Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
File: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft (raw, json)
Hash identifier: 86DcKpg/zTg2m3UkHnZ7dsL2MXiITfz6Mie/KzL4VkA=
Subject key identifier: 9F:19:F4:38:23:5A:9B:85:7A:F2:4D:3F:38:0E:99:0D:2C:D0:BC:78
Authority key identifier: 45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
Certificate issuer: /CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Certificate serial: 019D24DE537F2E41E8AC9437C1B121C72C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
Manifest number: 133A
Signing time: Wed 25 Mar 2026 12:00:43 +0000
Manifest this update: Wed 25 Mar 2026 12:00:43 +0000
Manifest next update: Thu 26 Mar 2026 12:00:43 +0000
Files and hashes: 1: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl (hash: sRDfDRvKEfzey+IH+Zyafg7vFMAxSzg5OVNDg2kT8gg=)
2: qJDNQCIShiElkTydihRoQ4bZNh8.roa (hash: boKmhzMkJFM950qaKYC/IewwayfQB6vcVhEgjzqGKmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:53:7f:2e:41:e8:ac:94:37:c1:b1:21:c7:2c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Validity
Not Before: Mar 25 12:00:43 2026 GMT
Not After : Mar 26 12:00:43 2026 GMT
Subject: CN=9f19f438235a9b857af24d3f380e990d2cd0bc78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:25:47:02:e6:2d:5d:30:cb:7c:42:c9:7c:50:
3b:72:22:31:17:99:70:42:f2:40:4f:31:72:cb:98:
37:c7:6e:24:28:cf:00:1d:1b:6c:7c:40:f2:6d:1c:
01:51:a1:fc:14:84:de:07:56:07:ef:f1:b1:12:cc:
b7:1a:ce:a1:9c:47:41:31:09:74:a1:ff:ec:d0:db:
d5:91:0d:77:c6:2a:f1:0b:e8:71:b6:bf:7b:ff:40:
09:48:ab:2e:03:41:29:92:99:74:39:f9:95:c0:25:
32:e6:65:99:88:a8:05:1f:26:8b:27:30:d6:ff:6d:
9f:73:c2:ff:c1:e9:f8:6a:2e:c3:e9:57:a7:6b:d9:
07:3b:c0:d5:9e:b2:a1:7a:1f:a2:c0:7e:41:de:12:
2b:13:96:9c:2d:2e:c1:67:13:dd:b0:d1:11:c1:d4:
a4:71:91:e7:68:f6:08:9b:25:55:76:01:ab:a0:b8:
7c:b1:05:a3:73:fe:47:fe:0a:82:87:e6:54:5d:30:
60:65:84:26:fe:c3:70:35:2a:2e:ac:86:a6:12:40:
1f:ee:de:e5:65:12:e6:4e:e2:61:14:cb:72:4f:0c:
98:70:ce:d5:d7:05:d4:97:4e:29:7f:40:6e:22:b8:
9d:b0:3d:34:93:c5:28:2b:cc:91:06:9d:17:0b:f8:
26:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:19:F4:38:23:5A:9B:85:7A:F2:4D:3F:38:0E:99:0D:2C:D0:BC:78
X509v3 Authority Key Identifier:
keyid:45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:49:cd:9b:79:80:40:af:0c:b1:9e:e5:ef:3b:6a:1d:9b:99:
d8:a5:b1:00:f5:80:d2:b6:9b:5a:f8:2c:da:25:c9:0b:ba:e0:
6e:87:73:a9:2e:ef:c7:cd:5d:39:65:65:ec:29:4a:02:73:88:
5c:bf:22:df:87:d5:78:a3:f2:ca:5e:f8:b9:5e:4f:95:ed:b8:
02:c8:40:8e:d6:e2:0f:8c:bd:dc:e4:0e:de:fc:87:df:85:9a:
4d:77:da:eb:d1:fa:30:b8:26:7c:e1:fa:ff:ac:a7:17:50:29:
e0:b7:c1:8f:47:ff:3d:85:87:b8:d7:68:56:8e:ec:f9:9d:6a:
c0:40:bf:a5:17:dc:a5:1e:2d:46:75:39:eb:31:8a:cc:2f:1b:
dd:9c:e9:d3:01:1a:1b:d7:7f:7a:4c:81:d7:26:de:78:57:25:
36:07:a0:bc:e9:9b:e0:81:08:42:9d:bc:76:7e:63:8c:12:77:
f5:cf:24:ae:98:74:16:d3:32:7d:3d:13:f1:a1:45:6b:79:bc:
82:44:6d:35:6d:b2:e8:f6:21:c7:2e:81:f2:c6:f0:17:6c:b4:
e0:e6:cc:e9:1d:5c:83:28:a0:53:2e:28:78:86:0b:34:65:e0:
74:3c:9b:5c:52:25:f9:80:2e:09:fb:32:ce:c3:40:50:26:1d:
6a:60:4f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:22:01 2026 by rpki-client