Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
File: R4x_xrIR4nH3SD9yHUXyON195cQ.mft (raw, json)
Hash identifier: XM1+xGjMvBTdjNyypncWdLK/81Igu7CuYnB+y9lpEBg=
Subject key identifier: 68:2A:30:AA:CA:D8:C9:98:44:A9:48:75:A7:F6:BA:DB:AF:42:E6:58
Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Certificate serial: 019D273AF4AFF8C5C960AE6B54315EB5FC95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
Manifest number: 0A33
Signing time: Wed 25 Mar 2026 23:01:08 +0000
Manifest this update: Wed 25 Mar 2026 23:01:08 +0000
Manifest next update: Thu 26 Mar 2026 23:01:08 +0000
Files and hashes: 1: OBJUqWKdq6kiQbp0gg2le_lxwc8.roa (hash: Q6TNVRFJT35RFtqmG8IVN0WlQLvaNhPi6XH41fNOOas=)
2: R4x_xrIR4nH3SD9yHUXyON195cQ.crl (hash: Fzal06pjv5OdKo2S/kUc41IK5rqvZ+VkCXRr0NSiH0c=)
3: pDXgmFSEjeXu5kTO9JnxKOTny04.roa (hash: zBFnWy98uBKGBRB8AClKYux+jyTzJfSF7W9SKPlT+0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:f4:af:f8:c5:c9:60:ae:6b:54:31:5e:b5:fc:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Validity
Not Before: Mar 25 23:01:08 2026 GMT
Not After : Mar 26 23:01:08 2026 GMT
Subject: CN=682a30aacad8c99844a94875a7f6badbaf42e658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:af:da:f1:75:98:fd:ef:eb:f2:11:95:72:29:
87:40:c0:4b:61:85:01:9b:ca:9a:ed:7e:34:52:49:
4f:27:38:fe:37:f1:7c:9a:99:3b:7f:c4:e2:2f:4d:
f0:d5:d7:aa:01:20:01:54:cb:c1:b4:71:5d:e9:90:
fe:09:f6:3b:53:12:08:45:fe:59:79:91:78:13:05:
7d:0b:bf:c1:c3:95:3e:f4:a8:4c:0f:b3:10:8d:79:
5a:cd:a4:cb:93:06:57:49:7c:20:0a:fc:f8:6a:63:
98:3c:b1:69:99:36:90:56:a0:5d:01:3f:30:c7:d6:
db:68:f7:84:4e:93:e0:d0:55:2e:4d:62:ec:94:20:
81:7a:3d:7f:2b:df:63:3d:b5:52:ad:01:1c:2f:37:
3e:5c:92:a6:7b:70:f7:ba:03:10:a9:67:58:aa:55:
36:91:dd:94:7f:a2:c8:69:4b:e7:38:4e:45:59:b2:
07:b5:4e:6f:00:e6:00:c1:8c:60:79:15:92:62:ef:
96:74:3c:62:0b:3d:ff:62:ca:18:2c:52:8a:b7:bb:
43:9b:47:24:ee:8a:2d:36:13:04:70:d7:c1:a4:89:
44:6b:59:c4:f4:26:01:21:74:76:6e:ac:87:29:d3:
5c:b6:fb:01:2e:13:77:d0:fa:fb:60:55:22:e3:af:
09:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2A:30:AA:CA:D8:C9:98:44:A9:48:75:A7:F6:BA:DB:AF:42:E6:58
X509v3 Authority Key Identifier:
keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:27:1c:ad:9a:1d:58:67:64:15:c2:a2:f7:e9:ba:e7:91:54:
ba:df:11:bd:00:cc:4c:10:b8:e6:37:49:07:31:b5:4c:c1:ad:
46:a7:e0:ef:40:ce:e2:eb:f7:5d:fc:81:57:bf:a0:96:f3:46:
cf:c5:c6:db:ff:cb:d4:40:33:54:02:3d:f9:ca:70:08:22:47:
21:27:e2:f8:3c:2c:9c:d1:55:57:26:57:16:e9:fe:56:6e:33:
b5:87:fe:43:ad:ae:7b:38:b1:26:50:da:e0:ab:82:fa:c8:cc:
4e:7f:99:58:99:5e:2d:4f:9b:14:f8:72:22:80:ae:53:da:40:
d2:71:be:9e:1c:d3:58:86:6d:06:9c:57:30:ed:05:f9:80:79:
db:6e:15:ef:d8:7f:dd:b4:4d:4f:92:22:0c:ca:3b:a6:d1:57:
d4:2e:f1:c6:f1:dc:d0:76:38:cc:79:c7:be:69:65:35:6f:f2:
47:80:06:04:9d:bb:3d:7e:8c:2f:6b:16:4d:46:8a:1f:7a:f8:
83:1b:68:b9:e1:4d:80:f6:21:94:d4:3c:a6:d4:cd:69:f8:fd:
ac:fc:8b:6d:bd:08:cf:9e:62:8b:a2:29:2c:f8:13:b6:66:96:
a5:77:75:90:ce:12:e0:a9:18:9a:1e:b0:b5:de:59:14:71:ad:
a1:7b:f7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:18 2026 by rpki-client