: rxfMznTBr7qDt7qF2XcSsrzEpeg.mft (raw, json)
Hash identifier: pC2WWo+mo9OU7fuJJjyEbpamdlosZZw+MR88zUCJfyA=
Subject key identifier: 05:D6:0D:11:16:68:5D:3F:75:18:F9:0D:E7:CC:7A:6A:CF:DA:A7:E9
Authority key identifier: AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
Certificate issuer: /CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Certificate serial: 01A17EF3D1F2710451087EA6948CCF6A68D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
Manifest number: 04F4
Signing time: Tue 27 Oct 2026 20:01:10 +0000
Manifest this update: Tue 27 Oct 2026 20:01:10 +0000
Manifest next update: Wed 28 Oct 2026 20:01:10 +0000
Files and hashes: 1: fWVWhQr_IOS3Ere6cXK65HkUY_E.roa (hash: 6xJw6F8DBsgdoe+Xw5KCeHZGXvkk/TDJRq4n5OCTKlI=)
2: rxfMznTBr7qDt7qF2XcSsrzEpeg.crl (hash: S7Mpl4iU0GNsFfOI0jPuLqzyfhihIpHTUg+I8VbZ76M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f3:d1:f2:71:04:51:08:7e:a6:94:8c:cf:6a:68:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Validity
Not Before: Oct 27 20:01:10 2026 GMT
Not After : Oct 28 20:01:10 2026 GMT
Subject: CN=05d60d1116685d3f7518f90de7cc7a6acfdaa7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2a:08:b1:95:e4:c1:f7:31:8d:cd:ed:e1:0a:
09:a4:57:fd:44:55:5e:02:f9:e8:e3:c3:db:65:12:
2a:53:c5:23:00:35:ca:f2:e9:5d:28:60:ca:fd:04:
15:8e:19:e0:12:7d:73:cf:ca:01:b5:1d:b9:d3:15:
9f:bd:3f:89:b1:46:30:e2:6b:f9:97:64:7d:e7:ec:
90:57:bf:f3:be:ae:d5:04:e6:b2:41:23:c5:6d:cd:
40:7d:e1:22:27:24:ab:44:3a:bd:af:5c:e7:0c:7b:
ae:50:83:e5:96:9e:16:36:77:0a:a4:62:87:fc:f7:
f2:b7:07:73:b1:ae:de:3a:fe:a1:f0:0d:d6:47:8c:
40:fe:f3:7f:4f:c4:c8:e0:49:78:11:4d:02:9c:0b:
2b:59:64:7f:d4:09:7e:12:cc:c0:77:66:40:e9:27:
70:14:36:46:3e:55:de:b9:94:35:9c:d2:bf:33:23:
13:9a:f3:f3:b4:55:b7:8d:c6:82:27:f5:d5:e2:5c:
c8:47:cf:64:6f:14:b0:ac:4f:d5:42:db:08:be:54:
db:3a:f9:a9:b3:04:12:54:c9:71:88:4e:0c:85:ed:
83:67:a6:34:52:0e:4f:cf:0e:ca:ec:03:97:6f:07:
af:07:7e:82:f3:48:de:6a:90:6e:b4:c9:b3:36:82:
b0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D6:0D:11:16:68:5D:3F:75:18:F9:0D:E7:CC:7A:6A:CF:DA:A7:E9
X509v3 Authority Key Identifier:
keyid:AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:cb:93:01:05:eb:b4:5e:79:1c:88:ba:eb:f8:15:1d:a0:68:
16:32:ad:bf:2a:96:7d:dc:44:30:a1:bf:9f:0a:75:04:7c:64:
5c:bb:f2:05:1f:44:99:39:5f:1f:27:11:ae:6e:69:ef:34:a0:
c9:bf:05:be:c7:6c:47:24:51:df:e2:26:27:8e:bb:cc:43:73:
c4:8c:63:d7:59:84:78:c8:55:00:a3:b7:2a:66:f7:d6:b4:ca:
9c:11:aa:77:e2:0b:08:0f:b8:ab:bb:67:91:d0:95:16:30:f9:
4d:e1:2b:5e:16:25:f8:70:d3:64:d3:f3:33:2b:dc:6d:46:d8:
3d:3a:67:7b:f7:34:9c:25:3a:04:ee:1a:e7:0a:0e:59:e3:6b:
94:de:cc:ad:b8:36:72:6b:e5:21:79:58:df:c7:52:9d:f3:8e:
02:5b:04:b4:c6:02:1f:f9:3d:69:86:48:57:ea:8e:13:c7:f6:
9f:19:c6:d8:5d:d2:48:c8:27:53:dc:23:9d:e5:a9:63:32:34:
95:00:38:0d:f5:69:e4:02:2d:6d:c7:dd:dc:7b:f3:28:68:d0:
6c:94:20:af:2e:ad:45:4b:99:22:2c:af:10:a2:08:0c:a4:ae:
de:a0:cd:71:e4:df:cf:f1:7e:30:ec:16:98:b8:b9:52:f9:a7:
3a:2f:85:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:01:56 2026 by rpki-client