Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
File: R4x_xrIR4nH3SD9yHUXyON195cQ.mft (raw, json)
Hash identifier: vjuS+54XhaPgbrCr3l1c0h6PiwlD2WmxekLzclgaQ+E=
Subject key identifier: B7:AF:3D:30:0E:54:97:E3:B6:59:42:37:D3:5D:46:88:16:A0:93:F5
Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Certificate serial: 019D389BCF49DF8B6E886E01E00E57A07300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
Manifest number: 0A3C
Signing time: Sun 29 Mar 2026 08:00:28 +0000
Manifest this update: Sun 29 Mar 2026 08:00:28 +0000
Manifest next update: Mon 30 Mar 2026 08:00:28 +0000
Files and hashes: 1: OBJUqWKdq6kiQbp0gg2le_lxwc8.roa (hash: Q6TNVRFJT35RFtqmG8IVN0WlQLvaNhPi6XH41fNOOas=)
2: R4x_xrIR4nH3SD9yHUXyON195cQ.crl (hash: XBqN/lf4A7BdOYF/5i3/ypSUCfR2lGpWDyTTlCbqekM=)
3: pDXgmFSEjeXu5kTO9JnxKOTny04.roa (hash: zBFnWy98uBKGBRB8AClKYux+jyTzJfSF7W9SKPlT+0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:cf:49:df:8b:6e:88:6e:01:e0:0e:57:a0:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Validity
Not Before: Mar 29 08:00:28 2026 GMT
Not After : Mar 30 08:00:28 2026 GMT
Subject: CN=b7af3d300e5497e3b6594237d35d468816a093f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:c2:71:f1:73:94:49:0a:5b:de:d4:08:e8:
1d:36:1f:37:7f:e1:a1:f6:40:fc:60:fd:b7:38:54:
f0:40:c1:20:c1:ea:d3:66:83:6c:a8:b4:27:e5:44:
90:4a:11:98:63:ab:bc:75:47:90:ce:1d:68:41:9b:
6e:43:26:0c:40:46:e8:12:4f:eb:e6:6a:6c:44:e6:
a6:1a:b6:8b:1f:2a:72:86:b1:ab:5f:0f:a4:7d:63:
03:c8:a8:ac:ac:59:0c:7c:cf:00:06:9f:f4:32:86:
25:df:ef:c4:2e:a3:ce:61:19:3e:72:18:1c:94:f8:
bd:ae:7a:35:c5:35:d7:cb:ff:18:91:1e:6c:da:28:
c1:76:52:96:de:f0:b3:8b:c8:33:cc:84:c1:d2:80:
e4:95:37:41:bd:53:89:97:73:f0:be:16:ba:b3:64:
1b:de:e7:ec:53:b2:6e:ec:0d:76:17:ab:92:10:43:
d0:c8:c0:35:7d:c2:48:c9:42:86:c8:89:f1:f2:66:
fd:a7:fd:6a:f3:6a:e9:b5:8f:3d:40:ad:e3:6a:f5:
d1:a2:ff:a6:87:24:eb:ff:63:d8:db:8f:7a:d0:ce:
e7:06:44:4c:ee:e3:ef:22:3f:09:b3:b4:66:f6:58:
a2:95:c3:65:78:e6:79:fa:91:cb:a4:0d:e3:74:2e:
27:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AF:3D:30:0E:54:97:E3:B6:59:42:37:D3:5D:46:88:16:A0:93:F5
X509v3 Authority Key Identifier:
keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:fc:03:02:aa:65:97:ed:74:35:a9:98:45:45:19:a2:c4:1a:
58:16:a3:65:cc:98:6a:00:31:3c:49:e5:c4:0c:28:ab:d5:3b:
a5:cf:b6:f3:40:4e:a6:ed:32:c2:e5:03:4d:d1:de:e4:c8:58:
4d:f9:06:46:e5:17:73:f5:12:fd:fa:50:8c:19:df:91:0f:c9:
1f:75:58:b9:a8:66:b1:70:4d:1b:fa:f7:ff:cc:e6:c0:60:06:
ce:0c:f5:fc:cf:19:6e:74:8f:18:cc:bb:cb:23:78:ca:d8:cb:
06:1b:66:59:8b:c3:c6:e2:f8:c9:39:59:e1:41:e1:ff:49:3f:
93:ee:f6:44:77:02:d6:30:bb:a1:28:8a:f8:4b:f5:c4:3a:24:
3e:a5:36:96:13:27:8f:59:b3:9c:4d:66:12:fa:5e:13:a7:d6:
ee:cf:83:a0:72:d8:36:f9:a9:48:e6:06:0f:a8:76:cb:3d:a3:
2b:2f:d4:2a:b0:bf:18:56:68:fc:31:d6:7d:ef:93:0b:2e:6d:
06:f0:cc:74:fb:4f:b5:2a:91:3b:57:80:42:59:df:d2:a5:b1:
87:77:ff:02:d5:d3:81:52:65:85:4e:7e:6b:6d:a9:11:7a:cf:
53:f8:c3:4f:c6:b7:1b:58:a4:a4:0c:81:e6:5d:59:b5:8e:f1:
16:34:e1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:06 2026 by rpki-client