Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.mft
File: txU9FR23r-6-BDvkXy1v1Af8XdQ.mft (raw, json)
Hash identifier: d9/7tvEXXLp0Z48ec5S2pMMXyjDFtCYYF0/zYXBYIaE=
Subject key identifier: 3B:FE:8D:77:D7:23:72:3C:9D:17:53:9A:77:41:81:46:22:E6:55:6D
Authority key identifier: B7:15:3D:15:1D:B7:AF:EE:BE:04:3B:E4:5F:2D:6F:D4:07:FC:5D:D4
Certificate issuer: /CN=b7153d151db7afeebe043be45f2d6fd407fc5dd4
Certificate serial: 019D273AE8EDF0593B2B03986157EA028044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txU9FR23r-6-BDvkXy1v1Af8XdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.mft
Manifest number: 017E
Signing time: Wed 25 Mar 2026 23:01:05 +0000
Manifest this update: Wed 25 Mar 2026 23:01:05 +0000
Manifest next update: Thu 26 Mar 2026 23:01:05 +0000
Files and hashes: 1: txU9FR23r-6-BDvkXy1v1Af8XdQ.crl (hash: sQ7I9nHNTCs8Nf5liVvTNSI2Sq2okVynmx9OCC+6pW0=)
2: wV3RZHUZxTmDpkws_j0dB6wmvV0.roa (hash: 46jbtO1joeShuyzvvWhT+82K4uiYD5eZiKy/x8muQf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/txU9FR23r-6-BDvkXy1v1Af8XdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e8:ed:f0:59:3b:2b:03:98:61:57:ea:02:80:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7153d151db7afeebe043be45f2d6fd407fc5dd4
Validity
Not Before: Mar 25 23:01:05 2026 GMT
Not After : Mar 26 23:01:05 2026 GMT
Subject: CN=3bfe8d77d723723c9d17539a7741814622e6556d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:31:19:e5:34:9b:3f:1c:14:34:2a:79:7a:69:
c0:11:60:3b:94:4a:1a:68:8d:8b:91:27:4a:4c:4a:
8b:a8:75:d1:ca:c6:da:ce:0b:af:ea:63:eb:38:a1:
8c:f2:25:d7:c8:27:bb:e0:25:98:e4:ae:f7:7e:29:
54:fe:eb:e4:4f:58:f0:66:3b:ac:18:d4:4e:da:bb:
c3:02:19:e4:54:d8:54:ef:d3:d3:d6:e5:3c:c0:46:
d2:2a:72:9e:c6:e2:3a:2b:88:fd:a1:5d:fe:75:60:
0a:b6:1e:ab:c7:8a:a3:f4:2b:db:a9:91:b6:97:2c:
6e:a4:4d:89:6b:46:57:aa:7b:71:38:80:33:91:a8:
68:b3:8d:a0:60:12:86:c6:e5:cf:c0:2d:d5:10:79:
bb:1c:f0:6b:23:5f:68:04:41:85:a1:85:f4:8e:3a:
88:11:6f:a0:c1:9d:c9:83:f7:4e:e5:fe:02:3b:a5:
9c:ce:cf:49:3f:4f:31:38:a2:17:87:be:ab:47:24:
31:52:eb:d4:49:f6:72:f9:41:b9:d0:02:8d:f9:7a:
ad:0f:63:12:d6:12:f9:73:6a:02:0a:cc:a5:dd:9a:
0b:aa:bf:a8:e9:b0:86:c9:5f:4b:5b:c2:71:81:e7:
dc:65:ae:51:be:c6:56:20:ad:9a:e7:97:5d:dd:b7:
bc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FE:8D:77:D7:23:72:3C:9D:17:53:9A:77:41:81:46:22:E6:55:6D
X509v3 Authority Key Identifier:
keyid:B7:15:3D:15:1D:B7:AF:EE:BE:04:3B:E4:5F:2D:6F:D4:07:FC:5D:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txU9FR23r-6-BDvkXy1v1Af8XdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7b:49:74:ad:60:c9:01:ca:7b:47:73:3f:a7:dd:05:90:e1:
de:92:04:87:0e:a1:25:93:f7:46:1f:a3:12:07:1b:03:cd:14:
ad:1b:60:61:c9:c1:92:b8:69:45:a4:e1:b7:a1:bc:90:f0:6a:
2a:dd:ad:e7:15:2d:48:46:d0:19:86:05:47:8c:92:c3:0f:d2:
f5:cd:c2:3f:00:35:d5:b4:c6:d2:82:ab:00:be:24:ee:ca:00:
89:51:4c:86:34:36:12:46:ea:f9:88:31:86:21:fa:46:b2:03:
87:11:0d:b0:1d:11:13:8d:3a:f5:0c:4a:53:55:26:71:22:dd:
ef:56:5a:1f:ba:63:ca:f2:da:83:8c:64:21:ff:de:cc:4e:bb:
36:a5:87:cd:e1:4e:bc:32:69:04:08:01:83:6e:ea:31:0d:8f:
40:73:69:fa:a4:62:29:1a:bd:0e:08:0c:0a:2a:51:6b:51:da:
58:eb:60:b8:ca:6a:8c:0c:b5:15:bb:04:43:a7:85:69:81:7f:
ce:32:7c:24:3e:45:a0:c3:c0:59:66:ba:62:ba:02:55:ea:bf:
8f:c3:6f:ff:ba:d1:d4:0e:cc:da:4f:a6:c7:df:53:2e:b5:77:
51:aa:24:69:4f:33:ce:80:fb:13:7a:11:3f:80:fc:8c:30:6b:
a5:60:d8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:16 2026 by rpki-client