Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
File: r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft (raw, json)
Hash identifier: WojscWIg7yn8L8ykhcETohXnFvuX12oU/j3FXi9lgp8=
Subject key identifier: CF:F6:0A:C4:BF:3F:75:D4:69:70:1A:7B:BB:17:B9:B9:99:7B:A1:07
Authority key identifier: AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
Certificate issuer: /CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Certificate serial: 019D2B4E0BBA1F38EEC6A864651E718C82C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
Manifest number: 1576
Signing time: Thu 26 Mar 2026 18:00:28 +0000
Manifest this update: Thu 26 Mar 2026 18:00:28 +0000
Manifest next update: Fri 27 Mar 2026 18:00:28 +0000
Files and hashes: 1: r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl (hash: X3K18EgbMBD048jB/tojbc2/46NSXwXIbVkxnWmCyC0=)
2: sXuiRHlvEW8rrBF1Ev9CogiLSCQ.roa (hash: pLvRlLK05UpElewJM59U7OVcLxC0+h1J9DGDrZTZEFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:0b:ba:1f:38:ee:c6:a8:64:65:1e:71:8c:82:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Validity
Not Before: Mar 26 18:00:28 2026 GMT
Not After : Mar 27 18:00:28 2026 GMT
Subject: CN=cff60ac4bf3f75d469701a7bbb17b9b9997ba107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:a2:a6:c1:ff:a8:46:7a:c7:76:5e:bc:2c:
7c:a6:63:72:82:7a:5f:2f:f8:aa:e1:d9:77:00:f2:
8f:16:10:11:10:a9:22:08:53:b1:a1:24:9a:e2:63:
1a:a8:dc:41:cd:20:6e:61:10:86:4d:a7:e5:9d:b0:
cf:ec:3b:5c:15:5d:c2:54:c1:26:ce:69:7d:f4:8a:
6b:03:51:51:ea:4b:02:41:10:a6:ed:32:29:4f:32:
18:9e:cd:dc:37:53:b1:6b:bf:c3:63:4c:9a:ff:49:
e0:78:39:93:f6:9e:c7:00:12:b0:37:67:0d:f0:ac:
e4:ba:26:d4:f8:c6:f3:f2:be:38:9e:54:02:19:e0:
2e:e0:d5:f6:c8:ec:a4:2f:1a:3e:76:fe:73:ac:41:
fb:1d:76:10:43:5f:30:16:2b:d6:32:72:22:f8:14:
b0:29:de:82:7c:53:3a:69:13:8d:eb:46:42:20:11:
7f:4a:68:63:3b:a4:e8:86:01:42:d0:46:8b:e1:ea:
c4:02:bd:4f:eb:d6:7e:9f:13:13:1b:cc:f9:ee:e4:
18:f8:15:a4:74:66:8f:32:61:7d:0b:c8:e0:41:e3:
36:75:02:09:c6:f8:de:42:97:2f:26:6e:0e:8e:ae:
83:01:1f:48:a2:e7:f4:36:ee:de:2c:01:70:57:a9:
8b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F6:0A:C4:BF:3F:75:D4:69:70:1A:7B:BB:17:B9:B9:99:7B:A1:07
X509v3 Authority Key Identifier:
keyid:AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:07:d4:43:0f:3a:19:a4:d0:cd:e3:68:22:85:5c:cb:15:9c:
2a:83:50:aa:2e:e1:17:ec:12:4c:f6:a8:31:8c:bf:f5:a8:85:
2a:19:2a:58:88:5d:0a:3a:6f:d4:db:bd:6a:2e:26:6f:d7:b4:
24:57:38:c4:39:6e:3e:25:68:6b:3c:4c:15:d4:61:bc:d6:c9:
13:1f:1d:2f:c7:6d:6b:c8:95:29:fa:9f:75:07:05:09:8f:d4:
8d:df:b2:1e:be:bb:44:9a:29:de:97:87:21:f5:a7:e4:be:67:
78:1e:8a:3e:95:59:bf:ac:56:92:57:92:71:2e:75:95:7e:98:
d0:47:e2:f0:ac:0d:4b:83:90:7f:0a:23:be:73:7e:0a:d4:e9:
79:43:5a:57:94:19:73:a3:b5:d4:f6:59:c7:6a:fd:be:9a:3f:
0e:67:bd:17:29:55:fd:ab:1f:bc:f7:95:20:89:4e:fd:1e:5e:
88:ed:c5:17:1f:81:35:63:d3:13:88:92:11:b5:61:cb:25:f6:
34:c0:c3:66:b7:b6:2f:8d:f9:ac:6a:69:57:b7:f3:83:af:fc:
a8:5d:dd:47:76:cf:e7:ff:ff:d1:89:67:b8:82:00:7c:27:97:
d7:e2:97:dc:93:ad:0e:2a:da:cd:3f:93:9c:f0:14:d0:9a:ad:
42:2a:6f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:13:27 2026 by rpki-client