Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
File: rxfMznTBr7qDt7qF2XcSsrzEpeg.mft (raw, json)
Hash identifier: FGFTgYeeCmcdnSU7lHcoD1L0JQIBNZn2ZL7c9rWTggQ=
Subject key identifier: BF:7E:9F:3E:51:AD:29:69:EF:EF:1A:1D:13:02:39:2B:CF:32:51:F9
Authority key identifier: AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
Certificate issuer: /CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Certificate serial: 019F927F9044FDF1A5A53F0AA7EAFE02026A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
Manifest number: 03F5
Signing time: Fri 24 Jul 2026 05:01:01 +0000
Manifest this update: Fri 24 Jul 2026 05:01:01 +0000
Manifest next update: Sat 25 Jul 2026 05:01:01 +0000
Files and hashes: 1: fWVWhQr_IOS3Ere6cXK65HkUY_E.roa (hash: 6xJw6F8DBsgdoe+Xw5KCeHZGXvkk/TDJRq4n5OCTKlI=)
2: rxfMznTBr7qDt7qF2XcSsrzEpeg.crl (hash: crE8ARtIvKObBiadqI4wQWYRPS1D55tmAMeYgGPrb9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:90:44:fd:f1:a5:a5:3f:0a:a7:ea:fe:02:02:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Validity
Not Before: Jul 24 05:01:01 2026 GMT
Not After : Jul 25 05:01:01 2026 GMT
Subject: CN=bf7e9f3e51ad2969efef1a1d1302392bcf3251f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7d:64:43:77:49:c1:90:4b:0f:65:8d:f4:e5:
37:77:92:54:c8:44:9d:b8:90:b3:05:9f:bd:cc:4f:
1d:bd:a8:d8:64:e3:5c:9c:eb:cc:72:19:f8:5f:12:
87:3f:14:16:c3:fb:f5:4a:63:1d:57:1f:d5:c3:cd:
c3:e1:aa:a2:73:a7:18:0a:41:90:11:cf:2b:65:44:
3e:e6:bc:93:51:34:0d:74:94:0b:9b:7c:a5:8b:17:
62:bf:c3:99:a8:3b:d7:13:ab:35:5a:1a:e5:fe:cb:
8e:f8:ef:34:98:b2:c6:35:21:a4:aa:c0:e4:3d:ba:
09:d3:e0:89:c8:30:7b:3b:46:f5:98:05:28:a7:b9:
de:a2:0e:a9:6c:80:99:e7:0a:dc:60:47:4f:a2:76:
72:b4:e6:ec:06:77:73:1d:93:b6:2c:b2:f7:29:3b:
94:39:64:87:ce:53:62:7f:c6:9f:fd:68:f8:8a:2b:
b6:89:c7:a7:8b:d5:be:78:29:38:26:2b:cc:03:63:
93:9c:dd:21:e7:31:7b:16:44:98:04:dc:f9:8c:4c:
36:bd:53:d7:b1:9e:fd:4d:a4:8c:c5:88:80:91:f2:
e4:a2:0f:4c:f5:c0:02:17:40:cb:ef:e3:62:36:be:
c2:17:44:e5:2a:92:f3:47:d7:2d:33:05:ee:aa:9d:
de:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7E:9F:3E:51:AD:29:69:EF:EF:1A:1D:13:02:39:2B:CF:32:51:F9
X509v3 Authority Key Identifier:
keyid:AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:68:38:e6:0a:af:2e:8d:5c:1a:50:43:9a:a0:99:c1:f1:15:
1d:15:95:77:00:62:46:a0:43:1d:8b:45:a9:41:c5:82:40:80:
