Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
File: R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft (raw, json)
Hash identifier: kZOiQM72vHHUufKBBvghpZFdx3H7X1Cfhq164JsBBqM=
Subject key identifier: 88:D0:4B:EB:94:17:FB:6B:5C:C8:2A:17:D7:18:A7:2D:A1:01:D6:55
Authority key identifier: 47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
Certificate issuer: /CN=47e5d333dad9d62d5328d12578a31def42af8f34
Certificate serial: 019D25BA469AB86E7F74648D953797ABD51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
Manifest number: 0B06
Signing time: Wed 25 Mar 2026 16:00:57 +0000
Manifest this update: Wed 25 Mar 2026 16:00:57 +0000
Manifest next update: Thu 26 Mar 2026 16:00:57 +0000
Files and hashes: 1: R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl (hash: a1k9eATaq/DY6OLycShzyDrM7sKO3F+sltmqqt4I/uU=)
2: lDMKh21Wt4FbbKS1OgeKAWJLOUA.roa (hash: 3L7WTrIU7aPDIrcLzqUSb6E2nzrLgIJ/FaZM9uhhyxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:46:9a:b8:6e:7f:74:64:8d:95:37:97:ab:d5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e5d333dad9d62d5328d12578a31def42af8f34
Validity
Not Before: Mar 25 16:00:57 2026 GMT
Not After : Mar 26 16:00:57 2026 GMT
Subject: CN=88d04beb9417fb6b5cc82a17d718a72da101d655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:37:f3:9c:de:14:40:a9:f1:27:cc:cb:c6:
54:2d:ef:6b:b3:bf:e8:73:70:e5:b8:1a:ad:b2:87:
33:73:6c:7c:5d:bd:0f:e3:59:36:89:67:4f:1f:48:
4d:90:39:31:8d:69:76:99:6a:a0:c8:55:75:0a:eb:
48:7b:5f:65:c1:40:a8:ae:40:9d:3b:c0:d4:6f:b5:
44:95:a0:d8:77:a5:5d:ff:5e:d8:92:df:c5:ca:b2:
9c:56:d2:13:ea:f2:99:c4:aa:24:8a:1d:cf:54:8f:
2e:b5:e2:64:d1:5a:8c:e2:c3:da:a7:ba:7b:f7:ef:
6a:a8:79:a3:6d:56:30:6c:c2:90:01:3b:c5:fe:a2:
c0:8d:76:a3:1f:a5:d9:e9:d4:a4:dc:fd:43:24:f0:
2b:ba:59:8c:0e:8d:01:15:05:47:43:f5:91:41:28:
ce:0a:fd:47:95:4b:a9:65:ba:eb:35:b6:c3:7b:8b:
f4:82:83:0d:06:fb:9c:90:59:eb:4c:43:e4:64:de:
e5:11:cf:31:38:d2:73:46:30:4c:8d:ed:13:b3:fe:
01:06:7c:d0:d8:43:d9:3e:15:b2:53:fe:5b:30:5c:
27:68:d0:49:bb:85:fd:9d:27:cd:60:ee:8f:27:02:
4d:de:49:c1:b6:a6:67:cb:81:8b:a5:08:8c:00:44:
83:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D0:4B:EB:94:17:FB:6B:5C:C8:2A:17:D7:18:A7:2D:A1:01:D6:55
X509v3 Authority Key Identifier:
keyid:47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:26:0e:64:fe:53:2e:7e:e9:46:23:3e:54:a2:90:f0:92:0b:
3a:bb:12:67:16:82:af:8c:6b:51:d1:dc:96:07:ca:86:78:e5:
cb:e1:ae:65:be:10:ef:da:01:b5:20:f8:d0:41:bd:fd:63:55:
fa:46:d4:29:10:22:81:26:12:04:78:0f:5e:83:f1:9c:37:1b:
66:b7:92:c3:25:59:3d:2f:50:6e:f6:c8:1c:23:e3:81:37:75:
29:80:8e:31:90:7f:fb:fc:72:6f:c6:ca:73:56:85:a3:c4:3c:
83:da:3a:dc:be:8d:56:9e:cb:26:69:43:a1:fb:67:64:bd:24:
19:e3:98:e0:a4:0f:28:84:4b:2f:2e:04:0a:63:86:e2:4d:da:
8a:3e:e5:2c:6a:f0:e1:c2:15:bc:1f:e8:b2:6b:cb:87:2e:23:
bd:51:d0:6f:7e:17:a8:34:5d:b9:ca:56:67:13:60:bc:dd:71:
b8:2a:dc:a4:36:50:6b:e8:9f:59:48:7a:d8:58:c8:5c:fa:55:
df:4e:52:3b:8a:7a:dd:38:bf:5c:d9:45:b8:dd:bd:5b:66:6e:
f3:cb:6a:79:b6:b1:44:80:4e:f8:29:87:f5:5f:04:29:2c:57:
6d:48:22:08:e3:30:7a:1d:e8:cb:f3:84:f5:e5:8e:33:cd:b9:
95:12:02:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:04 2026 by rpki-client