Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
File: rxfMznTBr7qDt7qF2XcSsrzEpeg.mft (raw, json)
Hash identifier: OBfEOK6r1KypGcoemKhcYzle4H8rhSz1EnLz34qsegQ=
Subject key identifier: 58:97:B2:94:EC:83:99:86:58:EE:E0:F7:DC:F7:EB:72:9C:32:05:59
Authority key identifier: AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
Certificate issuer: /CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Certificate serial: 01A0D501CB2AD6C76B08AAC4F63136BF5F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
Manifest number: 049C
Signing time: Thu 24 Sep 2026 20:00:59 +0000
Manifest this update: Thu 24 Sep 2026 20:00:59 +0000
Manifest next update: Fri 25 Sep 2026 20:00:59 +0000
Files and hashes: 1: fWVWhQr_IOS3Ere6cXK65HkUY_E.roa (hash: 6xJw6F8DBsgdoe+Xw5KCeHZGXvkk/TDJRq4n5OCTKlI=)
2: rxfMznTBr7qDt7qF2XcSsrzEpeg.crl (hash: ztlzkGkpTmr3mY27vkUmgTwRJX+MS2uN0P8shwpzuwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:01:cb:2a:d6:c7:6b:08:aa:c4:f6:31:36:bf:5f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Validity
Not Before: Sep 24 20:00:59 2026 GMT
Not After : Sep 25 20:00:59 2026 GMT
Subject: CN=5897b294ec83998658eee0f7dcf7eb729c320559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:32:10:8a:a4:30:d5:1c:bf:20:eb:d7:15:
96:0b:ef:0f:9b:ee:89:40:22:ec:07:6e:a1:dd:b4:
d0:f5:25:08:ea:43:bd:01:72:af:61:38:49:a7:50:
72:60:64:11:20:f2:5c:bc:5d:1e:f7:52:06:3e:2d:
51:4f:a5:37:e2:61:12:6a:30:1f:77:e5:97:7a:44:
19:dc:10:91:23:c1:59:25:73:58:73:dc:05:12:ec:
b3:10:77:e7:76:19:24:ad:56:8c:e0:11:5a:d4:56:
0f:a1:6a:54:31:de:02:a1:30:ec:e1:30:13:c5:eb:
30:eb:47:63:74:a6:b1:b2:50:7a:f1:bb:c9:9d:0d:
79:00:c0:7f:1a:d2:4b:01:88:d1:71:58:ac:8e:c0:
9c:9a:8d:02:e9:bc:e0:05:01:8e:50:40:b6:df:66:
57:5b:08:5c:a4:0e:eb:0f:40:d0:e8:e2:4e:05:c2:
4a:e7:d5:e7:67:dc:05:fb:60:ad:cd:3b:1c:a3:fa:
03:5a:e1:13:e9:f1:23:14:ca:07:38:12:3e:e6:bd:
34:80:00:6c:18:d8:34:a1:54:f6:09:9b:52:29:cf:
79:1e:5a:be:09:b4:0d:a2:96:62:6b:3a:56:19:02:
8b:e4:16:61:42:37:2c:3f:92:56:cb:9e:f2:ba:99:
69:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:97:B2:94:EC:83:99:86:58:EE:E0:F7:DC:F7:EB:72:9C:32:05:59
X509v3 Authority Key Identifier:
keyid:AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:36:56:0d:cb:ca:0c:c6:e3:08:72:80:a3:e6:e9:fe:69:4d:
cf:ef:f6:01:e5:f4:4b:bb:31:aa:1f:f8:b5:60:33:35:5a:40:
55:ea:7d:7a:6f:e3:02:7a:55:7a:b1:0e:71:10:bc:a9:9e:a4:
d8:b6:f1:97:44:d3:dc:14:a7:18:2c:e5:8e:d6:b0:9c:f6:f4:
81:db:b6:a7:05:05:89:28:91:af:94:2d:34:29:c5:35:2f:79:
a0:6e:e3:a3:5a:14:69:31:d5:7d:78:58:22:4d:0d:cf:0d:7f:
7d:0a:25:e8:42:59:fc:d8:fb:ef:ea:24:ec:4f:0e:9e:fa:f4:
f1:a9:b0:5f:39:18:9c:33:95:7b:1b:0c:6c:7d:41:3b:eb:b3:
7c:ac:fe:3d:be:f0:9a:14:39:60:4a:e3:49:d9:22:87:3b:35:
6d:c8:6c:c1:9b:cc:ce:6e:ac:53:4b:b9:ea:32:9d:b8:61:3c:
0e:28:34:98:59:4c:2b:46:44:85:9f:ec:41:5f:a1:27:1c:67:
e6:45:f6:86:72:c0:a0:d0:5d:8a:cf:d9:c0:5f:b5:1f:29:d7:
bd:09:2e:6a:86:aa:fd:f0:a0:7f:d8:dd:d1:fa:02:0f:45:fa:
28:73:2e:13:37:7c:9b:35:67:6d:7a:ea:2d:ae:6a:25:91:1a:
5c:e1:33:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:51:59 2026 by rpki-client