Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
File: RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft (raw, json)
Hash identifier: 9gyhDvv03E5Sa+v1c4xfu79gMqQ2qkgddDyQvUv3aQQ=
Subject key identifier: 3A:65:26:3D:24:B7:7D:9F:57:CC:55:D9:A2:0C:AE:66:44:E2:76:94
Authority key identifier: 47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB
Certificate issuer: /CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
Certificate serial: 019D27728408BBD7D5E170F3DE090C03E3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
Manifest number: 03B9
Signing time: Thu 26 Mar 2026 00:01:49 +0000
Manifest this update: Thu 26 Mar 2026 00:01:49 +0000
Manifest next update: Fri 27 Mar 2026 00:01:49 +0000
Files and hashes: 1: RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl (hash: BkUR5Xk5qiYiaXAOKFFkyHCIXZYPR/7/X/iW34o0614=)
2: ZS49NoR0xEt4EkcswjIY6hISabQ.roa (hash: l3Du0mInbrihmNOTEOBYAtuZ0coi5mG0KsyicEw3aoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:84:08:bb:d7:d5:e1:70:f3:de:09:0c:03:e3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
Validity
Not Before: Mar 26 00:01:49 2026 GMT
Not After : Mar 27 00:01:49 2026 GMT
Subject: CN=3a65263d24b77d9f57cc55d9a20cae6644e27694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:eb:b9:88:81:a0:24:5e:ac:0c:9a:26:31:
6b:b8:85:84:bd:66:8b:c5:a7:89:51:2f:00:33:d2:
b2:24:d2:fd:eb:d9:20:16:27:b7:8a:c1:ea:06:3d:
f4:84:2e:ce:0a:6f:aa:43:d5:f7:d5:94:13:d9:74:
c9:44:f5:bf:b1:45:6c:08:69:66:c2:54:3d:fa:8c:
f3:e0:2d:b8:bc:a6:61:b7:cf:e2:fc:a6:aa:9f:1e:
a4:73:da:40:68:72:e2:bb:de:b9:bd:ce:0a:3d:76:
78:34:12:51:f5:9a:fe:b8:ef:3b:fb:e1:40:54:1e:
d7:a0:70:72:38:f7:19:63:e8:ae:cb:a0:86:22:1f:
55:cf:28:25:7f:f4:1b:0b:0a:b8:4f:83:a0:65:d7:
a7:7a:a5:a9:45:3f:5a:cd:7b:30:a3:43:a6:60:d2:
70:08:8a:8f:5c:95:87:46:22:b8:b2:2f:a6:16:30:
34:0a:e7:55:15:db:17:71:7e:d0:10:50:b0:da:65:
0a:36:38:d7:d0:9a:75:7d:cc:1b:86:20:aa:32:dd:
62:b9:ab:3d:98:be:6b:9c:aa:dc:7b:c5:c3:99:15:
48:49:0d:a7:1d:9d:38:b8:74:00:f3:58:cf:02:c4:
23:c7:93:b8:3b:44:f5:d9:44:0d:58:47:7e:a8:2d:
ef:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:65:26:3D:24:B7:7D:9F:57:CC:55:D9:A2:0C:AE:66:44:E2:76:94
X509v3 Authority Key Identifier:
keyid:47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a4:2e:d6:ab:96:15:93:64:f5:5c:f0:0a:f4:6e:04:f7:12:
1f:0e:21:27:62:68:df:b4:90:33:84:36:61:f5:ae:bb:f0:a7:
