Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
File: RxS79TeHr06TXTCkjoglotoUoIs.mft (raw, json)
Hash identifier: nIPeIiBUH8MXsVwVa++QleGtVem4sNGOaOUkkDhwpd8=
Subject key identifier: E8:E4:F5:EA:D9:A1:BA:C0:05:3A:BC:AB:25:CA:B4:F5:26:9E:2F:07
Authority key identifier: 47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B
Certificate issuer: /CN=4714bbf53787af4e935d30a48e8825a2da14a08b
Certificate serial: 019D265EEAEAD2411D3CC17EFB0A7A47F441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
Manifest number: 01C4
Signing time: Wed 25 Mar 2026 19:00:47 +0000
Manifest this update: Wed 25 Mar 2026 19:00:47 +0000
Manifest next update: Thu 26 Mar 2026 19:00:47 +0000
Files and hashes: 1: RxS79TeHr06TXTCkjoglotoUoIs.crl (hash: 9sXTltRZMlYC6c0RMl0ZddFissCwPkimrGRqJq65C9Q=)
2: o-mtc665fbhvSfNUs9vwAj_na4c.roa (hash: CKoVltX9Hmfz+Z2sk8sI92L3m9MX0WVmDaQsoWexPl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:ea:ea:d2:41:1d:3c:c1:7e:fb:0a:7a:47:f4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4714bbf53787af4e935d30a48e8825a2da14a08b
Validity
Not Before: Mar 25 19:00:47 2026 GMT
Not After : Mar 26 19:00:47 2026 GMT
Subject: CN=e8e4f5ead9a1bac0053abcab25cab4f5269e2f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:23:6e:c0:cc:95:0d:66:56:a9:34:cd:c3:f5:
f2:92:bd:2d:a1:f2:32:c7:3d:f6:d7:2c:6d:b5:4b:
a1:66:24:97:bf:4d:4c:40:f3:57:8b:c4:5b:94:b4:
b7:83:0b:40:80:1f:74:07:49:5b:90:a0:c9:7e:a6:
f2:d6:aa:28:8c:e1:19:ad:31:8f:7f:95:ef:9b:cd:
a7:21:56:2a:58:09:3a:af:50:4d:5c:65:d4:98:5b:
64:3d:99:1a:ac:3f:2f:ce:9f:9e:96:5e:31:7c:fa:
c7:66:c8:7e:3f:d1:d7:ba:19:55:58:f0:02:ba:9b:
5e:85:5b:ef:63:17:fb:22:9f:c5:08:28:0c:25:c0:
5e:a8:92:56:f2:e5:fa:4e:0d:25:09:23:7a:5a:2a:
4e:f7:d8:7e:40:01:ec:ff:f3:d9:46:02:c3:0e:40:
71:e6:b9:ae:6d:8b:35:70:04:16:57:13:34:38:b1:
2b:41:fd:85:d4:f4:93:c0:0f:08:e7:f5:ff:59:d6:
e1:20:32:4d:52:39:2f:01:2d:8e:d9:a7:29:e5:43:
c4:ab:9b:3e:6d:81:ce:7b:26:fa:37:c2:34:e2:ee:
37:14:8b:94:a1:d1:17:4c:4b:de:19:57:36:cd:3d:
8d:1e:78:13:8d:f3:f4:81:47:ce:51:26:cc:98:c6:
89:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E4:F5:EA:D9:A1:BA:C0:05:3A:BC:AB:25:CA:B4:F5:26:9E:2F:07
X509v3 Authority Key Identifier:
keyid:47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:06:2c:ce:58:9b:94:16:31:18:71:23:f1:e4:57:fb:ed:1b:
a0:fa:2f:71:da:fa:47:db:bd:7f:6b:7b:4b:10:29:46:2d:26:
44:41:9c:1c:76:6a:80:41:27:6e:38:3f:ad:16:9c:31:ad:a7:
c1:44:4e:7b:80:b9:a4:bf:01:c4:fd:72:b0:52:7e:f6:cd:59:
c9:73:98:44:49:c1:ab:e3:4b:31:d5:4c:0f:12:e6:2e:99:c3:
30:d0:54:a3:36:e4:da:6b:27:3c:e3:59:27:af:e3:27:d5:68:
28:6a:25:c4:2f:64:cf:51:fa:70:b6:bb:99:81:ba:d8:6f:54:
2a:da:c3:ac:18:f9:53:1b:17:46:db:8f:86:45:97:5d:d2:3a:
d0:5f:96:64:bb:bd:23:a4:16:54:6b:ad:a8:ae:2d:71:d5:fe:
3d:17:dc:bf:ba:a8:34:98:c9:ed:d0:55:ed:de:40:00:5b:36:
50:ae:b5:77:54:a5:83:dc:e9:6f:22:72:e0:e4:fa:bc:c9:e5:
b4:4e:4f:ad:aa:8e:5f:9a:20:ea:3c:c1:c0:19:0a:7c:02:2e:
6a:fc:ef:fe:b6:75:fd:ff:59:d0:8b:63:a0:ea:9d:f8:ce:bd:
ba:47:a1:e3:3d:69:9f:5d:b3:ad:8c:ff:30:a5:55:95:0d:6a:
8f:3e:37:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:01:50 2026 by rpki-client