Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
File: rxfMznTBr7qDt7qF2XcSsrzEpeg.mft (raw, json)
Hash identifier: EAFeJ5wfymAAdIGy2ujfMV0ZYrY1CTiqfwQvasnazGA=
Subject key identifier: 08:D3:B1:15:D1:DA:EA:6D:2C:93:3E:2D:26:93:36:34:31:0C:9E:6C
Authority key identifier: AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
Certificate issuer: /CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Certificate serial: 019FA3E147D4DE435CB66518182B9DC72AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
Manifest number: 03FE
Signing time: Mon 27 Jul 2026 14:01:17 +0000
Manifest this update: Mon 27 Jul 2026 14:01:17 +0000
Manifest next update: Tue 28 Jul 2026 14:01:17 +0000
Files and hashes: 1: fWVWhQr_IOS3Ere6cXK65HkUY_E.roa (hash: 6xJw6F8DBsgdoe+Xw5KCeHZGXvkk/TDJRq4n5OCTKlI=)
2: rxfMznTBr7qDt7qF2XcSsrzEpeg.crl (hash: naK3+hM3sABVPgJqzSw3f06NzYkHHJMxAWNBOS69f3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:e1:47:d4:de:43:5c:b6:65:18:18:2b:9d:c7:2a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Validity
Not Before: Jul 27 14:01:17 2026 GMT
Not After : Jul 28 14:01:17 2026 GMT
Subject: CN=08d3b115d1daea6d2c933e2d26933634310c9e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:56:c1:63:ea:44:6e:58:b1:57:a4:dc:6a:3c:
0e:ac:bc:54:5e:3b:d7:b2:01:a3:be:9e:0c:ee:3e:
7e:5b:a4:ad:d7:a5:2c:46:3a:ce:c1:b4:f3:e6:ce:
d9:bb:51:77:b0:df:41:e1:ae:22:34:7e:81:4b:0f:
25:ab:6c:71:22:bd:aa:84:04:59:f3:42:8d:05:22:
66:d4:5c:e3:a4:57:ae:1b:24:a4:92:c5:11:2b:73:
60:5f:b2:3f:40:c4:fc:bd:e9:e2:12:98:d5:76:ae:
aa:32:4f:fd:e0:eb:ed:1b:12:28:9b:de:07:f4:61:
70:24:83:f1:24:e5:a4:f8:6c:f8:dd:56:a2:31:93:
a5:b8:53:74:12:17:26:c0:86:1c:0c:86:68:45:0e:
2c:06:4b:5a:a7:ea:be:5f:0f:02:7f:d8:34:11:a6:
46:2a:89:b4:7a:95:7b:45:7c:2f:50:ca:17:79:e3:
b4:83:1c:11:ce:46:df:04:71:a7:cb:d9:f6:f6:52:
b1:f3:fe:b5:53:78:19:73:48:8c:b5:98:ab:5d:21:
52:b2:c5:90:0c:c3:ca:4e:c3:98:41:6d:56:21:f7:
87:94:73:de:34:89:3d:28:c6:f7:8f:79:70:ba:63:
e6:32:fa:06:8e:60:09:49:e6:cd:2b:8a:82:6a:5e:
40:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D3:B1:15:D1:DA:EA:6D:2C:93:3E:2D:26:93:36:34:31:0C:9E:6C
X509v3 Authority Key Identifier:
keyid:AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:9e:34:04:34:c0:5c:1a:67:de:f7:36:f6:a0:5f:f0:07:ed:
fd:cc:fe:14:2c:20:b3:db:07:59:03:50:d2:28:48:32:ae:c4:
bd:79:72:a6:03:99:a2:4b:c9:83:3f:ea:0a:f5:79:53:11:0a:
44:6c:a4:90:e7:9b:ca:9a:f1:c6:36:b6:e3:b5:00:ab:c9:eb:
6d:11:e2:ea:f8:18:2a:c2:c0:66:94:13:27:a2:b2:19:3a:e2:
6d:f0:81:ff:55:5f:d5:32:f5:4d:2e:0f:8f:d4:2a:f0:5d:55:
c8:c8:36:07:50:98:0a:2e:2a:22:c9:36:0b:73:91:b8:9b:44:
ef:16:2e:c7:14:a3:da:0a:3d:75:c9:5f:22:56:f2:96:42:05:
ae:3a:5a:7b:4d:1a:9a:91:94:12:fc:58:cd:28:7c:8d:19:87:
7f:1c:5c:e4:2f:e7:19:96:72:ce:8a:bc:49:5d:c2:c6:33:60:
7e:fc:67:d9:86:e9:f6:c9:6b:ed:4e:76:87:d8:92:5d:60:cc:
ee:6d:d0:37:18:50:e8:42:b7:c9:33:2d:15:4c:f5:1b:c0:ab:
87:9b:0f:30:ed:ca:2e:1e:10:36:16:4f:f4:71:b0:c3:32:65:
22:75:a9:22:cf:7d:d9:30:fc:a7:02:42:7e:1e:e8:b7:34:24:
44:a3:25:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:07:20 2026 by rpki-client