Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
File: RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft (raw, json)
Hash identifier: jrupUsEcgtuR1loM5tEeheSw5M4X/DqGDUCmDCwRyK4=
Subject key identifier: 13:4A:8D:E1:C6:64:03:3A:30:0F:DA:88:CC:25:B5:71:40:F9:EA:E9
Authority key identifier: 45:76:70:54:D1:93:A3:B8:D6:C2:C0:09:F5:9C:F6:43:E1:49:E3:9F
Certificate issuer: /CN=45767054d193a3b8d6c2c009f59cf643e149e39f
Certificate serial: 019D98501C9A4D81C97D0EC0ED509002259E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
Manifest number: 12BC
Signing time: Thu 16 Apr 2026 22:01:20 +0000
Manifest this update: Thu 16 Apr 2026 22:01:20 +0000
Manifest next update: Fri 17 Apr 2026 22:01:20 +0000
Files and hashes: 1: 3n3qv-NIFDfYNIwq893hOV2mItU.roa (hash: fPlKtrxURx2WVwQAzRf5x0bQA1CR4xrOvVBRMEkFGho=)
2: RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl (hash: t+ThdXHpFus6REkKmyXwVNX1cnNQwRCDDyQ+Bejpgf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:1c:9a:4d:81:c9:7d:0e:c0:ed:50:90:02:25:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45767054d193a3b8d6c2c009f59cf643e149e39f
Validity
Not Before: Apr 16 22:01:20 2026 GMT
Not After : Apr 17 22:01:20 2026 GMT
Subject: CN=134a8de1c664033a300fda88cc25b57140f9eae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:ac:e7:dd:fc:8c:13:97:6e:50:18:29:44:
11:6b:7a:46:15:d5:39:93:d8:19:3d:03:bf:ea:c3:
9b:22:c7:d1:a7:fe:7e:90:b7:59:e3:c6:1d:19:92:
28:c9:a4:2a:80:bd:dd:d7:56:42:85:91:bd:77:50:
85:50:05:37:1c:a8:f9:81:a8:ef:4c:6f:a3:6f:a7:
05:5e:12:39:37:02:57:98:ec:34:50:32:6e:8b:7c:
c1:82:e5:e1:84:4c:ab:b0:d9:c5:66:6d:47:b5:0e:
b7:37:7f:c6:c1:5c:e2:df:c7:fd:61:e7:51:8a:4b:
36:73:17:f3:a9:c6:ff:52:ae:c6:0f:e7:6d:66:5a:
9f:51:8f:69:f1:51:fe:7c:87:fb:f0:d6:22:e3:99:
3b:ba:99:6b:5f:54:15:e5:56:48:cc:f9:af:f3:db:
c0:6a:1f:a1:c4:66:91:ac:f4:18:b8:17:e9:e2:7d:
c5:0c:20:4e:2c:54:70:75:9e:9f:3d:30:95:54:75:
31:95:55:87:da:d7:09:68:56:ef:c5:89:66:c9:b7:
fa:fb:73:f9:f2:7b:ea:96:d8:9e:5f:d5:7c:8f:90:
29:a0:12:35:27:41:e3:e3:7b:a6:39:7f:15:af:ed:
64:8f:4a:b9:03:e2:bb:36:05:be:6f:5e:b6:25:67:
76:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4A:8D:E1:C6:64:03:3A:30:0F:DA:88:CC:25:B5:71:40:F9:EA:E9
X509v3 Authority Key Identifier:
keyid:45:76:70:54:D1:93:A3:B8:D6:C2:C0:09:F5:9C:F6:43:E1:49:E3:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d7:76:a0:60:ef:69:a9:15:f7:f7:a3:95:7e:eb:d2:5b:fb:
e9:d1:57:0a:2e:73:a1:7f:f5:ee:c5:96:b6:8e:61:95:df:10:
63:65:a0:70:82:5e:84:06:b7:cd:10:7a:9e:9f:d3:a3:91:0d:
3e:d9:45:d5:53:36:53:f5:4e:1d:cc:bc:aa:43:63:39:f7:e6:
d4:66:cc:e7:13:68:80:ff:0f:c7:69:b3:04:db:26:8b:96:70:
ed:80:d1:ff:c5:f1:28:1e:b6:ed:e7:5c:72:2a:7c:ba:fc:49:
bc:1a:20:32:10:35:07:ae:32:53:8c:cf:9d:c7:22:dd:59:ef:
91:1e:91:83:83:9c:12:a4:2e:8b:76:f8:13:ee:94:0f:df:48:
11:f0:6b:09:a9:28:7e:e8:e9:60:26:f6:f5:dd:60:f2:68:30:
8c:bf:13:b5:15:95:0f:13:bb:d9:90:5c:40:93:ba:82:00:8c:
f6:90:5e:18:0d:94:7a:d3:76:a9:e7:d4:cf:b2:7f:49:12:ec:
da:e5:73:e5:d5:70:72:ec:8c:0d:7a:b9:37:d1:ef:d2:f6:70:
b0:f3:de:f7:82:c1:95:af:26:66:c7:8e:5a:50:44:f3:39:16:
d7:8c:db:9e:65:84:33:a5:04:a5:b4:92:10:6e:59:12:e9:08:
7e:27:a1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:54:50 2026 by rpki-client