Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
File: rx7uIsUBU2MRinHSapRj3JN0uig.mft (raw, json)
Hash identifier: /QcNcVCUXRRIBHHBKijXncQPa1augVLtcz/heY7aEdg=
Subject key identifier: F1:3C:41:C7:0A:D5:B5:40:48:F5:B4:9E:5F:5A:10:C3:3E:4F:93:45
Authority key identifier: AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
Certificate issuer: /CN=af1eee22c5015363118a71d26a9463dc9374ba28
Certificate serial: 019D27A8B42241F6A688C5E3999C123FE7C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
Manifest number: 0C49
Signing time: Thu 26 Mar 2026 01:01:00 +0000
Manifest this update: Thu 26 Mar 2026 01:01:00 +0000
Manifest next update: Fri 27 Mar 2026 01:01:00 +0000
Files and hashes: 1: lLnIh6czm0KWIQr0ccsD4cdToLc.roa (hash: kVLAgXuMBEFIQbZq7gNbnr/z2Vz4LT7MCr2JgEg80uc=)
2: rx7uIsUBU2MRinHSapRj3JN0uig.crl (hash: E7m9EI2tStwuT8wACG3nZNCwkyNUfwKFxNBFpGk/LGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:b4:22:41:f6:a6:88:c5:e3:99:9c:12:3f:e7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1eee22c5015363118a71d26a9463dc9374ba28
Validity
Not Before: Mar 26 01:01:00 2026 GMT
Not After : Mar 27 01:01:00 2026 GMT
Subject: CN=f13c41c70ad5b54048f5b49e5f5a10c33e4f9345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:46:27:d3:23:61:d8:d6:ed:7c:4d:ec:a5:
11:4d:f2:79:64:bb:53:e1:a8:d0:98:6c:fb:f1:ba:
12:1c:5e:93:d1:36:68:0a:85:83:56:f7:0d:21:72:
10:78:ee:b5:be:3a:57:99:54:88:a9:7f:84:39:b3:
91:f9:ae:91:62:03:b1:1a:bd:36:29:b5:5e:97:71:
72:42:b8:7d:4d:61:fd:14:eb:75:27:35:31:55:41:
c3:f5:d3:3a:3a:06:fc:17:c8:bc:52:3d:f6:87:eb:
ed:54:e9:7a:e8:d2:9d:a6:8d:18:3f:ec:1a:c7:3d:
7b:9e:89:2c:68:be:33:60:65:87:6b:4b:88:89:26:
85:97:6d:6e:af:d4:57:c2:08:76:97:bb:b5:b7:e4:
0c:11:19:a2:a9:8f:cf:af:1e:12:ef:15:c6:61:b8:
67:5e:c0:34:ba:cc:fb:c8:8c:b9:aa:89:22:cc:d0:
b8:5b:c1:bc:96:80:de:63:e9:93:52:29:96:b1:32:
a0:f4:ec:9b:b2:d6:ba:e8:83:24:fd:d7:34:bd:c1:
5e:62:4f:d3:17:30:0a:63:9b:c4:4a:b3:f8:a7:27:
ce:14:42:e7:ad:e0:29:4b:e4:42:55:02:27:d2:80:
f2:71:31:78:d0:0d:9c:3c:bd:cf:a1:94:0f:ec:49:
38:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3C:41:C7:0A:D5:B5:40:48:F5:B4:9E:5F:5A:10:C3:3E:4F:93:45
X509v3 Authority Key Identifier:
keyid:AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e3:fd:a5:15:82:4f:31:fa:2e:91:2f:d9:cc:ba:16:0a:c3:
c1:74:3c:44:df:ef:bd:6c:3e:a5:83:fd:9e:9c:64:1f:d8:a3:
