Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
File: rxfMznTBr7qDt7qF2XcSsrzEpeg.mft (raw, json)
Hash identifier: gZkXWPE1YHDLnTylTy9hrB8W171ywSKO27tCUtfJpoI=
Subject key identifier: 09:CE:E1:DF:09:49:F2:80:31:7E:40:8F:F8:D5:AF:73:CD:19:84:8A
Authority key identifier: AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
Certificate issuer: /CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Certificate serial: 019D37F70D68C7B057D4FD4371325B5850FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
Manifest number: 02BD
Signing time: Sun 29 Mar 2026 05:00:30 +0000
Manifest this update: Sun 29 Mar 2026 05:00:30 +0000
Manifest next update: Mon 30 Mar 2026 05:00:30 +0000
Files and hashes: 1: fWVWhQr_IOS3Ere6cXK65HkUY_E.roa (hash: 6xJw6F8DBsgdoe+Xw5KCeHZGXvkk/TDJRq4n5OCTKlI=)
2: rxfMznTBr7qDt7qF2XcSsrzEpeg.crl (hash: dsSUJ2AEu3+Smr3xw1KKBc3DcRW1EhESbBJYyQos4kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:0d:68:c7:b0:57:d4:fd:43:71:32:5b:58:50:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Validity
Not Before: Mar 29 05:00:30 2026 GMT
Not After : Mar 30 05:00:30 2026 GMT
Subject: CN=09cee1df0949f280317e408ff8d5af73cd19848a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:d6:d7:49:fb:c0:ce:bf:ee:e8:0c:54:fe:
5c:99:40:c1:fb:df:7e:d8:c1:38:86:ad:75:73:6f:
77:ab:a0:4c:f0:35:b8:57:c1:d3:c0:ea:e9:f1:da:
78:87:cb:4c:01:33:16:b6:b5:65:0f:73:b5:3c:27:
21:f2:e3:ce:f6:fc:e4:36:27:a5:ca:fa:7f:e2:18:
27:7e:c9:8c:d1:61:fc:5f:e3:85:9c:57:3f:5c:63:
bf:e0:6c:97:03:f8:d4:d8:b2:73:a9:41:a7:00:36:
f6:a7:56:21:0a:83:3e:1b:d9:71:e0:4f:6e:cd:37:
c7:aa:df:f6:7d:7b:7d:66:32:e6:77:4b:6f:6b:19:
a6:53:e2:94:92:e4:d3:da:fb:4a:5b:4d:7c:49:39:
a5:b8:86:f0:9b:a5:21:d9:75:11:78:28:f0:b8:c0:
14:2d:ce:93:58:6b:7d:65:fd:a4:58:b4:89:b7:c8:
ac:67:73:41:b7:3c:2b:d3:18:af:a6:8d:b0:f2:e9:
09:5f:98:74:59:06:4a:9c:9c:79:f7:64:3c:cf:77:
57:c5:c8:72:47:90:9d:b0:ca:56:c9:1c:07:ef:08:
ff:b1:a1:83:0c:21:7c:8d:e1:b3:98:56:6b:06:f3:
54:2e:40:dd:07:95:09:aa:4b:b0:e2:57:0d:da:22:
3d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CE:E1:DF:09:49:F2:80:31:7E:40:8F:F8:D5:AF:73:CD:19:84:8A
X509v3 Authority Key Identifier:
keyid:AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1d:9e:f1:45:f9:fa:dc:96:1e:b5:8a:1b:80:0b:2d:6a:c6:
cf:7b:37:a9:a9:da:be:40:36:bf:9c:a1:a1:f2:64:d7:cc:a9:
a6:17:5c:19:a2:8c:61:32:0d:80:f9:93:6f:e7:b6:4e:c2:5f:
35:bd:af:a4:f1:62:88:28:ed:00:39:10:03:44:cc:a3:e8:66:
1c:a5:b7:6b:a0:66:71:77:b7:79:5c:99:b1:5c:48:c9:f5:42:
fb:8c:74:07:e9:d9:95:58:36:77:36:bc:a6:d2:83:b6:45:09:
c6:48:1c:81:b7:f2:fa:54:5a:c7:52:8e:4c:dc:3c:1e:55:aa:
99:14:ec:c2:cc:98:07:46:5e:4e:12:88:18:9f:70:7d:dc:68:
21:dd:ef:e4:54:bf:2f:02:4b:35:30:ad:bc:96:e8:97:c6:6c:
67:2b:fb:c2:fd:88:22:53:67:5d:f5:05:02:7d:d9:29:5c:ad:
cd:5c:6d:b4:f0:f4:d5:ba:40:6f:cd:dd:31:e0:35:ae:97:07:
6f:98:4f:65:30:45:d8:7e:d9:42:e5:43:2f:ac:ab:17:a0:09:
4a:92:ac:a1:cc:71:3c:9a:b3:01:b8:e9:51:e8:b6:c6:89:42:
88:6c:95:fe:27:fa:72:5c:d5:46:6e:83:4f:01:15:40:e2:8b:
20:37:64:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:32 2026 by rpki-client