Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
File: RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft (raw, json)
Hash identifier: NDS7Bao0Kd06NbOewDWh5rBHMLEEyDtJbu5+GnFQlUg=
Subject key identifier: 12:6B:48:45:0F:71:63:73:37:55:F6:60:FC:89:68:74:01:D7:B3:08
Authority key identifier: 47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB
Certificate issuer: /CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
Certificate serial: 019CB1A3FA4547EF899DDFEA566982811256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
Manifest number: 037C
Signing time: Tue 03 Mar 2026 03:00:39 +0000
Manifest this update: Tue 03 Mar 2026 03:00:39 +0000
Manifest next update: Wed 04 Mar 2026 03:00:39 +0000
Files and hashes: 1: RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl (hash: x64ZBLq956kdWiNDQiGMTZaj1vkfeK7zlSvc8I5Kzh0=)
2: ZS49NoR0xEt4EkcswjIY6hISabQ.roa (hash: l3Du0mInbrihmNOTEOBYAtuZ0coi5mG0KsyicEw3aoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b1:a3:fa:45:47:ef:89:9d:df:ea:56:69:82:81:12:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
Validity
Not Before: Mar 3 03:00:39 2026 GMT
Not After : Mar 4 03:00:39 2026 GMT
Subject: CN=126b48450f7163733755f660fc89687401d7b308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:72:5f:bb:1d:e2:0c:4a:5c:e0:e5:3e:4c:98:
c7:7c:a0:df:96:d7:56:bf:2b:7e:4c:d5:6e:98:cd:
2b:40:a8:7c:67:fe:91:07:bd:61:37:43:c4:07:e4:
2c:82:b1:c7:aa:40:2f:81:73:69:e2:7b:91:10:db:
e7:88:07:df:61:12:3e:24:20:c9:45:da:c5:cd:b6:
54:5d:f2:b7:e3:e7:cc:93:1b:02:9d:cb:e8:b9:57:
96:a0:e2:c9:12:09:69:f1:2f:e0:80:f0:85:dc:91:
1e:fb:43:e0:ed:f7:6a:4c:94:2d:90:41:78:87:e5:
1d:14:db:73:07:57:f6:bc:e4:5d:3d:59:1e:ea:bb:
11:9a:c7:89:0d:19:c4:02:3e:95:25:57:ae:b8:39:
2c:38:80:29:05:98:4b:97:d2:3a:de:10:84:a1:74:
9c:21:5f:ab:cf:81:7c:ea:a8:1f:8f:78:ae:91:3b:
85:06:21:b3:c9:c3:39:c8:6a:dc:a0:cf:f2:46:16:
78:01:66:e5:c7:26:9e:a5:93:b9:17:55:0b:42:b4:
46:cf:52:58:12:d6:27:4b:51:15:c5:10:5f:c7:ed:
98:54:ca:ee:6b:1c:aa:f0:aa:65:23:af:05:a5:0d:
05:f2:bd:3d:3d:7d:3c:69:14:a5:53:18:9e:82:ce:
8b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6B:48:45:0F:71:63:73:37:55:F6:60:FC:89:68:74:01:D7:B3:08
X509v3 Authority Key Identifier:
keyid:47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7b:86:2c:43:f4:1d:75:e5:f9:9c:aa:5b:2b:57:01:1e:21:
ed:bb:df:04:b5:95:cd:50:7f:05:af:ef:3a:ad:3c:f7:74:61:
03:1e:df:97:26:ce:36:ba:05:29:20:02:9b:54:a1:01:5d:a1:
a0:e7:8c:af:d5:71:91:5f:65:ac:8f:30:80:0a:cc:da:d8:31:
86:31:d7:89:33:cd:00:ba:ef:d7:df:3c:09:d9:29:a8:7d:df:
9d:d1:2c:9e:83:e7:b3:92:91:09:e8:7b:b6:b7:d0:c3:b7:66:
ad:9b:08:8e:51:b7:5a:1a:63:41:3e:04:6d:96:da:4d:ed:57:
08:5e:e3:35:2d:44:cb:99:43:17:b2:1e:04:91:7b:66:f0:75:
a0:fe:13:09:05:9e:4e:d4:50:31:89:7c:2c:0c:97:65:0a:de:
f6:e7:f9:33:b5:57:9e:24:47:8b:40:f4:0e:1f:32:d8:0f:5c:
f8:cc:34:7b:97:ca:c1:d7:0a:bc:b6:02:90:e0:2d:76:b5:86:
bb:b7:d2:3e:64:65:f9:a0:74:37:64:1e:a9:33:ad:ab:ad:7f:
5b:85:7f:76:ff:17:de:cd:d1:ec:74:71:01:b4:1c:24:9f:74:
27:26:e8:81:e6:be:30:5f:e7:2a:29:52:d2:cb:b7:08:be:1d:
7b:58:f6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 07:03:39 2026 by rpki-client