Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
File: RxS79TeHr06TXTCkjoglotoUoIs.mft (raw, json)
Hash identifier: P50nkcFCw1yXSFREpACbdhpE2ZmD+UlyZCUbdzft5fs=
Subject key identifier: 7A:31:96:2D:82:F5:BD:E1:EC:35:96:0A:04:87:E9:F9:A1:5B:42:E1
Authority key identifier: 47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B
Certificate issuer: /CN=4714bbf53787af4e935d30a48e8825a2da14a08b
Certificate serial: 019CAEA2DA88EEF79AC85A114830FE5B579B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
Manifest number: 0186
Signing time: Mon 02 Mar 2026 13:00:34 +0000
Manifest this update: Mon 02 Mar 2026 13:00:34 +0000
Manifest next update: Tue 03 Mar 2026 13:00:34 +0000
Files and hashes: 1: RxS79TeHr06TXTCkjoglotoUoIs.crl (hash: NPWBrHHzUjU/z2z7ACN+pSb4V5tSs74W2EygD3RnBUs=)
2: o-mtc665fbhvSfNUs9vwAj_na4c.roa (hash: CKoVltX9Hmfz+Z2sk8sI92L3m9MX0WVmDaQsoWexPl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a2:da:88:ee:f7:9a:c8:5a:11:48:30:fe:5b:57:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4714bbf53787af4e935d30a48e8825a2da14a08b
Validity
Not Before: Mar 2 13:00:34 2026 GMT
Not After : Mar 3 13:00:34 2026 GMT
Subject: CN=7a31962d82f5bde1ec35960a0487e9f9a15b42e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:a9:91:40:aa:a2:b5:88:10:18:24:9e:9d:
98:d3:ff:49:78:0a:fb:30:1e:3c:f4:f4:e5:99:f7:
f5:63:44:b6:a1:c6:fe:76:9a:aa:a3:10:ed:00:ea:
3c:b3:95:73:d3:bd:3e:e3:ce:05:6a:c8:59:1d:5a:
d5:5c:29:7d:c2:71:cb:ce:c7:09:5b:49:e2:12:c5:
85:81:f4:63:44:ca:e0:6a:82:59:d3:37:cd:a2:7d:
76:07:68:53:fa:b9:bf:89:71:b2:64:b8:7a:21:98:
44:41:d1:08:e0:f0:9b:1a:1b:4a:e6:ce:ca:14:60:
c5:ab:99:4d:63:be:76:f8:69:f2:27:92:35:b3:21:
ea:2d:fe:45:53:f2:5e:6c:09:b5:10:11:55:b1:56:
8f:30:09:2b:03:09:d2:10:38:c4:44:28:66:1c:08:
76:4c:d2:f0:17:2f:90:40:ee:26:6d:0d:89:8d:74:
00:b2:27:74:0f:0f:78:be:f6:05:66:46:2c:37:aa:
f5:1e:1f:6f:e0:79:db:6e:c3:f2:49:ae:12:cc:46:
d1:6a:e7:5d:97:ac:8b:db:b4:bb:d6:8c:73:68:36:
be:90:d5:6c:31:6b:55:01:fb:d5:e5:be:f2:a8:d7:
34:fb:2a:48:1d:fb:60:18:ca:41:35:73:90:cc:37:
22:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:31:96:2D:82:F5:BD:E1:EC:35:96:0A:04:87:E9:F9:A1:5B:42:E1
X509v3 Authority Key Identifier:
keyid:47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:91:bf:16:d5:0c:de:1e:30:c1:80:ca:06:f6:98:82:ff:48:
a6:cb:6d:be:14:95:0e:8e:4d:c9:ea:63:56:61:9f:74:d5:20:
aa:90:b5:bc:6c:5c:87:db:3a:7c:ea:e0:44:20:d9:e8:70:73:
e1:55:c5:4c:d4:34:7a:1d:30:fc:e3:40:38:42:e9:b8:10:04:
bb:cf:92:44:a6:12:b5:68:f0:5e:19:5e:11:cb:a0:00:f0:9c:
1c:dc:30:b6:bb:ef:a1:23:55:3a:06:a5:20:13:a8:20:9c:db:
5b:5c:76:12:44:e2:09:da:e7:73:e6:36:ca:54:52:d5:28:bb:
5b:84:c3:14:db:05:f3:10:39:d9:44:e3:06:88:cd:9e:19:1e:
c1:bc:4e:53:9b:5f:84:ee:af:35:c3:18:05:03:81:31:c7:ed:
7c:3b:f9:bf:a3:bb:13:47:d1:16:92:dd:db:9a:1b:7b:46:d5:
98:e2:a5:18:ec:fb:13:ae:58:c3:b0:83:95:13:d8:e4:22:51:
f7:4f:69:a6:4c:86:36:d9:bc:eb:37:cd:99:1b:cd:5e:80:db:
37:b9:91:60:97:66:14:97:10:b6:a1:09:19:23:b0:c0:eb:af:
8d:c8:49:cb:71:37:6d:0a:f1:d4:56:16:9f:2e:60:34:a8:40:
d1:75:f3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:47:18 2026 by rpki-client