ab:93:e5:55:a0:1e:83:2d:cf:0e:1f:8a:89:32:ba:48:b3:61:
67:91:8f:78:82:72:7c:d8:b4:e8:a7:c7:e0:78:47:39:f7:4f:
0a:01:78:19:d4:62:94:c5:f0:8b:de:59:9f:d6:3a:f4:04:12:
b0:ce:3c:76:70:75:09:37:00:20:01:b0:72:50:02:f3:65:7c:
b3:15:97:a5:23:8c:b0:c5:f3:83:4a:e6:1d:02:07:f8:2c:94:
6b:a0:36:09:f9:e9:b5:f7:b8:95:48:f6:cf:5f:11:6b:21:0b:
b9:67:72:e1:a8:55:7c:4e:47:01:8f:e7:f8:75:38:ec:58:dc:
01:9f:12:a2:a8:82:72:e2:22:99:5f:92:ec:3b:89:98:41:a1:
6d:80:85:8f:c9:8d:03:20:82:b5:11:da:ec:d3:c2:f3:b1:2d:
fd:b0:79:d2:99:08:f7:72:78:b5:11:46:73:83:1c:26:18:12:
69:15:7a:f4:32:44:45:20:9a:3e:91:e8:30:30:54:4f:66:0a:
d7:3c:49:3a:d8:a9:cf:83:cf:f1:4d:73:08:d1:05:f7:da:fa:
e8:3c:57:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncoQIu9fV4XDz3gkMA+PhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MTQzZGQ2Njc2OWRiMTgzYjhiZDc5YjkwZmM4M2Q5NWQ2
ZTQ4ZmIwHhcNMjYwMzI2MDAwMTQ5WhcNMjYwMzI3MDAwMTQ5WjAzMTEwLwYDVQQD
EygzYTY1MjYzZDI0Yjc3ZDlmNTdjYzU1ZDlhMjBjYWU2NjQ0ZTI3Njk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8rruYiBoCRerAyaJjFruIWEvWaL
xaeJUS8AM9KyJNL969kgFie3isHqBj30hC7OCm+qQ9X31ZQT2XTJRPW/sUVsCGlm
wlQ9+ozz4C24vKZht8/i/Kaqnx6kc9pAaHLiu965vc4KPXZ4NBJR9Zr+uO87++FA
VB7XoHByOPcZY+iuy6CGIh9Vzyglf/QbCwq4T4OgZdeneqWpRT9azXswo0OmYNJw
CIqPXJWHRiK4si+mFjA0CudVFdsXcX7QEFCw2mUKNjjX0Jp1fcwbhiCqMt1iuas9
mL5rnKrce8XDmRVISQ2nHZ04uHQA81jPAsQjx5O4O0T12UQNWEd+qC3vRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDplJj0kt32fV8xV2aIMrmZE4naUMB8GA1UdIwQY
MBaAFEcUPdZnadsYO4vXm5D8g9ldbkj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnhROTFtZHAyeGc3aTllYmtQeUQyVjF1U1BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zZjQzOTUtMTg3MS00Y2IxLTgwN2It
MzQ2MDI2MjQ1NWIyLzEvUnhROTFtZHAyeGc3aTllYmtQeUQyVjF1U1BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zZjQzOTUtMTg3MS00Y2IxLTgwN2ItMzQ2MDI2MjQ1NWIy
LzEvUnhROTFtZHAyeGc3aTllYmtQeUQyVjF1U1BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq6Qu1quW
FZNk9VzwCvRuBPcSHw4hJ2Jo37SQM4Q2YfWuu/Cnq5PlVaAegy3PDh+KiTK6SLNh
Z5GPeIJyfNi06KfH4HhHOfdPCgF4GdRilMXwi95Zn9Y69AQSsM48dnB1CTcAIAGw
clAC82V8sxWXpSOMsMXzg0rmHQIH+CyUa6A2Cfnptfe4lUj2z18RayELuWdy4ahV
fE5HAY/n+HU47FjcAZ8SoqiCcuIimV+S7DuJmEGhbYCFj8mNAyCCtRHa7NPC87Et
/bB50pkI93J4tRFGc4McJhgSaRV69DJERSCaPpHoMDBUT2YK1zxJOtipz4PP8U1z
CNEF99r66DxXCA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:19 2026 by rpki-client