Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
File: RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json)
Hash identifier: pc3O6JQ+UceKmL8NhKsPSfix5f4uJMW7LHosdxW8t0g=
Subject key identifier: AD:29:74:F5:31:1D:70:14:A9:84:4E:EE:05:BA:59:F3:5C:AA:7B:05
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial: 019DCED026CE8B83026FF2B88CE2CDD341C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 12:00:41 +0000
Manifest this update: Mon 27 Apr 2026 12:00:41 +0000
Manifest next update: Tue 28 Apr 2026 12:00:41 +0000
Files and hashes: 1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: JuyeFiznCl2GAht7oeajtZJNIEQ/FHwW/vbuA4xUHWQ=)
2: SQFAkjt57y-pTXhYLYstw04Yit8.roa (hash: hgGTZStyS8714Gh8ubpZL/WCwm7djUM9MS9CR1krlpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:26:ce:8b:83:02:6f:f2:b8:8c:e2:cd:d3:41:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47119a205683167925b9f04174312637b1600c07
Validity
Not Before: Apr 27 12:00:41 2026 GMT
Not After : Apr 28 12:00:41 2026 GMT
Subject: CN=ad2974f5311d7014a9844eee05ba59f35caa7b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:97:3a:66:a4:af:d4:9e:5e:04:96:de:7b:
25:20:0d:24:a8:f0:a3:6c:55:25:9e:98:d0:78:fb:
71:da:f8:52:37:39:e0:ca:3f:65:55:d4:04:46:ad:
46:48:07:a8:f7:df:d5:a8:e7:75:ab:0e:68:2f:88:
3d:1b:e5:72:3c:58:31:0d:12:9c:a7:92:18:df:8c:
9a:55:74:7c:e7:a9:bc:ed:91:91:82:12:32:82:7d:
13:0b:0c:1b:d0:38:82:34:34:86:df:cf:9c:8f:e1:
e8:a5:a6:5a:46:be:0d:0a:ee:67:32:fd:25:49:69:
a5:ac:c2:f6:c6:ee:55:e6:57:5c:c6:33:65:79:b8:
07:6e:db:4e:c4:57:48:c4:21:ba:ff:e6:df:17:78:
de:fc:8d:89:4f:e8:25:6d:54:ec:5b:d2:55:2a:ba:
9e:2b:3a:8d:4c:8b:3e:50:48:57:44:2e:27:58:54:
2a:64:5f:24:b1:82:29:58:ba:3a:8e:d2:df:d8:55:
53:2f:d2:4f:47:f6:f5:5c:22:fc:7e:b7:a7:5a:47:
ef:b9:29:4c:6c:51:88:1c:dc:4b:12:6d:f9:8f:d4:
c6:b4:0e:5a:1a:9e:b8:fb:1e:87:f6:44:05:8a:15:
18:de:b0:d4:22:50:5d:c7:79:09:cd:3c:f5:ab:3d:
cc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:29:74:F5:31:1D:70:14:A9:84:4E:EE:05:BA:59:F3:5C:AA:7B:05
X509v3 Authority Key Identifier:
keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0d:71:bc:45:6f:63:82:a1:15:74:7f:83:9c:44:6a:26:d0:
1b:c7:58:8d:f4:ab:65:5a:2b:e3:aa:bb:99:d0:1a:10:2c:d4:
2e:c9:a9:bc:f7:e0:9c:0e:db:fb:c1:a0:5c:24:49:e4:b6:93:
61:7f:e8:4c:b0:36:7b:fd:47:10:29:65:2c:42:e9:69:6f:96:
b2:ce:0d:82:30:7d:d8:16:e6:e3:a9:54:ca:1c:5a:55:0e:17:
6b:b0:6b:62:7f:a8:97:ce:37:c2:65:23:d5:82:18:96:ee:d9:
a0:19:6f:cc:d2:bd:81:9b:12:da:f0:f4:7c:f8:43:14:45:67:
e2:7d:10:69:1f:7f:91:cb:63:ed:05:2b:6d:cc:99:86:b5:0e:
9f:0c:07:0b:49:70:85:37:ea:fe:7b:a9:63:5a:96:72:0b:1a:
e8:f5:4d:6e:09:98:1e:be:09:2d:e5:10:5c:1d:15:05:59:1b:
22:ea:bd:b0:6e:48:45:53:de:72:06:53:81:08:07:9f:e3:a1:
0b:71:43:86:b1:bd:8f:81:e0:27:31:6c:94:79:e6:da:05:2d:
65:84:15:cb:ff:4a:8d:a2:af:f5:6a:1e:07:45:4e:54:9a:8c:
01:75:a9:28:cd:e9:7a:db:02:9c:53:85:bb:8f:6d:11:a0:b2:
25:cf:b9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:40:46 2026 by rpki-client