Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
File: RxS79TeHr06TXTCkjoglotoUoIs.mft (raw, json)
Hash identifier: anhKTTfHhdNu7HkwUe2671jyqyTDgRCLMalu5/1KAdA=
Subject key identifier: E0:64:84:9F:0E:DE:0A:70:7B:60:D1:7B:CD:A4:77:3C:41:22:B1:AF
Authority key identifier: 47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B
Certificate issuer: /CN=4714bbf53787af4e935d30a48e8825a2da14a08b
Certificate serial: 01A0EBF9E143AA9F452B331F34768C5B796C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
Manifest number: 03B8
Signing time: Tue 29 Sep 2026 07:03:36 +0000
Manifest this update: Tue 29 Sep 2026 07:03:36 +0000
Manifest next update: Wed 30 Sep 2026 07:03:36 +0000
Files and hashes: 1: RxS79TeHr06TXTCkjoglotoUoIs.crl (hash: PTexyj9jhrxO3c3x3+ImByjm/Slbusp3zHXyqIp8IFg=)
2: o-mtc665fbhvSfNUs9vwAj_na4c.roa (hash: CKoVltX9Hmfz+Z2sk8sI92L3m9MX0WVmDaQsoWexPl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:e1:43:aa:9f:45:2b:33:1f:34:76:8c:5b:79:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4714bbf53787af4e935d30a48e8825a2da14a08b
Validity
Not Before: Sep 29 07:03:36 2026 GMT
Not After : Sep 30 07:03:36 2026 GMT
Subject: CN=e064849f0ede0a707b60d17bcda4773c4122b1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:ea:33:69:af:be:c5:55:b8:87:7c:d8:31:
a7:45:fd:a8:43:05:f1:08:8d:bd:36:d2:75:17:eb:
5b:b2:72:d9:d4:16:20:6c:ea:6a:96:7c:6e:3d:b1:
60:f6:0c:25:d1:ae:46:53:ae:33:eb:4f:e4:13:90:
be:cf:6f:7c:57:92:bb:8b:24:a9:90:97:fa:4d:f2:
0a:b4:75:e8:86:45:35:bc:ac:dd:d7:71:8f:cf:14:
0c:77:b0:98:39:c1:6a:e0:6e:5f:1c:14:5d:6f:75:
9d:e2:69:0f:a8:5a:e0:d0:97:40:25:bf:4b:f0:b1:
91:a5:c4:54:71:02:0a:1b:5d:69:99:82:be:57:21:
14:92:87:e7:10:2a:0b:a5:37:31:fe:de:8b:d7:11:
20:b7:39:a1:e8:18:3f:01:30:fd:d8:d1:74:41:eb:
73:ef:54:9b:b5:83:04:3d:9c:3c:d6:24:b9:c2:88:
7b:79:48:31:33:29:1a:50:ac:d6:8a:cb:f3:f5:84:
6f:6c:2c:54:23:e0:c2:fa:3b:f9:8b:40:60:98:54:
e8:ea:42:f5:51:9f:d2:d7:f3:6f:1a:a1:76:fb:ca:
70:d1:f0:2d:c4:b0:aa:60:4b:4c:f7:d7:a7:20:40:
c3:18:77:b9:e2:fc:bb:5f:a5:68:88:f4:80:8e:8b:
da:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:64:84:9F:0E:DE:0A:70:7B:60:D1:7B:CD:A4:77:3C:41:22:B1:AF
X509v3 Authority Key Identifier:
keyid:47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:53:3e:7c:aa:92:72:68:25:d8:48:db:38:12:98:5d:45:66:
d4:8a:7d:d2:c9:86:9c:95:4f:ef:1f:0b:c5:26:47:b4:02:dd:
ea:0b:ab:a2:77:0c:39:00:00:6f:8c:e3:bc:70:11:d2:d8:cb:
0e:3f:23:a5:b1:f7:7c:e2:dd:6c:51:14:24:de:5f:db:ae:8e:
11:73:16:0b:57:d6:4d:9d:6c:f9:38:ab:55:1d:af:75:2c:2b:
27:e9:01:59:d8:a7:34:fd:34:78:13:1a:d9:92:b6:06:90:a5:
b9:09:92:36:ac:c7:d5:d1:e6:38:01:73:c6:5c:30:02:11:dd:
3c:08:f1:c3:5f:ca:c1:ab:54:bf:1d:cf:f0:8d:39:6b:0d:fa:
fd:99:d3:69:30:b7:f4:7f:31:f6:c2:28:91:c2:b4:3b:95:dc:
31:40:00:5b:5b:db:3f:3d:45:35:49:06:05:4f:c2:88:9c:99:
1c:2b:be:99:89:74:38:6b:c7:67:db:93:af:3e:ed:86:02:3d:
7c:28:92:54:bd:34:78:61:55:20:a4:ed:d3:eb:b3:28:0c:f3:
e2:62:17:e6:5d:e5:7f:91:83:11:06:03:8b:50:31:23:3a:1a:
00:ba:da:6b:ea:ae:31:e2:00:e7:ce:62:8e:3b:29:88:96:53:
16:c7:70:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 18:05:13 2026 by rpki-client