Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
File: rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json)
Hash identifier: J0DqbLaectB+BMg6srbxMkZ1+ryYJzA85Su9kUD1/xo=
Subject key identifier: 7E:1B:31:24:E2:D9:2E:A7:E6:8F:C5:E4:C3:C9:9B:29:4E:36:4D:DD
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Certificate issuer: /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial: 019D28BB16CFECCA40FC0F4B2E5ACCC79D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
Manifest number: 13C7
Signing time: Thu 26 Mar 2026 06:00:42 +0000
Manifest this update: Thu 26 Mar 2026 06:00:42 +0000
Manifest next update: Fri 27 Mar 2026 06:00:42 +0000
Files and hashes: 1: KzmoITHkJpLOR4Tlul5pobyRKM4.roa (hash: AsqRiFYDTCnKZFcWZmiW079vgPj+Gpml9bimn7NxEjY=)
2: LeESlSzWIvuQdTBNS-mk1tTyv7E.roa (hash: WD96tCmI2Z4zPrVkF6yX9hz40ljCQT+UIo7XuVxQtwE=)
3: rXLsHixYlq3Kcw9EvhZkSV4zLvI.roa (hash: xL1IzYaCYhuM2YhqoZfpmf/cRlZ3zbvhm0l28fnKcTk=)
4: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: Xdw9gTRlepQbvu7K8sTF5oPH5bzvhWlAjL+C4W3hzeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:16:cf:ec:ca:40:fc:0f:4b:2e:5a:cc:c7:9d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
Validity
Not Before: Mar 26 06:00:42 2026 GMT
Not After : Mar 27 06:00:42 2026 GMT
Subject: CN=7e1b3124e2d92ea7e68fc5e4c3c99b294e364ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f6:48:3d:82:24:d7:84:88:f4:36:3a:74:8e:
62:17:12:06:9b:9b:5a:08:72:0a:2f:b6:d0:b9:15:
c9:d5:7b:31:4b:35:60:cc:e1:09:21:4e:05:4c:a7:
0c:92:c3:b2:9c:8a:d4:31:70:9a:0d:96:4f:d0:cd:
0d:84:61:ab:93:3c:89:dd:17:bf:21:8b:eb:80:b4:
e9:09:1b:36:b9:08:1d:15:d1:3a:26:54:bc:5b:f4:
a2:56:35:97:d9:d8:ce:13:cf:f3:b3:1f:d6:5c:ff:
55:9b:bb:bc:fc:99:d7:e1:e4:46:32:7a:bd:9c:50:
67:c4:fd:6e:75:e0:8f:42:bc:d0:d5:59:5b:96:dc:
fd:92:86:b5:fe:f1:71:3b:05:e3:f5:3b:d4:b7:d1:
8d:dd:71:b5:4d:ec:1b:27:31:64:17:00:d8:ae:de:
0b:59:ea:22:8f:98:c5:91:29:d0:9a:75:21:fa:1e:
90:1a:5d:5c:87:fe:cc:f8:1c:e5:a3:5f:25:9e:b4:
f8:83:ca:1e:be:b2:69:fb:67:3a:cc:d9:c9:0b:ec:
b9:c6:95:de:de:01:3b:1d:8e:2e:0d:30:be:42:64:
12:64:92:02:0c:59:37:0d:3d:8f:5d:51:da:bc:2e:
1e:f3:51:b0:51:b8:8b:18:0b:4e:97:bd:b4:84:c7:
19:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1B:31:24:E2:D9:2E:A7:E6:8F:C5:E4:C3:C9:9B:29:4E:36:4D:DD
X509v3 Authority Key Identifier:
keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1a:65:8e:2c:3e:3d:ac:03:44:6a:27:d3:df:39:1c:da:78:
5d:d1:97:27:96:d4:94:1a:cd:c8:8c:6c:94:e5:a5:76:f3:eb:
4f:b1:2d:80:03:cd:6e:da:7a:bb:2b:80:a0:74:fa:77:46:95:
14:da:96:63:c1:95:15:31:80:97:ca:f7:c3:35:a5:48:a7:44:
81:56:a0:7b:58:13:43:04:a6:c2:d2:3d:8a:9a:c6:e4:d8:da:
fd:66:17:9c:c3:5e:9d:5f:58:65:07:5b:67:8d:39:a2:a4:fa:
27:4e:5b:bd:0b:b5:8e:d8:99:37:7d:4b:1b:c4:61:c4:36:46:
d4:d9:04:59:22:03:14:50:f7:a3:d3:5a:f0:b0:ec:40:ad:57:
6d:94:1e:cc:4b:63:63:ed:fd:1e:dd:6f:2c:3b:11:a1:45:b1:
d7:1f:4f:b4:57:2b:43:a6:42:62:d3:a8:65:b8:c7:1c:df:c3:
24:1b:cd:67:e7:01:7b:3f:77:10:ed:9e:bd:37:58:be:98:03:
09:0f:15:ae:89:c1:e0:23:db:ab:60:d8:bf:f0:48:0a:2a:db:
38:73:c5:4f:e5:a1:6e:a6:53:9d:16:c6:ce:c1:d1:bd:e4:bf:
0e:46:ea:f1:0e:08:4b:78:46:98:34:16:d8:3e:ed:cc:cb:c9:
fa:06:63:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:57 2026 by rpki-client