Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
File: RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json)
Hash identifier: WAcNExxtFJcdcjkBck/+R9RZcY9anJOwczfo1qWfjzg=
Subject key identifier: 8B:A7:46:88:F6:AF:E4:08:4F:DB:B6:F3:E1:E2:38:B4:D1:7E:51:F8
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial: 019FA417A433C33AFFD7086297D5D29D439F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 15:00:40 +0000
Manifest this update: Mon 27 Jul 2026 15:00:40 +0000
Manifest next update: Tue 28 Jul 2026 15:00:40 +0000
Files and hashes: 1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: xIzR7b20+5+MGNf83UWeQolZzy2aAVppoHtpFZSlns8=)
2: SQFAkjt57y-pTXhYLYstw04Yit8.roa (hash: hgGTZStyS8714Gh8ubpZL/WCwm7djUM9MS9CR1krlpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:17:a4:33:c3:3a:ff:d7:08:62:97:d5:d2:9d:43:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47119a205683167925b9f04174312637b1600c07
Validity
Not Before: Jul 27 15:00:40 2026 GMT
Not After : Jul 28 15:00:40 2026 GMT
Subject: CN=8ba74688f6afe4084fdbb6f3e1e238b4d17e51f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:f5:8a:7d:ac:00:c5:65:56:31:d9:26:d5:
54:1e:91:0b:e7:7f:55:5a:58:86:f0:57:5a:02:29:
43:70:2b:c0:46:6b:88:c8:d8:59:8b:13:9b:0f:ac:
0b:31:df:26:22:7d:dc:1a:02:97:ac:9b:c5:96:14:
e0:23:02:36:13:77:c9:7b:32:b1:fb:73:c2:34:a3:
7a:6b:ab:19:91:79:68:17:00:04:b6:2c:8f:0e:f3:
e8:ef:11:b2:0c:13:62:fe:e7:f9:62:a9:af:dc:25:
bc:89:e0:b8:59:f8:8b:21:cc:d9:9c:4b:84:df:5d:
79:5e:61:09:ea:29:46:4a:11:56:2d:9e:d9:7a:67:
3a:cf:dc:e6:f7:2e:3f:75:b3:3f:9a:0a:0f:2f:c3:
bb:dd:7a:3a:ab:c1:5a:29:2a:1d:1f:10:10:a3:44:
a4:38:52:97:e9:eb:0e:6c:05:23:dc:a1:72:43:cb:
c7:de:a1:4f:f5:93:8f:c5:ac:a2:8b:d4:7c:70:08:
b0:95:56:a8:32:1c:df:6f:86:ff:2d:4a:2b:5b:e0:
af:d6:07:e3:2b:8e:3a:6e:73:3b:c4:7d:c6:54:7a:
fa:f2:e5:b5:55:a1:d1:ac:82:72:12:82:7e:31:93:
d9:fa:e0:1d:af:d0:20:ed:ac:de:b8:9e:14:e0:3f:
85:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A7:46:88:F6:AF:E4:08:4F:DB:B6:F3:E1:E2:38:B4:D1:7E:51:F8
X509v3 Authority Key Identifier:
keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5d:5a:07:01:84:49:59:72:03:69:ac:0b:3e:cd:44:a0:0f:
24:68:13:37:d8:ab:0f:93:2c:ed:48:ea:32:62:f7:12:46:9d:
6c:f6:d6:b2:83:24:f9:66:6b:52:3d:37:f9:5f:82:3a:9d:8c:
70:16:1e:f7:37:ac:f9:0d:f4:4c:1e:d6:13:22:f2:0c:91:40:
3e:52:ab:54:8e:0f:1a:fe:8c:b1:7e:02:d9:53:98:59:2a:92:
50:31:5c:d7:12:c7:96:86:f2:f1:ab:40:de:5d:29:46:a6:29:
2c:79:f1:6a:e5:d8:a3:61:e7:54:d1:99:62:9f:50:f2:d9:22:
39:d9:69:2f:a2:a1:8f:55:df:30:2d:f1:c2:91:f8:3d:3e:7f:
f4:b4:fa:fb:ca:1d:78:b5:47:8b:f3:bb:6e:79:85:63:8e:8d:
3f:90:04:d8:59:4a:2f:95:07:0e:45:9f:29:96:71:db:67:81:
60:21:df:61:33:2a:e5:80:24:7d:42:ff:a5:79:f1:66:a4:14:
33:1f:9c:49:c9:f2:87:20:00:36:a3:92:9a:eb:db:ec:5f:59:
eb:41:98:81:f5:4b:37:1f:b7:7e:ee:70:9e:78:97:d2:b2:93:
53:2f:91:7c:5a:dc:34:52:e2:1f:9f:95:15:3c:80:5f:c7:ea:
26:3e:3c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:20:48 2026 by rpki-client