Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
File: RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json)
Hash identifier: RgqPm5ZEEEODfC3zuLbM1fgxek5+gpCnGgt9DwMNBLM=
Subject key identifier: 65:E8:55:AC:0F:AE:B1:D6:92:20:94:06:4C:58:5C:1A:B8:0B:51:A9
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial: 019E1FECFB3FBE7A21D3ED86FD9BB6547E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 06:01:24 +0000
Manifest this update: Wed 13 May 2026 06:01:24 +0000
Manifest next update: Thu 14 May 2026 06:01:24 +0000
Files and hashes: 1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: kwfkYkfyUB3hiVlZitG0UgILg3aV8bkWwJCShTaxfY8=)
2: SQFAkjt57y-pTXhYLYstw04Yit8.roa (hash: hgGTZStyS8714Gh8ubpZL/WCwm7djUM9MS9CR1krlpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:fb:3f:be:7a:21:d3:ed:86:fd:9b:b6:54:7e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47119a205683167925b9f04174312637b1600c07
Validity
Not Before: May 13 06:01:24 2026 GMT
Not After : May 14 06:01:24 2026 GMT
Subject: CN=65e855ac0faeb1d6922094064c585c1ab80b51a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:32:07:47:41:2b:0e:7d:c0:7e:f7:ac:b9:c6:
7b:db:7c:71:25:76:99:3c:3d:7a:99:48:68:b9:13:
a4:c8:30:4c:1c:f3:eb:22:1f:7c:56:96:dd:98:e4:
48:df:73:75:22:d5:f2:1b:b6:73:51:de:f6:a9:57:
58:87:14:64:8f:c6:bc:d0:c8:58:6f:af:fe:13:7e:
b7:e5:66:c1:5b:81:f1:b6:0a:28:69:ff:99:6e:fe:
cd:86:9a:f4:34:24:50:e2:0d:3b:26:dd:b2:a4:7e:
77:e2:95:6d:b5:35:61:79:6f:b8:f7:c3:65:ae:72:
c3:59:17:49:b7:40:16:84:6d:9c:52:d7:b8:f9:66:
60:3d:58:2b:48:6c:fe:a3:aa:e0:a5:f3:c0:50:13:
05:1c:9d:34:cd:44:0e:9a:19:b0:a4:89:6c:e9:b9:
a7:a8:6e:56:be:68:37:ce:49:c8:86:09:d7:29:e3:
fd:91:26:24:24:19:b4:4d:a3:9e:e4:54:f1:08:ac:
fc:31:4c:32:fe:c0:e9:ed:1f:0b:16:9f:80:a6:5c:
02:af:f9:a8:12:88:35:ed:4f:c6:77:e7:02:15:fe:
00:0f:f8:32:9a:27:7f:22:a1:4b:e1:ec:2b:e7:37:
47:d4:f6:91:c1:04:12:d8:cf:9f:04:ef:19:b6:dc:
b1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E8:55:AC:0F:AE:B1:D6:92:20:94:06:4C:58:5C:1A:B8:0B:51:A9
X509v3 Authority Key Identifier:
keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5d:3d:7f:2d:14:97:13:1b:da:e3:d6:71:26:b1:c1:b9:4a:
86:05:70:a2:8b:3d:32:05:ed:fd:f9:55:30:46:18:92:37:15:
6c:2e:72:f7:ff:24:f6:e3:5b:7f:9e:f0:c1:b5:27:90:61:a9:
05:c7:e5:51:06:3b:99:e2:b0:59:30:fe:bd:8e:82:9a:b0:66:
48:22:93:37:07:fd:0d:ed:ab:4a:62:a9:42:09:24:4e:c4:a9:
9f:92:56:24:92:65:6d:5f:0b:ad:d2:2b:e7:59:f3:41:12:96:
69:27:60:8b:b1:a4:c3:6d:35:8d:e0:b6:fa:e9:b5:4e:e1:73:
55:21:72:ea:0e:3e:49:51:a9:4a:cf:ca:b1:fe:4d:11:da:db:
4d:21:8a:31:4b:63:9c:c4:93:86:c7:14:b9:c9:ff:00:35:dc:
fc:45:ed:8f:9c:f4:4f:b4:b2:45:34:d8:49:c0:22:e9:82:4c:
d9:40:49:5c:a7:46:b9:3b:fa:14:09:c8:73:0a:a7:e2:8f:80:
33:40:b1:b5:4f:2e:49:4b:47:eb:27:9b:f9:04:93:eb:3d:c8:
07:ff:b5:cd:ba:ce:7c:87:63:21:3d:50:6f:10:af:04:a7:aa:
5c:48:d5:0a:7f:92:a4:c2:34:ef:49:4c:02:8e:68:a7:25:f3:
84:52:66:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:09:52 2026 by rpki-client