fe:d5:e7:cd:2f:3e:58:58:86:21:a6:ce:b0:1d:40:32:d4:7c:
69:68:a1:56:e2:a9:2d:58:f3:e0:b0:c9:b9:0c:1f:f1:3c:34:
06:ae:9f:c8:07:37:d6:02:f1:78:ad:7a:a9:b5:fa:b2:2a:fd:
6c:f4:da:1a:cc:56:60:74:90:de:c6:36:37:4d:37:fc:e5:63:
c8:18:85:b4:62:01:23:2b:17:21:64:4b:de:50:8d:0c:45:90:
99:0f:f6:80:35:04:45:33:1b:5c:4c:0a:fc:b4:a6:4d:27:76:
1f:3b:9e:b9:3b:01:ad:63:83:c1:a6:78:1b:29:76:a5:17:c9:
75:e9:7b:f1:35:6b:f2:df:57:43:60:d7:b3:3e:6d:59:a6:69:
57:ff:5c:bf:a8:19:05:5d:b9:6a:ae:ac:6d:b5:28:f6:6e:50:
4b:3d:7c:7f:1f:db:29:24:ab:a4:22:43:b0:b8:9d:73:6d:81:
9b:80:f8:24:52:b8:e0:a4:ef:46:2f:3f:24:51:a9:6f:3d:04:
2e:b4:95:f1:ec:e9:07:c8:50:6f:91:fe:14:8a:1d:c8:a0:f6:
9e:0b:e8:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sf5BE/fGlpT8Kp+r+AgJqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMTdjY2NlNzRjMWFmYmE4M2I3YmE4NWQ5NzcxMmIyYmNj
NGE1ZTgwHhcNMjYwNzI0MDUwMTAxWhcNMjYwNzI1MDUwMTAxWjAzMTEwLwYDVQQD
EyhiZjdlOWYzZTUxYWQyOTY5ZWZlZjFhMWQxMzAyMzkyYmNmMzI1MWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H1kQ3dJwZBLD2WN9OU3d5JUyESd
uJCzBZ+9zE8dvajYZONcnOvMchn4XxKHPxQWw/v1SmMdVx/Vw83D4aqic6cYCkGQ
Ec8rZUQ+5ryTUTQNdJQLm3ylixdiv8OZqDvXE6s1Whrl/suO+O80mLLGNSGkqsDk
PboJ0+CJyDB7O0b1mAUop7neog6pbICZ5wrcYEdPonZytObsBndzHZO2LLL3KTuU
OWSHzlNif8af/Wj4iiu2iceni9W+eCk4JivMA2OTnN0h5zF7FkSYBNz5jEw2vVPX
sZ79TaSMxYiAkfLkog9M9cACF0DL7+NiNr7CF0TlKpLzR9ctMwXuqp3eVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9+nz5RrSlp7+8aHRMCOSvPMlH5MB8GA1UdIwQY
MBaAFK8XzM50wa+6g7e6hdl3ErK8xKXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnhmTXpuVEJyN3FEdDdxRjJYY1NzcnpFcGVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iNzNjYWMtMzYxMC00MjI0LWJkYmEt
YTU3NTdhYWFmZmZhLzEvcnhmTXpuVEJyN3FEdDdxRjJYY1NzcnpFcGVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9iNzNjYWMtMzYxMC00MjI0LWJkYmEtYTU3NTdhYWFmZmZh
LzEvcnhmTXpuVEJyN3FEdDdxRjJYY1NzcnpFcGVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqWg45gqv
Lo1cGlBDmqCZwfEVHRWVdwBiRqBDHYtFqUHFgkCA/tXnzS8+WFiGIabOsB1AMtR8
aWihVuKpLVjz4LDJuQwf8Tw0Bq6fyAc31gLxeK16qbX6sir9bPTaGsxWYHSQ3sY2
N003/OVjyBiFtGIBIysXIWRL3lCNDEWQmQ/2gDUERTMbXEwK/LSmTSd2HzueuTsB
rWODwaZ4Gyl2pRfJdel78TVr8t9XQ2DXsz5tWaZpV/9cv6gZBV25aq6sbbUo9m5Q
Sz18fx/bKSSrpCJDsLidc22Bm4D4JFK44KTvRi8/JFGpbz0ELrSV8ezpB8hQb5H+
FIodyKD2ngvotA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:08:32 2026 by rpki-client