Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
File: rxfMznTBr7qDt7qF2XcSsrzEpeg.mft (raw, json)
Hash identifier: GpvFr8P6Sz+yjZADWXPodUT/JbRWjd2KcbclovmmZRg=
Subject key identifier: 7B:2C:31:0D:70:31:74:DC:88:FA:C1:B2:24:20:D4:E3:8E:34:00:AE
Authority key identifier: AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
Certificate issuer: /CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Certificate serial: 019D2695E3FE9491CABC15EF16782B839F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
Manifest number: 02B4
Signing time: Wed 25 Mar 2026 20:00:50 +0000
Manifest this update: Wed 25 Mar 2026 20:00:50 +0000
Manifest next update: Thu 26 Mar 2026 20:00:50 +0000
Files and hashes: 1: fWVWhQr_IOS3Ere6cXK65HkUY_E.roa (hash: 6xJw6F8DBsgdoe+Xw5KCeHZGXvkk/TDJRq4n5OCTKlI=)
2: rxfMznTBr7qDt7qF2XcSsrzEpeg.crl (hash: yje9PotM9yDQ39OxV4EfJSlrX8yqud5q23CmdTDSNrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:e3:fe:94:91:ca:bc:15:ef:16:78:2b:83:9f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Validity
Not Before: Mar 25 20:00:50 2026 GMT
Not After : Mar 26 20:00:50 2026 GMT
Subject: CN=7b2c310d703174dc88fac1b22420d4e38e3400ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:7d:fe:66:23:8d:d0:8b:19:ad:35:7b:2f:
31:87:de:21:22:3a:2c:dc:75:f6:f7:f6:54:1d:54:
10:c1:ad:20:6b:18:76:41:29:85:06:1b:4e:13:55:
66:7b:6a:e2:4e:97:67:c8:6a:72:27:9c:6c:94:e2:
66:63:40:e7:11:9e:2d:41:54:e9:33:da:52:67:eb:
68:0c:df:8b:7f:ed:86:78:41:9a:51:23:67:fa:47:
d4:85:cc:5b:20:70:16:86:4f:26:d3:22:4c:47:57:
d7:a2:d6:dc:99:68:0b:77:fe:23:f8:3e:ee:25:0c:
5b:26:83:73:49:6c:e9:f0:0a:16:8f:46:f4:d8:2e:
5c:6b:3f:36:3b:ca:0b:cc:76:73:07:4c:56:c1:21:
44:cf:55:cb:b7:f5:7a:dc:06:1c:0a:65:07:5f:fa:
36:b5:73:7b:a1:47:d5:a6:1b:b2:93:26:0c:77:20:
cb:dc:1f:3f:f1:4a:18:b0:49:b8:39:34:1f:b6:d2:
45:38:d1:fb:49:3c:d8:9a:c1:66:2b:77:14:b3:7d:
13:f9:91:07:87:1b:59:46:87:89:90:68:17:e1:d8:
56:c7:5c:a4:55:2e:cf:c5:08:4e:58:f2:59:e1:8f:
ca:62:3c:47:d7:65:b8:5c:04:82:68:25:78:b7:44:
41:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2C:31:0D:70:31:74:DC:88:FA:C1:B2:24:20:D4:E3:8E:34:00:AE
X509v3 Authority Key Identifier:
keyid:AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:75:66:21:f1:a6:94:bc:f2:bd:43:8f:08:2c:b9:13:be:cb:
fc:46:69:10:12:aa:d6:c4:88:0b:79:35:d9:a8:5d:1d:63:85:
d4:e1:24:a7:cc:2e:0c:b5:0e:d9:c6:b5:ee:f4:19:06:1e:c1:
b9:af:85:9c:56:2a:87:09:98:a0:2c:3b:12:e7:c0:b3:b0:a4:
d0:9b:68:37:4e:d1:0e:d1:b3:a6:47:ad:4a:23:ae:f6:65:5d:
36:97:c4:91:2e:9f:fa:2f:2f:d5:77:51:e6:8b:b7:37:7d:7f:
b1:87:14:a1:d2:98:6f:a2:f7:20:e9:57:c8:fc:60:86:8e:e2:
2c:a6:bc:89:9c:3c:17:a7:b7:35:7d:84:d8:75:f4:17:0c:5a:
8f:ee:b8:79:45:8e:42:f6:60:1b:7f:7a:a5:48:68:7e:7a:fa:
8f:35:19:43:ca:dd:58:32:23:17:07:2e:00:6d:ea:6a:72:f3:
0e:45:dd:ad:17:d7:3f:85:13:2f:66:87:b0:6d:53:82:5a:4c:
a3:89:5e:0d:66:14:67:af:37:c1:b5:3f:bb:85:4f:b8:f7:7a:
3c:e2:c2:1b:8c:43:a1:b8:d2:de:fc:9c:b5:a7:20:e7:c2:13:
b8:a6:6c:69:50:fb:85:b0:16:f9:a9:36:0e:26:2a:59:8d:e7:
a2:eb:6e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:37 2026 by rpki-client