59:64:6e:e2:a4:4a:c8:0f:7d:f5:35:b0:fa:42:2d:8f:b6:d1:
9e:f2:2e:36:c8:b4:d5:ee:a4:a4:f5:85:90:2c:64:ef:8a:b7:
a3:50:5a:93:cc:8c:79:af:9b:bd:49:60:57:5a:37:06:01:10:
5d:11:83:30:b6:a1:e8:fa:60:ee:12:22:c9:0d:52:65:8f:91:
ab:fd:be:89:15:55:88:82:76:a9:ab:e4:bc:7e:b8:c7:a1:c7:
ca:d0:b3:43:09:7b:37:8b:c6:2f:b5:bc:0f:9f:07:15:4e:1e:
f6:14:69:00:10:da:dd:c3:63:f5:d1:de:45:39:39:ec:ee:1f:
f2:4d:0a:86:1f:2a:0c:44:ea:78:4c:77:da:5e:6b:a0:f9:a4:
12:e8:2d:f9:f2:5f:e5:70:e8:ef:ba:4a:a2:c2:98:67:a8:6f:
69:ef:b1:19:d7:b1:43:21:17:92:86:df:3f:62:9f:4c:3d:30:
b1:86:05:32:d3:3a:85:72:a7:ca:51:d9:66:14:e9:fb:0a:cf:
35:aa:04:96:c7:6a:86:8f:a0:91:c8:48:c2:30:62:f3:90:fe:
fe:56:4f:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqLQiQfamiMXjmZwSP+fIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMWVlZTIyYzUwMTUzNjMxMThhNzFkMjZhOTQ2M2RjOTM3
NGJhMjgwHhcNMjYwMzI2MDEwMTAwWhcNMjYwMzI3MDEwMTAwWjAzMTEwLwYDVQQD
EyhmMTNjNDFjNzBhZDViNTQwNDhmNWI0OWU1ZjVhMTBjMzNlNGY5MzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY5GJ9MjYdjW7XxN7KURTfJ5ZLtT
4ajQmGz78boSHF6T0TZoCoWDVvcNIXIQeO61vjpXmVSIqX+EObOR+a6RYgOxGr02
KbVel3FyQrh9TWH9FOt1JzUxVUHD9dM6Ogb8F8i8Uj32h+vtVOl66NKdpo0YP+wa
xz17noksaL4zYGWHa0uIiSaFl21ur9RXwgh2l7u1t+QMERmiqY/Prx4S7xXGYbhn
XsA0usz7yIy5qokizNC4W8G8loDeY+mTUimWsTKg9Oybsta66IMk/dc0vcFeYk/T
FzAKY5vESrP4pyfOFELnreApS+RCVQIn0oDycTF40A2cPL3PoZQP7Ek4vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPE8QccK1bVASPW0nl9aEMM+T5NFMB8GA1UdIwQY
MBaAFK8e7iLFAVNjEYpx0mqUY9yTdLooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcng3dUlzVUJVMk1SaW5IU2FwUmozSk4wdWlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9mZGMyZjQtMjIyMi00ZjFiLWE1ZTUt
YjIxNzhlZjJmODJmLzEvcng3dUlzVUJVMk1SaW5IU2FwUmozSk4wdWlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9mZGMyZjQtMjIyMi00ZjFiLWE1ZTUtYjIxNzhlZjJmODJm
LzEvcng3dUlzVUJVMk1SaW5IU2FwUmozSk4wdWlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOP9pRWC
TzH6LpEv2cy6FgrDwXQ8RN/vvWw+pYP9npxkH9ijWWRu4qRKyA999TWw+kItj7bR
nvIuNsi01e6kpPWFkCxk74q3o1Bak8yMea+bvUlgV1o3BgEQXRGDMLah6Ppg7hIi
yQ1SZY+Rq/2+iRVViIJ2qavkvH64x6HHytCzQwl7N4vGL7W8D58HFU4e9hRpABDa
3cNj9dHeRTk57O4f8k0Khh8qDETqeEx32l5roPmkEugt+fJf5XDo77pKosKYZ6hv
ae+xGdexQyEXkobfP2KfTD0wsYYFMtM6hXKnylHZZhTp+wrPNaoElsdqho+gkchI
wjBi85D+/lZPZw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:08 2026 by rpki-client