Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
File: rxfMznTBr7qDt7qF2XcSsrzEpeg.mft (raw, json)
Hash identifier: VmKi0dPhSASjSeuxmNpg0JdK+B8bW/5H+TbXUbxvxgU=
Subject key identifier: E4:F5:BF:DE:18:96:B7:18:5D:A0:3E:BC:6B:4F:BE:AA:C6:5A:A9:96
Authority key identifier: AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
Certificate issuer: /CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Certificate serial: 019E1DC7734B1FEB0C04A48D566F2445773A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
Manifest number: 0334
Signing time: Tue 12 May 2026 20:01:10 +0000
Manifest this update: Tue 12 May 2026 20:01:10 +0000
Manifest next update: Wed 13 May 2026 20:01:10 +0000
Files and hashes: 1: fWVWhQr_IOS3Ere6cXK65HkUY_E.roa (hash: 6xJw6F8DBsgdoe+Xw5KCeHZGXvkk/TDJRq4n5OCTKlI=)
2: rxfMznTBr7qDt7qF2XcSsrzEpeg.crl (hash: po9Tfa1t/s9NjMKT4ziAyPfUJFS8RewkWeDYMlqUEBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:73:4b:1f:eb:0c:04:a4:8d:56:6f:24:45:77:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Validity
Not Before: May 12 20:01:10 2026 GMT
Not After : May 13 20:01:10 2026 GMT
Subject: CN=e4f5bfde1896b7185da03ebc6b4fbeaac65aa996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:f0:69:1a:b0:e4:aa:1d:76:ab:8d:b3:01:
3a:23:45:8d:2c:2a:fc:0d:2e:22:60:b9:7b:d6:33:
c2:24:17:40:14:e9:5c:42:d9:a8:7e:55:6d:f5:b5:
98:d2:66:9f:73:bd:2e:33:d5:e5:57:d9:dc:a1:8e:
d7:c5:16:c5:36:90:2b:3b:dc:a9:38:08:45:4b:51:
03:4c:ff:a9:fd:6c:1f:1d:fe:cf:1a:2d:ac:1e:39:
2e:2f:83:b7:e4:dc:5d:71:2f:42:d5:51:5c:7d:e5:
6c:00:52:fc:dd:94:df:7c:05:7b:bd:c4:61:e9:b1:
69:58:8a:2b:72:b6:ae:ba:45:00:8e:e4:b8:63:ae:
05:20:31:97:f7:44:63:7e:0f:c1:36:ba:68:18:84:
a9:ac:c1:79:c7:72:da:4e:d1:ee:9c:f4:40:19:9d:
1c:ae:39:fd:fa:65:31:f4:a8:de:bb:dc:8d:43:3a:
1d:e2:b6:09:ca:0c:39:42:60:c4:32:21:07:e3:35:
a1:29:4e:56:14:b7:be:6c:aa:81:34:53:42:d8:4d:
4e:62:f6:98:22:af:ca:7a:ed:9e:e4:81:3f:df:ff:
25:3e:f9:11:39:6a:a6:d3:28:46:43:16:ff:1a:07:
f1:58:1e:13:79:fc:f7:e3:11:af:4f:ba:0e:c6:1b:
36:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F5:BF:DE:18:96:B7:18:5D:A0:3E:BC:6B:4F:BE:AA:C6:5A:A9:96
X509v3 Authority Key Identifier:
keyid:AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cc:1d:ff:4e:06:77:01:4c:5a:e5:3d:d7:df:b2:d7:07:60:
cc:6b:67:68:a0:69:9c:6c:d7:01:ce:62:cd:3b:37:ff:ba:f7:
65:4a:80:50:ca:11:cb:ae:13:9b:8a:56:33:e1:01:e9:99:46:
01:43:88:de:cd:b6:46:1b:1e:d9:a1:95:b5:f3:53:09:1b:47:
9a:20:ab:aa:91:d4:97:e2:c8:74:cc:94:96:df:1d:29:d1:df:
3d:9d:6e:23:84:10:c1:31:6a:f6:c9:b7:0f:9d:b2:43:3c:8b:
dd:da:f1:82:64:f4:08:07:86:68:fc:82:be:64:db:f9:52:91:
cf:4c:c3:37:b8:1c:77:1c:f7:b4:d5:16:21:cb:69:2a:c1:af:
fa:8d:1a:d6:ac:c1:5d:ec:94:1a:8f:f5:9d:4c:0e:04:70:f6:
00:8f:13:74:f6:c0:bf:38:96:a6:2b:b8:f1:5d:aa:97:fb:28:
96:a6:25:1f:26:1f:48:36:59:b3:b8:c4:4e:54:1b:78:31:bd:
9d:63:3d:3d:24:d9:73:59:d1:10:b2:0f:77:7e:ae:d1:de:8b:
e7:c1:14:2e:66:8f:9f:06:3d:62:a9:43:07:5f:ba:33:7e:e4:
8e:6a:c6:7b:12:ac:dc:36:19:a6:3d:e7:ed:02:ae:19:43:f8:
df:79:bc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:03:42 2026 by rpki-client