Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
File: RlxixrzUz7iTO8tqYc97Pa0vsRg.mft (raw, json)
Hash identifier: MOgR2cZ8SkYGHlcBKC1HOID/+riqXbXSEt8GZ3QnO4U=
Subject key identifier: D5:4D:8F:C8:B3:CE:A8:D1:40:F0:5E:62:4B:FC:76:67:C1:EF:2C:07
Authority key identifier: 46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
Certificate issuer: /CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Certificate serial: 019CA945FC9AA9B7A024D814E4F25A374E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
Manifest number: 0F3B
Signing time: Sun 01 Mar 2026 12:01:01 +0000
Manifest this update: Sun 01 Mar 2026 12:01:01 +0000
Manifest next update: Mon 02 Mar 2026 12:01:01 +0000
Files and hashes: 1: ENG_c-IJkYRyd704wrJW6p57tLE.roa (hash: aVJt7m5b3gAwKY//U3FCsQzjDpxFgRS6LuQjONM9IoA=)
2: LKRFm8Pw00kXQoKIo5cZaR03rQg.roa (hash: ROfiKIWzfySuULtZm3Vy25ggedOkAvvyQXevFfnrv84=)
3: RlxixrzUz7iTO8tqYc97Pa0vsRg.crl (hash: vOqDJyCuQtNTyQQbNXAxsdCpmWAHGjhLv1uPIK2NTiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:fc:9a:a9:b7:a0:24:d8:14:e4:f2:5a:37:4e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Validity
Not Before: Mar 1 12:01:01 2026 GMT
Not After : Mar 2 12:01:01 2026 GMT
Subject: CN=d54d8fc8b3cea8d140f05e624bfc7667c1ef2c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8e:3d:a5:d7:4d:55:3b:4e:38:bd:9d:b3:14:
dd:bb:08:0b:b4:56:3b:ea:ec:b3:2a:75:bf:b1:c4:
88:ef:bf:b7:e1:f3:4f:2f:e9:a1:cd:0f:a3:e1:15:
19:54:a4:c6:2d:e7:61:43:b4:b3:d1:c0:bf:f9:c2:
5f:37:79:7b:49:c5:10:07:9e:15:f1:de:eb:81:0e:
b8:f6:22:1e:8b:fc:e7:04:81:9c:c2:ac:d2:23:14:
10:7d:be:54:8d:92:6e:86:c3:bb:0b:3a:21:7b:78:
00:7e:d2:42:84:cb:c5:48:b7:62:4b:d9:13:dc:a5:
ef:f1:b4:69:f0:8d:85:4b:c3:22:7f:63:b2:2f:40:
eb:ec:e1:39:96:c0:bb:52:78:0c:92:fa:e1:a2:e1:
d2:a6:13:ed:90:a5:45:be:00:77:5a:a8:61:89:f8:
af:65:68:d0:e6:a3:ec:5a:de:98:6e:bf:c2:23:e9:
25:53:a8:6d:fc:2f:12:28:6c:d9:b7:5e:56:0e:a7:
cd:f5:3a:88:d8:fe:35:75:31:0e:9a:c4:a8:7b:f7:
e9:c7:ac:92:41:e1:2e:1c:07:3f:77:38:3b:ca:c5:
82:2c:e8:37:cc:87:87:cf:a5:f7:b6:c4:4b:e1:46:
f9:be:e5:35:c7:14:fb:cd:58:ca:d0:6b:c4:2f:10:
bc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4D:8F:C8:B3:CE:A8:D1:40:F0:5E:62:4B:FC:76:67:C1:EF:2C:07
X509v3 Authority Key Identifier:
keyid:46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4a:71:e1:d9:17:d6:94:cf:9a:25:d2:92:fb:98:2c:67:04:
d1:a5:39:53:54:6c:57:2b:60:1c:d5:0b:9f:50:3d:18:dc:41:
e9:ed:70:75:27:cc:8f:f4:99:8e:c5:ae:43:76:8d:0c:06:61:
93:9a:0c:24:61:5f:a6:a5:2b:ce:ce:0d:c1:dc:05:93:26:ca:
67:49:ea:4e:34:28:66:b0:40:78:ae:7b:de:1c:8f:c9:e6:46:
da:e7:8b:21:67:ea:a2:94:71:c7:6b:00:62:d5:d5:f2:14:52:
d0:bd:46:d6:71:b0:9a:e4:c4:51:06:33:8f:cf:b3:80:f0:c5:
f0:4e:4c:c3:48:67:90:f8:05:d2:44:e8:8b:43:ca:3a:a7:23:
17:3a:c1:72:9f:d1:e3:4e:41:a5:99:8e:a9:79:a7:ae:61:94:
7c:93:4f:18:f8:b4:1c:78:a2:65:c6:ac:f2:24:89:66:48:cc:
19:7d:73:33:6c:f7:18:b7:11:69:c5:ef:0a:b4:35:3f:15:29:
ce:71:2c:08:5a:9f:fa:6b:d9:ce:f4:c5:2c:7f:29:61:d0:87:
19:cb:4c:2d:d7:ca:66:97:3d:44:a6:37:45:df:8e:46:01:5e:
b7:46:e5:04:60:68:d9:73:60:ef:3e:7f:40:8e:b1:2a:fd:a1:
c2:28:34:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:48 2026 by rpki-client