Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
File: rxfMznTBr7qDt7qF2XcSsrzEpeg.mft (raw, json)
Hash identifier: pcFu6ubWea+RN2K2kfrDaAHBfPB8LxL4e0gx1AmEto0=
Subject key identifier: E6:DE:CD:9B:C2:0E:1C:5B:C7:69:32:B7:5E:E1:2C:F9:49:AD:DC:48
Authority key identifier: AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
Certificate issuer: /CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Certificate serial: 01A08B9EE902EFCE186DB0F21B56476C47D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
Manifest number: 0476
Signing time: Thu 10 Sep 2026 14:00:42 +0000
Manifest this update: Thu 10 Sep 2026 14:00:42 +0000
Manifest next update: Fri 11 Sep 2026 14:00:42 +0000
Files and hashes: 1: fWVWhQr_IOS3Ere6cXK65HkUY_E.roa (hash: 6xJw6F8DBsgdoe+Xw5KCeHZGXvkk/TDJRq4n5OCTKlI=)
2: rxfMznTBr7qDt7qF2XcSsrzEpeg.crl (hash: 98K/VnYx8kI4ac9KIuF0U3GQn3CdeFl42xDdH1wB/Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9e:e9:02:ef:ce:18:6d:b0:f2:1b:56:47:6c:47:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Validity
Not Before: Sep 10 14:00:42 2026 GMT
Not After : Sep 11 14:00:42 2026 GMT
Subject: CN=e6decd9bc20e1c5bc76932b75ee12cf949addc48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:69:54:01:45:80:c1:3a:ae:61:ac:06:99:ec:
dd:2a:2f:4b:cc:5c:0a:47:d8:f0:e4:2a:30:74:44:
76:d7:4e:e0:9f:fb:0f:07:58:1d:ea:96:d1:05:26:
80:f8:4d:f8:02:8b:8b:22:37:7d:d1:df:d1:30:21:
ea:11:e5:40:ac:a9:a6:24:72:0a:3d:8c:e7:d4:54:
a8:0a:6e:76:f4:4d:9d:2f:80:0e:d4:65:3d:7a:52:
a3:c9:71:9a:2c:fa:3a:10:1c:1d:71:09:73:74:88:
e7:e7:95:6f:ac:57:9d:f6:90:7f:34:24:4b:a5:37:
cc:f4:18:7d:c3:b0:79:79:34:60:44:21:7c:32:be:
e5:a9:47:75:ea:f3:31:78:88:5b:be:c9:9d:1e:6c:
b2:04:00:27:ef:17:59:06:db:b6:b4:b8:b8:da:ef:
1f:c0:72:09:ef:12:35:a1:03:2f:e2:f5:d1:16:f0:
ea:2f:6f:02:e7:ae:eb:87:87:4a:24:a2:e4:42:d5:
a7:b8:97:25:aa:aa:2c:18:23:c9:d4:c4:a4:4f:a5:
34:8e:d1:83:b1:b9:20:1e:68:e9:4e:80:e9:72:3e:
76:a7:b0:99:d5:eb:2c:d6:c8:9f:78:54:05:80:0d:
3b:9b:af:9e:af:46:f1:f4:7b:ee:2a:0c:ab:8f:2f:
c9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DE:CD:9B:C2:0E:1C:5B:C7:69:32:B7:5E:E1:2C:F9:49:AD:DC:48
X509v3 Authority Key Identifier:
keyid:AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:11:69:f9:97:86:43:b4:31:3a:18:bc:25:23:e9:32:8b:01:
0b:14:4c:46:11:5e:f1:7e:5a:89:60:ba:70:fd:36:7e:d8:8e:
d0:25:8b:f1:63:8e:a9:14:cf:22:a2:63:af:c4:c5:1b:d9:16:
85:40:75:20:79:23:af:c0:29:ce:8f:dd:93:b3:e6:a0:5c:15:
d6:17:02:c8:e5:db:da:99:8d:44:27:1f:be:43:77:be:62:dd:
1c:fd:e7:30:05:79:0c:37:9b:6d:36:e9:68:6e:19:f7:3c:d6:
60:51:f2:fc:41:6a:be:fc:d0:51:75:2f:2e:1c:cd:8b:30:3b:
a1:77:be:10:b3:63:56:5b:1f:3f:f5:f9:64:05:ff:02:0d:14:
ed:33:2c:09:d2:70:4a:1d:c4:83:f5:44:65:f2:f8:6d:8d:1a:
7d:c4:ac:a5:05:d1:6a:bc:7c:83:fb:6d:82:35:11:b9:a4:5c:
3f:54:56:3d:05:4b:f6:6c:e8:8c:37:da:b7:c0:1d:08:43:b4:
ac:a5:15:6f:ad:5c:58:aa:32:b2:a8:0f:e3:57:4b:cf:15:c6:
fc:98:fd:e7:fb:39:c7:35:54:4e:15:5d:40:45:b7:53:a4:02:
c8:b3:08:c1:aa:41:3b:d3:61:0a:98:b0:94:73:a9:3b:15:8e:
e3:16:8b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:12:32 2026 by rpki-client