Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
File: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft (raw, json)
Hash identifier: Hq59Mh6mB0yJcdXUiylLR2m/VLqY8Un43o0aOwAhvVo=
Subject key identifier: BE:7B:C9:4F:87:0A:30:03:CB:5F:31:C6:F7:6D:F9:3B:48:6A:50:D1
Authority key identifier: 45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
Certificate issuer: /CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Certificate serial: 019D2AA9A11BDFC73D204A8525E09422712B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
Manifest number: 133D
Signing time: Thu 26 Mar 2026 15:00:52 +0000
Manifest this update: Thu 26 Mar 2026 15:00:52 +0000
Manifest next update: Fri 27 Mar 2026 15:00:52 +0000
Files and hashes: 1: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl (hash: 9Ytbwc8iJZDlZKVjEFAIFv0tVTx3DCdvrSaZUTEy2go=)
2: qJDNQCIShiElkTydihRoQ4bZNh8.roa (hash: boKmhzMkJFM950qaKYC/IewwayfQB6vcVhEgjzqGKmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:a1:1b:df:c7:3d:20:4a:85:25:e0:94:22:71:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Validity
Not Before: Mar 26 15:00:52 2026 GMT
Not After : Mar 27 15:00:52 2026 GMT
Subject: CN=be7bc94f870a3003cb5f31c6f76df93b486a50d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:d7:66:55:e5:e3:0d:bd:f9:c0:91:d4:38:
6b:d1:11:8f:a8:8b:da:34:fc:77:81:6d:f0:c5:0c:
69:c5:b0:4a:df:a4:d4:a3:cd:f3:bb:43:30:1f:e6:
ea:f6:0f:c3:94:e8:a8:db:94:1d:98:29:8d:92:41:
07:d5:65:4b:74:df:5a:e1:77:7e:04:7a:7d:b9:66:
21:7d:37:78:af:6f:2b:67:39:03:ff:7e:bf:b5:e8:
4d:b2:4f:4c:83:06:53:ec:a9:f1:eb:19:59:ae:4f:
e8:e0:a3:33:54:bd:d5:b1:3f:ef:6a:fc:e1:8a:48:
4a:65:85:56:6b:eb:b6:e1:b1:0b:3e:0b:61:9f:2e:
1e:40:ea:ae:56:9b:6d:13:b8:1b:af:d3:a0:2d:63:
b9:11:5b:4a:d0:59:a8:e6:91:29:a5:06:3c:93:88:
c5:94:7b:7d:15:7e:3f:4a:0a:80:5c:30:bc:e1:c9:
f5:63:ea:03:d3:9e:35:94:05:ec:d8:cd:91:26:f8:
ba:9e:07:e1:17:77:ab:85:60:26:a2:cf:91:71:ef:
58:c0:7e:5c:10:13:33:92:93:cd:2c:65:b2:1b:1b:
d6:48:dc:43:79:df:57:93:bc:17:90:85:6c:53:81:
83:fd:1f:3f:1b:24:7a:e5:fe:b1:c1:64:82:cd:35:
b5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7B:C9:4F:87:0A:30:03:CB:5F:31:C6:F7:6D:F9:3B:48:6A:50:D1
X509v3 Authority Key Identifier:
keyid:45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:35:1c:86:14:65:31:cb:7a:b4:75:86:18:1b:6c:75:41:31:
df:b3:f2:45:87:35:f1:dd:9e:62:4b:ec:a5:1e:01:46:5c:14:
e7:28:56:f4:6c:20:3c:0c:90:43:a5:9f:d9:80:25:ad:8d:e4:
04:e5:5b:93:d0:4e:d2:c1:eb:39:8f:b1:51:bd:38:69:ed:23:
98:14:29:8e:8a:35:f7:c6:0a:d1:7a:5d:28:a7:63:d6:46:72:
3c:91:75:82:23:c5:15:31:10:fe:ef:c2:c5:12:bc:79:5b:95:
02:6a:c9:c1:83:88:29:a7:6e:86:f6:ff:ab:48:ce:3d:12:29:
1c:f2:1f:e4:bf:a1:40:5c:b4:7a:ac:46:a7:7d:a3:36:20:3d:
99:a0:de:18:7b:97:ba:48:6a:8a:b0:6e:40:17:c8:e5:48:aa:
34:87:8a:ee:12:2a:76:88:a3:ce:77:34:e3:9f:69:c6:2d:1c:
9b:c7:36:54:16:be:c0:d5:ca:60:4c:56:89:fb:4d:5f:15:3b:
72:e3:a1:2a:0b:ec:c3:b1:1d:ee:62:96:0d:94:b5:19:70:a3:
e6:18:93:4a:68:c0:7c:7c:ac:99:f9:36:b4:b2:2c:f1:03:02:
a0:db:34:75:cb:84:7e:fd:6d:02:43:9f:11:89:bc:75:e4:ce:
e4:ae:8c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:05:31 2026 by rpki-client