Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
File: RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json)
Hash identifier: +ytjX1Byf6dmJ5vc4It/7u/UI+ggdBERZwWyyYDmP0E=
Subject key identifier: D0:2E:BD:83:80:2F:6F:51:47:30:21:55:4B:93:30:B4:E9:2D:8A:A0
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial: 019D28BBA6BF61BE05767119DA093E868739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:01:19 +0000
Manifest this update: Thu 26 Mar 2026 06:01:19 +0000
Manifest next update: Fri 27 Mar 2026 06:01:19 +0000
Files and hashes: 1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: ZgMErsSx/04l94WnACUnslMJ2PaHNf/Ty2uPLKGny+M=)
2: SQFAkjt57y-pTXhYLYstw04Yit8.roa (hash: hgGTZStyS8714Gh8ubpZL/WCwm7djUM9MS9CR1krlpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:a6:bf:61:be:05:76:71:19:da:09:3e:86:87:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47119a205683167925b9f04174312637b1600c07
Validity
Not Before: Mar 26 06:01:19 2026 GMT
Not After : Mar 27 06:01:19 2026 GMT
Subject: CN=d02ebd83802f6f51473021554b9330b4e92d8aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:01:64:3e:ce:88:0b:08:09:60:97:e6:63:
5a:cf:21:ec:27:4e:14:f1:1a:5e:56:4b:3a:7a:81:
f5:1a:ae:10:cc:bb:ef:7d:bd:ab:23:07:ab:71:5d:
b3:b6:4e:bc:a4:aa:84:01:13:b8:52:bc:a8:75:c0:
4b:a1:e4:c5:15:e8:79:ec:d1:90:90:21:9f:71:0b:
ab:98:ac:db:cc:4d:f8:b5:56:ef:3d:42:16:23:73:
b9:70:00:0d:b8:80:d8:c2:ba:61:4b:5a:21:a9:e9:
1d:93:3e:c6:21:e4:2b:71:93:65:2c:38:34:68:8f:
a0:3b:42:fb:c0:d3:72:c0:77:06:fa:46:41:6b:0e:
9a:78:c5:ca:90:ac:2b:e1:95:ad:bb:b6:0c:7c:ec:
95:82:98:de:b7:e6:99:0a:fd:71:3a:9a:c5:c5:09:
fc:29:09:e0:f6:e3:07:e6:ee:e3:f4:04:1e:fe:c5:
ca:6f:6e:40:2f:c5:30:ce:cf:f9:d5:68:33:2e:d6:
2d:3d:44:6b:2b:c7:24:46:ae:d3:0e:8b:fe:de:a2:
dc:e2:ba:12:33:52:49:ba:40:99:5a:2f:15:9c:6d:
99:93:6b:d3:83:01:86:92:4f:1e:3e:bd:a7:24:81:
ef:28:43:75:11:fa:1a:ac:8e:58:fc:7c:67:7d:3c:
e8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2E:BD:83:80:2F:6F:51:47:30:21:55:4B:93:30:B4:E9:2D:8A:A0
X509v3 Authority Key Identifier:
keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9c:0f:81:61:c9:65:60:5e:16:52:0e:46:17:f4:f1:30:09:
6f:45:3e:89:ec:84:be:c2:d2:a0:ed:8c:a6:70:24:6c:86:fa:
74:79:2e:8c:1b:90:90:13:0a:ca:02:bd:dd:74:3e:02:7d:66:
6d:6a:e1:79:af:b1:9b:70:67:7f:80:80:af:cd:4e:ab:b7:e5:
ea:de:20:de:b8:70:b4:58:9a:92:ec:3c:fa:9a:47:8c:51:7e:
fd:fa:a0:21:c9:40:c9:ea:6b:a3:eb:5e:16:0f:2b:9e:f3:4d:
de:7e:1e:b2:31:fc:8f:99:2b:76:19:e4:66:ec:cc:39:7e:8e:
95:f6:09:fe:7d:a0:56:a0:56:0a:f7:28:55:b7:08:34:d3:d9:
c1:28:22:c6:92:c7:b8:b4:b6:15:35:34:12:2a:de:65:93:96:
5b:74:e8:83:00:0f:e8:1f:ed:78:72:5b:dd:07:9c:95:19:9b:
f4:d3:7a:8f:4a:6b:27:14:57:4b:fc:97:88:f8:9c:f3:9f:c9:
17:57:72:d2:e3:85:b1:9c:42:da:4a:0a:9a:ef:8d:a9:0a:d7:
ee:fb:5c:5a:2c:fa:c4:ab:d8:95:22:f8:a4:ad:b7:65:24:13:
1d:ff:f3:46:6d:a9:a6:8d:b7:f2:e8:f1:f6:c2:98:86:65:bb:
74:d5:e2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:23 2026 by rpki-client