Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
File: rxfMznTBr7qDt7qF2XcSsrzEpeg.mft (raw, json)
Hash identifier: tjwfzT7R0NKdh5zT+0Fz7W9s6ul/wlxHgLgLUfVZnvg=
Subject key identifier: DA:5B:78:C2:5F:8D:EF:B3:51:0C:B0:F8:F0:07:C4:C6:E9:06:58:D1
Authority key identifier: AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
Certificate issuer: /CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Certificate serial: 019CAED9C3CE74DAA8AACEDDAAE115CD2FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
Manifest number: 0276
Signing time: Mon 02 Mar 2026 14:00:32 +0000
Manifest this update: Mon 02 Mar 2026 14:00:32 +0000
Manifest next update: Tue 03 Mar 2026 14:00:32 +0000
Files and hashes: 1: fWVWhQr_IOS3Ere6cXK65HkUY_E.roa (hash: 6xJw6F8DBsgdoe+Xw5KCeHZGXvkk/TDJRq4n5OCTKlI=)
2: rxfMznTBr7qDt7qF2XcSsrzEpeg.crl (hash: MKUiRQHXZjpf+3R6JPzvW91mtc+1bwfw5VX0Gy4uK9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:c3:ce:74:da:a8:aa:ce:dd:aa:e1:15:cd:2f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Validity
Not Before: Mar 2 14:00:32 2026 GMT
Not After : Mar 3 14:00:32 2026 GMT
Subject: CN=da5b78c25f8defb3510cb0f8f007c4c6e90658d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:0e:d9:15:16:39:ba:a9:60:46:a2:38:4b:
1d:b4:27:37:4b:8d:6b:68:31:f2:a8:c7:be:df:2f:
42:12:ca:8c:f9:f6:1d:ce:0f:02:5c:00:2c:15:3e:
0a:de:a0:d4:57:86:12:8b:3c:49:5e:cf:d4:aa:24:
dd:42:23:a1:eb:bb:77:5a:b4:ad:1e:04:22:3e:74:
99:65:eb:ae:a2:6d:d1:bb:50:e7:47:ec:e3:7f:5b:
4d:fa:9b:3c:06:11:92:79:c7:b8:f0:1d:3e:dd:96:
09:f3:41:c7:8e:c3:86:39:29:3e:ad:6d:79:ed:34:
59:b7:09:16:b6:41:0c:51:1a:af:46:83:e9:b0:95:
38:66:55:1d:00:f6:e4:fa:72:06:73:09:fc:01:45:
23:40:db:03:23:d5:5f:2a:66:d9:8e:56:34:42:dc:
6a:c9:3d:73:3e:9d:f7:7c:c7:8a:fc:26:1b:fa:b1:
b2:a3:aa:36:2b:59:fe:fe:82:b3:15:b3:05:85:51:
57:ce:96:46:7e:26:43:f5:07:68:33:33:a3:9b:b0:
85:a6:d6:ff:44:00:ae:7d:34:60:79:78:ad:71:e2:
f0:e1:77:ca:40:21:ba:1b:da:1b:5f:c7:a1:11:1b:
27:d1:18:d1:89:22:20:3c:39:32:d9:a4:b8:44:89:
27:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5B:78:C2:5F:8D:EF:B3:51:0C:B0:F8:F0:07:C4:C6:E9:06:58:D1
X509v3 Authority Key Identifier:
keyid:AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ec:69:c7:1e:43:47:d0:64:6f:21:97:ee:5d:a2:69:4c:29:
d2:ca:64:85:98:b1:e3:55:bc:f0:64:d9:3e:bd:f5:12:51:1a:
d0:f3:41:29:62:81:af:c5:14:cd:41:dd:c2:34:33:36:1a:00:
1d:06:a3:a3:ad:2d:5a:19:0c:93:53:c0:9f:d2:ab:cf:de:d6:
81:53:f1:fb:21:b4:c2:e9:fd:03:91:5f:c0:da:b9:ca:1e:02:
5b:79:f8:22:f2:55:eb:23:ea:be:8e:54:86:95:d3:4b:6f:92:
92:ac:dc:a7:04:df:6c:2a:b6:ef:d1:9d:d7:e2:b0:fd:54:40:
e5:e1:b5:b8:bc:21:cb:83:89:c3:66:c3:d3:63:a3:47:20:c4:
ce:95:d2:a6:e9:ff:61:dc:60:cd:18:3e:5f:7c:3a:93:2a:61:
5e:8f:2a:74:d9:a0:d1:db:dc:05:e3:1c:8b:a3:b6:3d:57:e8:
76:d3:4d:36:8d:11:48:85:ff:b8:f6:8d:f8:23:7a:08:f7:bf:
99:d4:f2:f0:c0:aa:45:02:77:df:cb:e7:62:71:55:e1:ec:a2:
2e:d2:b2:76:84:36:d5:ff:31:7a:2d:c1:b9:c7:09:2b:30:fc:
b2:35:cc:61:ee:f8:d2:92:96:83:6a:da:6e:14:f9:0a:7f:e4:
dc:66:ae:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:46:55 2026 by rpki-client