Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
File: txRZXFDDUZIbDemldUChXlwcYYo.mft (raw, json)
Hash identifier: WwZgBYpQkoXdKvsFgyJBz2yDuiJg+On/c/QXuEvpOnw=
Subject key identifier: 5B:F5:F9:ED:A6:20:99:7A:0F:7E:42:ED:4D:B6:2B:97:A3:5C:6B:9A
Authority key identifier: B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
Certificate issuer: /CN=b714595c50c351921b0de9a57540a15e5c1c618a
Certificate serial: 019D26966900C7EF09B3CCBCC0F5C7EA4576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
Manifest number: 12E8
Signing time: Wed 25 Mar 2026 20:01:24 +0000
Manifest this update: Wed 25 Mar 2026 20:01:24 +0000
Manifest next update: Thu 26 Mar 2026 20:01:24 +0000
Files and hashes: 1: GuWBmwhJapEp_BmmuNbZSMGsF-Y.roa (hash: XKoJ/kEd+7q2jht4EhlLR7+g4VG6e/EP//UCSF6Kcuw=)
2: txRZXFDDUZIbDemldUChXlwcYYo.crl (hash: KDe83tzz+GBbI5alvQi3iOplpKUlznu8+8+HIQ45hx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:69:00:c7:ef:09:b3:cc:bc:c0:f5:c7:ea:45:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b714595c50c351921b0de9a57540a15e5c1c618a
Validity
Not Before: Mar 25 20:01:24 2026 GMT
Not After : Mar 26 20:01:24 2026 GMT
Subject: CN=5bf5f9eda620997a0f7e42ed4db62b97a35c6b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:54:ee:88:73:0f:e8:38:71:72:02:07:a2:
77:76:51:b3:bf:50:4f:c2:84:f9:d4:4b:5b:43:f3:
e5:8e:a3:7e:6d:55:f6:42:18:a6:4e:67:6e:9c:b5:
32:3c:ed:2f:f0:c9:e9:0d:e2:b1:43:75:48:0a:08:
b8:78:5f:52:57:14:27:21:fc:cd:f5:67:c8:0c:c3:
75:0a:0b:c4:4d:04:f4:0c:60:7e:d5:b6:53:9a:6b:
fa:14:49:69:b0:b8:d7:f3:d0:de:01:75:24:a4:72:
6c:91:d8:80:1b:1c:93:ce:b3:3a:ec:90:a4:4d:eb:
7f:e0:18:82:84:0e:80:67:e1:56:0d:af:c2:af:db:
ea:20:ce:ac:6f:95:cb:f8:b6:15:7d:e4:df:4f:5e:
75:46:e6:0b:bc:30:82:8b:71:9f:46:34:c9:d0:43:
bd:42:ca:e8:48:c5:6f:6e:5c:05:59:36:3c:91:1f:
7a:24:5d:5d:72:bc:1b:a8:c1:fc:c2:73:c2:1a:c5:
99:6b:46:23:96:60:3e:ac:51:2e:bf:13:db:14:a1:
ae:15:f2:05:1d:25:14:c4:8b:c4:41:76:f8:2d:1c:
0c:4e:25:a5:b4:a1:33:19:17:24:a8:d6:c5:16:84:
e3:47:46:c6:f3:b9:77:d8:25:77:83:31:d8:b6:54:
a5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F5:F9:ED:A6:20:99:7A:0F:7E:42:ED:4D:B6:2B:97:A3:5C:6B:9A
X509v3 Authority Key Identifier:
keyid:B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:05:e4:fd:ca:7a:15:d1:64:a3:e7:98:a3:7b:31:5a:8a:43:
86:73:47:98:41:01:4a:da:04:50:ba:60:a6:dc:35:93:ed:2d:
2d:80:8c:2a:47:c2:b0:67:ae:db:9b:50:cd:97:b7:1f:e1:f9:
de:24:1f:48:f9:8d:c4:b5:34:08:18:61:e1:36:2f:27:c3:85:
77:fe:2d:ed:fb:f2:67:15:b8:3a:5d:c3:f1:c2:af:a8:7a:82:
03:4e:44:18:02:8b:b5:60:99:9b:75:06:46:6a:a4:fe:6e:b9:
da:73:84:b1:5a:f6:97:cd:cb:75:e6:1f:38:b7:79:45:a4:18:
2b:b0:9a:af:13:2f:92:47:0c:91:53:c9:83:33:de:0f:79:f8:
a0:b7:eb:3e:7e:58:87:74:8f:d5:d4:e7:d0:0f:95:93:9a:1c:
9e:2d:1d:a2:8b:48:c8:ae:bc:f8:1d:8f:d5:1e:4f:24:2f:2c:
d6:f2:91:5e:9d:bc:7a:53:c0:a6:45:54:9d:0b:04:7a:9e:51:
b0:36:f2:38:22:0e:7d:69:53:7b:8f:e8:1e:5c:ea:d5:0b:03:
20:63:81:e5:d5:3c:fe:c0:2c:c7:06:19:a4:33:3d:63:60:37:
3c:38:4a:32:0f:3b:e0:7c:7c:94:86:81:bf:cc:a3:eb:b7:30:
b7:22:f6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:59 2026 by rpki-client