Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
File: RxG7s-u50tFww3xioQzNwikVVEs.mft (raw, json)
Hash identifier: GQ+Zj+/wKHK7naPxDqjhrvOyRD7/FC6Fg69Sb4cMl18=
Subject key identifier: 7D:8A:FD:23:59:2C:E9:A2:E8:3D:57:CF:0F:CD:12:6A:AE:E0:94:B7
Authority key identifier: 47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B
Certificate issuer: /CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b
Certificate serial: 019D3940EE79A75190D73CC2A7FDEEB57EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
Manifest number: 0974
Signing time: Sun 29 Mar 2026 11:00:49 +0000
Manifest this update: Sun 29 Mar 2026 11:00:49 +0000
Manifest next update: Mon 30 Mar 2026 11:00:49 +0000
Files and hashes: 1: RxG7s-u50tFww3xioQzNwikVVEs.crl (hash: TYo/TCdydh52JU+POQnKRlioWLKdAe9ahyXNiDe0eLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ee:79:a7:51:90:d7:3c:c2:a7:fd:ee:b5:7e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b
Validity
Not Before: Mar 29 11:00:49 2026 GMT
Not After : Mar 30 11:00:49 2026 GMT
Subject: CN=7d8afd23592ce9a2e83d57cf0fcd126aaee094b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:90:08:4a:68:18:aa:ff:ce:59:e3:1d:36:
ac:24:7b:b4:96:67:6e:e1:d9:c1:46:43:76:c1:2e:
5b:d9:80:f3:2d:95:b3:8b:06:27:e1:a6:f9:9f:af:
ab:6b:95:3e:34:ce:c8:d4:58:46:65:ca:dd:6f:b6:
04:04:87:a2:c1:a3:4d:96:1c:0a:66:1b:57:4d:c6:
f8:e8:04:fa:0b:33:4d:23:4f:11:fe:0a:04:97:33:
00:39:58:d8:95:e9:8a:97:2a:c3:39:c9:78:f3:d7:
5f:4d:a3:72:0e:db:b8:46:39:33:56:40:d7:9b:98:
53:c2:eb:6a:f7:17:a9:de:28:48:83:c1:48:4e:05:
27:dc:25:0f:59:39:65:ce:d0:a8:5a:62:66:6f:2d:
a2:e9:a7:89:47:d1:ed:99:cc:10:52:fc:a4:19:bd:
13:df:cd:46:51:c4:28:60:2a:b1:06:f6:0c:bc:37:
d1:86:3a:81:87:3b:7c:0a:8d:1b:3e:ec:96:d1:42:
a9:35:e6:1a:68:06:72:6a:1f:8b:9a:5c:8c:5f:46:
03:9c:ee:87:81:6e:c0:97:df:eb:29:91:67:8b:5b:
08:3a:ff:8d:af:0c:bc:68:24:65:fc:d5:af:f6:ed:
22:84:da:c8:f5:d3:e5:bd:c0:0c:08:ac:e9:0b:a3:
1f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8A:FD:23:59:2C:E9:A2:E8:3D:57:CF:0F:CD:12:6A:AE:E0:94:B7
X509v3 Authority Key Identifier:
keyid:47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c0:ea:d5:9a:6e:51:f0:88:d5:1c:c8:af:d3:fd:5d:3b:16:
d9:ed:2a:a9:35:d7:49:a0:83:bd:3e:f4:e8:74:3e:0f:52:eb:
5b:20:77:63:9f:8a:c7:8d:a5:46:47:36:8f:c2:7b:e8:89:67:
d5:47:eb:12:f6:a5:38:9c:ad:1c:65:1e:d7:dd:a9:c1:52:1a:
10:ec:85:26:ff:37:b8:13:d8:c7:64:e5:6f:cf:49:c8:10:c0:
0a:32:85:c3:a3:7a:59:40:85:31:3b:84:16:6b:e9:fa:97:f2:
2d:bf:d5:55:81:32:6e:da:54:b0:03:5f:f5:b0:8a:87:15:30:
35:8b:62:ad:af:bb:bf:cb:3b:9e:93:d0:4f:9b:d6:5e:1f:b2:
c7:29:a2:ee:4c:ce:47:f7:32:10:60:ae:f2:f8:ef:e8:12:76:
ee:2d:0a:eb:9a:55:8a:ac:5f:78:b6:e9:15:03:b4:95:61:4a:
f0:40:b4:b2:d5:ad:a6:be:b8:20:a4:f8:7d:f4:25:f1:de:17:
1f:78:d6:a9:eb:8e:ff:21:38:3e:74:fd:c7:fe:33:a5:5c:e5:
dd:b6:db:14:bc:ce:9c:b2:d8:66:0a:2c:30:71:31:95:65:d2:
69:d5:c0:2f:7c:7e:a4:90:2d:3a:df:6b:15:8c:c0:67:e6:99:
e0:05:0f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:25 2026 by rpki-client