Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
File: RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft (raw, json)
Hash identifier: bTRQUMvEFwlW4c96lbotIhp8FjHyfVq1YnhS2Wp5Ruw=
Subject key identifier: 4E:50:A9:8B:EB:BE:8E:38:6D:AB:91:8F:FF:C0:E3:EF:AF:43:42:E3
Authority key identifier: 45:76:70:54:D1:93:A3:B8:D6:C2:C0:09:F5:9C:F6:43:E1:49:E3:9F
Certificate issuer: /CN=45767054d193a3b8d6c2c009f59cf643e149e39f
Certificate serial: 019D284D39221818976D2EF235D0FF56E22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
Manifest number: 1282
Signing time: Thu 26 Mar 2026 04:00:42 +0000
Manifest this update: Thu 26 Mar 2026 04:00:42 +0000
Manifest next update: Fri 27 Mar 2026 04:00:42 +0000
Files and hashes: 1: 3n3qv-NIFDfYNIwq893hOV2mItU.roa (hash: fPlKtrxURx2WVwQAzRf5x0bQA1CR4xrOvVBRMEkFGho=)
2: RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl (hash: mI+lVi50k4XbE8O+kyq0LWy3oLW+LuMBGzgA+KRlOjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:39:22:18:18:97:6d:2e:f2:35:d0:ff:56:e2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45767054d193a3b8d6c2c009f59cf643e149e39f
Validity
Not Before: Mar 26 04:00:42 2026 GMT
Not After : Mar 27 04:00:42 2026 GMT
Subject: CN=4e50a98bebbe8e386dab918fffc0e3efaf4342e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:12:23:63:14:a0:79:e2:fb:e1:dc:07:0c:76:
e8:59:f5:be:ac:f4:a3:3e:42:70:1b:85:84:55:2c:
71:f9:ce:81:1d:36:81:0a:ed:b1:5e:ca:b8:e4:57:
b7:8c:c0:db:f1:2c:77:cb:5f:a6:2d:ef:ce:cf:eb:
af:8c:84:0c:62:08:51:3f:20:30:dc:8e:d4:5c:93:
68:f9:ac:82:b3:4d:a8:4b:ac:45:0a:67:b4:6a:9a:
e0:fd:d1:30:be:29:5f:f5:dd:b7:18:b4:f5:53:28:
89:2a:cb:67:71:21:2c:d1:e1:9f:de:14:5b:18:65:
eb:75:2c:1d:66:71:26:19:8b:b7:65:63:07:69:c4:
2f:57:fa:ec:b4:46:7e:d0:3a:37:23:42:2e:23:a7:
55:ee:16:8f:d4:39:a7:e3:07:64:ca:fa:6a:36:de:
74:d4:72:47:fc:63:58:f4:85:ca:47:f6:05:b2:e5:
be:1b:24:aa:c1:e6:10:7f:42:85:57:e2:62:9d:10:
e4:3d:82:8d:ab:a2:2d:27:12:37:ff:43:23:23:c4:
2a:74:6e:50:89:a9:84:34:bd:0d:94:ae:1d:f7:bc:
83:f0:53:ee:9d:96:0d:af:7d:64:5b:33:53:a9:75:
e9:c1:f4:cc:75:7d:5b:ce:2f:03:99:ce:4b:96:48:
b4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:50:A9:8B:EB:BE:8E:38:6D:AB:91:8F:FF:C0:E3:EF:AF:43:42:E3
X509v3 Authority Key Identifier:
keyid:45:76:70:54:D1:93:A3:B8:D6:C2:C0:09:F5:9C:F6:43:E1:49:E3:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b8:83:a1:fd:e8:5a:79:91:f1:96:f5:9a:73:25:31:83:e5:
cd:76:6c:0f:cd:57:e9:52:65:99:c1:60:3a:53:3e:39:d1:28:
8e:29:d8:d8:03:26:5b:6d:e5:b9:55:06:3f:0a:86:48:f2:77:
45:da:df:71:53:7f:3d:54:7a:75:06:4e:d0:22:3d:06:69:0d:
b6:1c:6b:69:51:cc:67:fc:51:78:15:d6:23:04:f1:9e:24:67:
55:5d:04:7a:63:da:3d:8a:d8:54:3c:67:f9:b9:84:b0:2b:1e:
4f:5a:5e:03:11:62:12:2c:7e:65:a0:67:12:29:18:e1:b4:4b:
b7:41:c2:8d:5f:c8:27:8a:70:15:c3:de:e9:46:14:93:9b:93:
bd:93:1d:09:96:08:2d:b1:2a:1b:f6:9e:6c:87:7d:8c:42:0d:
bf:96:74:06:42:ef:9f:a4:16:48:f7:75:e2:24:10:f8:5f:d7:
49:29:3e:87:21:3b:4f:99:93:41:03:1d:3e:5b:ea:ad:c7:17:
d6:ab:7b:23:7a:30:ed:35:8c:e3:15:2c:c4:2d:7b:e9:1d:74:
d4:9d:e6:c3:a8:76:02:0d:d8:7b:13:0a:90:96:9d:d0:d0:23:
78:9a:b5:d5:60:fa:0d:ec:c0:44:6f:66:88:91:74:11:6d:bd:
84:79:4f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:30:50 2026 by rpki-client