Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
File: r633xfgtvAsdujKChi1T7Ih9XGY.mft (raw, json)
Hash identifier: g3dBe4oLomdvoDMj6gtM5X3k88VOLwOB75A8usL8LL4=
Subject key identifier: 06:F9:74:AA:E1:AF:3F:E7:59:A0:AD:1A:A7:68:43:4A:88:FA:E4:BD
Authority key identifier: AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66
Certificate issuer: /CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66
Certificate serial: 019D28BB97B5254F617373E3346A6A517C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 06:01:15 +0000
Manifest this update: Thu 26 Mar 2026 06:01:15 +0000
Manifest next update: Fri 27 Mar 2026 06:01:15 +0000
Files and hashes: 1: br96nbfJfdxdq-LCA_KvHZNFqIk.roa (hash: ZyqCkCl993Y1/5tl1GjhHrDKFvVu/SQ6o/9tpMFALfs=)
2: r633xfgtvAsdujKChi1T7Ih9XGY.crl (hash: slfOUaW5bHRjbVRVuyxkiVSkala3HejRMRXjeZ9j3L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:97:b5:25:4f:61:73:73:e3:34:6a:6a:51:7c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66
Validity
Not Before: Mar 26 06:01:15 2026 GMT
Not After : Mar 27 06:01:15 2026 GMT
Subject: CN=06f974aae1af3fe759a0ad1aa768434a88fae4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:cc:66:35:a3:9d:96:00:ae:af:1b:36:3b:
5c:c4:6f:66:08:a1:d3:8c:72:78:f6:97:7a:ac:7f:
08:1a:98:15:69:46:8f:51:18:a9:b1:e7:2e:72:b0:
d9:24:e8:46:b8:af:36:b0:2f:17:4d:75:a9:88:e4:
2b:df:2a:16:e7:9f:28:e4:63:3e:25:a3:ff:1c:9f:
35:2d:1d:bf:ad:fd:73:73:8b:67:85:ed:68:a2:43:
b0:1a:17:4d:f3:12:54:0a:93:fa:57:f6:ea:5a:0d:
c9:31:3c:3b:a8:92:2f:b7:da:cd:64:92:20:78:bb:
f2:c5:ab:b5:4a:68:80:06:4c:29:53:03:fd:35:d7:
76:65:f9:0e:76:5c:c3:02:ea:2e:c5:97:89:a6:89:
99:b2:a1:ec:30:92:70:ff:16:8f:de:57:07:41:bf:
42:92:50:d7:82:d2:7c:35:b1:80:b7:96:68:df:be:
62:03:0a:5c:3c:50:27:b9:1c:88:d8:86:a3:31:23:
a8:22:2f:b0:80:22:3a:91:ce:8f:9a:c7:23:67:08:
8e:f3:a9:85:4e:5d:a7:9c:2a:10:fd:ff:c4:2e:a6:
5b:85:92:e0:c5:6e:1a:10:ef:e9:2a:7b:aa:fa:03:
cd:a4:e1:3e:35:4e:c4:d7:8e:35:2e:c1:f9:dc:9a:
0d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F9:74:AA:E1:AF:3F:E7:59:A0:AD:1A:A7:68:43:4A:88:FA:E4:BD
X509v3 Authority Key Identifier:
keyid:AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:05:6f:51:21:dd:6e:15:0d:75:9c:e3:b6:ab:ab:3e:04:18:
49:f5:02:e5:98:01:7f:3d:8c:06:21:94:a7:87:0c:17:3a:0e:
41:51:1d:e5:75:c7:2e:bb:84:97:29:b0:51:96:4b:00:dd:0a:
23:43:56:c5:dd:da:da:1d:62:9f:b1:b3:9d:3c:43:96:a1:3b:
48:69:ac:6a:2e:a4:76:e3:7b:f7:f7:f0:dd:bf:c0:21:40:df:
70:e3:12:93:38:32:cd:13:ca:1a:8b:a8:f6:06:e8:e6:32:75:
dd:14:c6:66:d3:2f:da:4e:7f:0d:ab:5c:1c:ea:60:d2:49:ba:
76:2e:bb:2d:17:da:99:03:c8:13:79:9e:10:5b:ec:21:85:63:
c7:65:ef:04:d0:e5:f5:f3:28:fb:a0:54:9d:5e:da:d4:cf:89:
b1:17:40:a0:2f:82:7e:9c:99:4a:4d:46:07:48:3e:6e:18:4f:
a9:0f:3e:7e:fc:c9:38:87:cf:90:fb:d6:65:df:ea:59:c3:db:
28:7e:2f:57:06:92:95:7a:89:87:2d:0b:d8:b5:9c:16:18:25:
f7:70:f5:80:66:5f:e0:f3:ea:47:a3:12:dc:3d:6b:0f:01:de:
18:61:37:a6:bf:06:a3:91:de:d3:aa:a0:8a:21:07:84:c0:36:
d4:9c:a5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:37:09 2026 by rpki-client