Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
File: RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json)
Hash identifier: rwtTtbKj72SSZVwj4Weq0K58syGUkGBDPT7v7YcnwXs=
Subject key identifier: C3:E4:FF:2A:0C:45:F0:9B:60:62:4E:91:B3:C6:86:D7:F2:9A:BC:92
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial: 019EB87C478EEF480A3BCC7E10A85A740E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 21:00:12 +0000
Manifest this update: Thu 11 Jun 2026 21:00:12 +0000
Manifest next update: Fri 12 Jun 2026 21:00:12 +0000
Files and hashes: 1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: e47FMo0d2guHRMY9qiTYX+qhbPlsiTg8pTeSs6qkR2k=)
2: SQFAkjt57y-pTXhYLYstw04Yit8.roa (hash: hgGTZStyS8714Gh8ubpZL/WCwm7djUM9MS9CR1krlpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:47:8e:ef:48:0a:3b:cc:7e:10:a8:5a:74:0e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47119a205683167925b9f04174312637b1600c07
Validity
Not Before: Jun 11 21:00:12 2026 GMT
Not After : Jun 12 21:00:12 2026 GMT
Subject: CN=c3e4ff2a0c45f09b60624e91b3c686d7f29abc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:96:ff:81:3a:17:1c:ff:61:8b:99:20:0e:
59:d0:5b:2a:40:b5:58:8f:64:ca:78:c6:74:7b:90:
5b:c2:27:8a:e3:19:37:52:9e:58:18:96:47:8e:6f:
1e:b0:1f:19:67:82:b5:06:42:29:82:e6:37:f2:a1:
26:35:b1:63:fe:da:93:96:00:2d:7e:c3:35:e3:93:
50:5e:c1:a4:6d:80:26:4b:82:8d:cc:44:3f:50:1d:
4d:68:b1:d4:b8:f6:c8:80:16:1a:ee:51:5d:5b:56:
63:f2:51:19:9b:04:02:a4:a3:9d:86:a9:9a:82:d5:
61:af:63:53:97:f2:de:97:78:72:5e:5e:7b:16:cb:
4f:89:df:50:8b:9d:ab:d0:66:29:c4:66:6f:4e:dd:
bb:10:49:5d:0f:28:4d:f1:62:5a:73:75:e9:01:d9:
c9:a7:73:cd:02:e0:bf:8c:68:fa:0e:63:a8:9e:ac:
d1:d7:89:d2:44:57:6b:cc:85:6e:50:8f:d1:4f:f6:
be:5a:6c:4a:e4:fb:df:76:24:3e:ed:25:df:2b:0a:
e3:cf:f7:6e:b3:90:22:01:0e:14:4f:d6:b8:f5:37:
ea:94:2b:51:ae:da:63:0f:a1:d2:09:8c:5a:d0:19:
38:65:2e:7d:9c:c0:bd:5b:1e:5e:1d:09:1a:18:1b:
df:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E4:FF:2A:0C:45:F0:9B:60:62:4E:91:B3:C6:86:D7:F2:9A:BC:92
X509v3 Authority Key Identifier:
keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:eb:30:29:f6:78:a9:5c:7b:df:2d:4d:81:3c:a6:41:65:57:
9b:2a:eb:46:7d:f5:46:bb:c8:2a:6c:22:14:fd:53:8f:35:9a:
60:31:34:b4:a5:32:52:66:c1:e2:a3:2e:b2:44:97:c2:4b:0f:
c9:d8:b4:ec:8f:7c:2d:ab:a6:4a:d6:84:4c:7e:4d:6c:06:cc:
14:60:17:aa:5e:67:7a:a8:c4:5b:a1:34:1a:73:91:66:98:19:
2f:b6:25:90:23:f3:b9:34:e7:05:e7:29:df:8f:cc:87:6b:33:
73:29:02:1d:8b:aa:e1:21:4a:69:71:01:ed:5c:37:09:91:27:
9f:81:f7:3e:ab:55:2d:f3:c4:14:7d:c6:02:d3:58:fa:58:50:
de:f6:ae:69:06:3a:4a:81:9a:aa:b2:82:e8:37:10:15:6d:b4:
8b:2d:89:23:3e:fb:d0:ae:6b:a9:ae:5d:a4:ee:b0:8a:2d:99:
af:80:d7:8c:2d:92:d4:9d:17:86:bd:a1:d4:ec:f9:84:47:3f:
3a:63:8e:4d:84:22:0d:95:fb:76:ae:c9:d6:0e:3b:7c:49:17:
cb:5e:57:79:e1:d6:9a:9c:fe:2e:ff:40:c0:3b:59:a2:bd:79:
f4:b5:aa:60:e7:7e:02:80:1d:8a:0a:71:5c:9a:14:cc:5a:f5:
bd:ca:42:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:01:58 2026 by rpki-client