Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
File: RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft (raw, json)
Hash identifier: SiHssxDSLpaU5BzH4OVjAQiHyUxU/Z39USZRCOql2pU=
Subject key identifier: 9C:56:1C:B7:25:69:7B:34:17:CA:DF:13:C5:67:E2:5B:2B:A1:7A:D1
Authority key identifier: 47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB
Certificate issuer: /CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
Certificate serial: 019E209230B6A4B336D843158851B5DD8C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
Manifest number: 043A
Signing time: Wed 13 May 2026 09:01:52 +0000
Manifest this update: Wed 13 May 2026 09:01:52 +0000
Manifest next update: Thu 14 May 2026 09:01:52 +0000
Files and hashes: 1: RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl (hash: 2sAhOwRFnoaH5bjO9JUUYxXEs3jbOl5YbACUoRxvB6I=)
2: ZS49NoR0xEt4EkcswjIY6hISabQ.roa (hash: l3Du0mInbrihmNOTEOBYAtuZ0coi5mG0KsyicEw3aoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:30:b6:a4:b3:36:d8:43:15:88:51:b5:dd:8c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
Validity
Not Before: May 13 09:01:52 2026 GMT
Not After : May 14 09:01:52 2026 GMT
Subject: CN=9c561cb725697b3417cadf13c567e25b2ba17ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:37:bb:ef:81:e7:a3:3b:91:2e:be:c1:f7:
5c:cc:29:81:1f:98:20:78:f4:2a:6f:a8:f5:1f:0a:
87:1e:45:ca:af:15:8f:02:2a:c9:7a:4d:af:0d:8a:
2a:40:7d:8b:79:ef:b7:9c:bf:b4:f8:11:0c:48:78:
b4:8e:c7:8a:77:b6:8f:c9:f6:b1:de:ca:e4:0c:78:
fe:f4:39:47:35:04:48:84:81:32:54:8a:73:eb:1d:
0a:76:18:90:c0:b5:7b:a7:9e:0f:33:93:12:a2:8e:
82:c5:16:83:39:4b:06:f6:e1:c7:38:ba:24:90:92:
ab:3d:d2:eb:7b:58:61:80:4f:e3:5c:9a:ea:a4:5b:
c5:7b:0b:d0:5f:fd:9b:f6:a6:90:17:45:05:58:15:
07:e7:a4:1b:c0:4c:c5:97:35:ea:fe:90:87:43:1c:
0a:56:82:82:b9:71:f8:89:55:28:41:2c:26:45:b6:
d6:78:e7:d6:94:24:25:22:d7:ae:d2:f6:24:fa:4f:
f4:7f:c6:2b:bc:14:b2:1b:5b:e0:af:52:e0:42:1e:
80:d8:e3:b2:6e:29:cf:8d:3c:e7:5f:4f:e2:38:e5:
9a:24:56:3d:d1:c0:bf:f5:d2:30:97:63:7e:81:ca:
1c:8f:ae:0e:54:fb:7a:7d:8d:a6:ff:38:14:2c:e8:
2f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:56:1C:B7:25:69:7B:34:17:CA:DF:13:C5:67:E2:5B:2B:A1:7A:D1
X509v3 Authority Key Identifier:
keyid:47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:85:51:ed:c8:62:7f:39:ea:14:89:4b:ba:0e:54:5c:fb:50:
0f:52:b6:a7:26:a0:b2:99:25:64:ad:2d:72:6c:71:c9:0b:18:
b1:1a:7c:c8:d2:30:d7:fa:e6:fb:8e:ce:7c:7b:59:00:b5:91:
27:f6:51:4b:93:c3:4c:d7:80:39:25:32:08:6c:3a:48:36:53:
75:37:e5:30:72:d4:08:1d:09:de:3d:42:21:09:d6:a5:dd:d5:
16:c8:7a:2d:8c:f0:39:6d:7f:55:fc:07:87:64:61:27:25:66:
e2:7f:50:2f:82:2d:b8:ac:c4:9b:f3:20:2e:e8:03:35:46:db:
75:04:96:03:1b:77:36:9e:f9:62:42:28:83:86:a6:0a:25:96:
1d:8a:75:55:f3:6a:92:33:0d:18:4c:a7:ae:c7:00:ee:bc:3c:
4a:b5:8e:f8:fb:94:7e:bd:8e:14:2c:51:51:22:77:17:80:9b:
f6:99:88:3b:79:c8:f7:07:df:2e:f1:cf:64:f5:b2:ab:d4:73:
d9:b9:b6:00:12:7d:a8:45:32:9f:d7:2b:bc:48:53:bc:92:4a:
ed:df:0d:14:97:9a:37:64:83:de:47:e5:38:93:d1:a9:77:5a:
0e:22:60:fd:bc:89:86:35:65:9c:d6:8e:06:6c:c2:15:20:d6:
e2:5b:ee:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:38:58 2026 by rpki-client