Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
File: r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft (raw, json)
Hash identifier: CJXnPo3V1dSFah3AlBNFfP1bjCFMQEe4LCRjjrXusTA=
Subject key identifier: 49:CD:02:5F:70:21:98:94:DB:56:03:CF:CF:BA:D7:FC:D1:26:0D:07
Authority key identifier: AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
Certificate issuer: /CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Certificate serial: 019D9B511DBD1015BA41BBDD8E32C843CE70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
Manifest number: 15B0
Signing time: Fri 17 Apr 2026 12:01:17 +0000
Manifest this update: Fri 17 Apr 2026 12:01:17 +0000
Manifest next update: Sat 18 Apr 2026 12:01:17 +0000
Files and hashes: 1: r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl (hash: TsdQgzLjcv7f4bU8YYs/Eh4bkNWGd/9oO52EbawSsyk=)
2: sXuiRHlvEW8rrBF1Ev9CogiLSCQ.roa (hash: pLvRlLK05UpElewJM59U7OVcLxC0+h1J9DGDrZTZEFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:1d:bd:10:15:ba:41:bb:dd:8e:32:c8:43:ce:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Validity
Not Before: Apr 17 12:01:17 2026 GMT
Not After : Apr 18 12:01:17 2026 GMT
Subject: CN=49cd025f70219894db5603cfcfbad7fcd1260d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d6:e8:6b:87:fe:c6:ea:0c:15:07:9b:00:04:
25:ce:a1:1c:2a:3f:3c:e3:a7:0c:70:b9:50:fd:23:
2d:d8:91:6d:9f:03:23:dc:6e:3a:cf:91:a7:ab:c5:
81:46:d6:0b:9b:4d:f7:a4:30:73:83:a9:b5:c8:bc:
80:27:e7:2e:6d:ce:d1:6a:cf:a5:65:29:71:70:9b:
58:03:6b:22:a7:ad:f9:f8:18:4d:66:52:2e:ea:cd:
25:03:d2:1a:5c:1d:22:6f:5a:ea:d1:49:ae:7c:6d:
7d:96:7e:f5:fa:ac:58:12:ab:f5:ce:0e:ee:56:db:
b7:a0:85:65:01:8a:03:4b:19:8a:bf:6a:c7:22:f2:
e6:80:70:dc:cd:c8:53:6e:74:58:6a:60:1a:bb:60:
4b:cc:f3:ad:89:f4:ba:66:f6:24:a5:e8:89:33:74:
f7:b2:3e:58:24:11:2b:85:cf:9e:08:6b:4b:56:ce:
59:02:8b:b9:38:f6:92:10:0d:27:71:b3:75:4f:d1:
85:39:46:50:ec:a5:ca:35:3c:ea:d3:db:a1:d5:a3:
6f:d6:87:83:97:77:8a:4b:cc:c2:b3:ca:cf:0d:f6:
7d:6f:8c:1e:db:f7:e9:23:fd:51:db:8d:5c:86:bc:
6c:a5:86:15:71:f1:5b:ab:9b:73:ea:cb:4c:36:71:
05:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CD:02:5F:70:21:98:94:DB:56:03:CF:CF:BA:D7:FC:D1:26:0D:07
X509v3 Authority Key Identifier:
keyid:AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:19:f8:04:c5:47:1d:6e:e9:ba:3c:3f:3a:af:81:ea:8d:61:
13:0f:4a:a9:f2:dd:77:a4:80:0f:b0:15:6b:5b:6c:cb:2d:eb:
af:e1:02:b6:b0:d9:11:de:d6:61:51:c7:6f:8f:24:33:d4:e2:
17:91:ac:c9:92:f9:3e:12:ab:cd:61:71:eb:7b:42:99:3c:c8:
47:75:eb:f5:6c:54:b6:51:bd:5f:44:bf:56:28:d3:93:ec:97:
62:d1:a8:67:0b:e4:50:a1:61:8c:41:53:94:e1:d5:62:c5:71:
d4:86:f1:40:b1:e8:98:b7:a3:14:e3:54:f4:b1:f3:12:a2:d2:
56:ef:f3:64:3c:9f:0a:ae:33:a1:d6:fe:ed:2b:df:1c:f3:3b:
9a:47:ff:73:e3:0f:e9:29:75:76:0b:cc:c7:10:fe:92:60:0b:
89:b8:61:81:e3:c1:7b:56:3c:dc:54:0a:3d:3e:66:4d:63:0d:
7e:f8:74:02:4a:bd:c7:69:eb:c7:2d:ef:3d:12:9f:55:f7:2a:
be:99:c0:7c:25:35:e5:60:08:b8:b9:35:d1:dd:f3:af:19:68:
d5:f3:30:aa:16:10:8f:0c:b8:9b:b6:03:75:0b:de:5b:d3:fb:
e0:00:09:83:08:ad:6e:20:bb:23:da:5a:23:6d:b6:72:a2:0c:
9f:9d:2e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:49:51 2026 by rpki-client