Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
File: rxfMznTBr7qDt7qF2XcSsrzEpeg.mft (raw, json)
Hash identifier: 0jBzm/FfCigR/F0f6QVo1kYkWUwrTOECAxYSKhhU/rQ=
Subject key identifier: F8:B1:A1:87:FA:3E:77:B0:B4:00:56:88:76:62:2F:1E:40:22:DF:EC
Authority key identifier: AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
Certificate issuer: /CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Certificate serial: 019DA41CA6E0C4F31DA5F443FFEFEF7F9C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
Manifest number: 02F5
Signing time: Sun 19 Apr 2026 05:00:34 +0000
Manifest this update: Sun 19 Apr 2026 05:00:34 +0000
Manifest next update: Mon 20 Apr 2026 05:00:34 +0000
Files and hashes: 1: fWVWhQr_IOS3Ere6cXK65HkUY_E.roa (hash: 6xJw6F8DBsgdoe+Xw5KCeHZGXvkk/TDJRq4n5OCTKlI=)
2: rxfMznTBr7qDt7qF2XcSsrzEpeg.crl (hash: QJDyaoxcE9KkfZbYyIwHNXiFbW7gnFkQqtt82cZu6hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:a6:e0:c4:f3:1d:a5:f4:43:ff:ef:ef:7f:9c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Validity
Not Before: Apr 19 05:00:34 2026 GMT
Not After : Apr 20 05:00:34 2026 GMT
Subject: CN=f8b1a187fa3e77b0b400568876622f1e4022dfec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:c8:43:68:f3:c4:e0:4f:df:9a:e0:87:e9:
7d:5e:b0:a0:39:fd:75:7d:ff:73:83:ae:1a:cb:62:
cd:59:a9:53:b5:aa:4d:71:d3:84:cc:40:f9:60:41:
6d:6c:eb:62:0d:bd:75:f9:11:6a:89:fe:0e:7d:b7:
72:ba:af:99:9e:7e:9a:69:ab:72:ec:47:e8:6b:80:
64:2a:53:f0:84:1a:87:fc:8a:f4:81:6f:25:0b:92:
04:04:82:33:9a:fd:e6:cf:c4:4a:35:75:41:09:20:
d2:91:77:47:e2:1f:4e:19:d4:c7:fa:3a:88:e2:b5:
86:da:49:14:90:23:62:14:8d:45:55:15:07:86:6b:
d0:6e:1c:bf:14:27:f9:9d:5e:c6:11:e7:41:90:a6:
09:cb:1c:da:83:04:1a:6f:fb:19:87:d9:7b:b7:8b:
68:e7:a8:55:d5:31:59:16:c3:68:f5:26:34:43:9e:
dd:04:7c:06:04:1e:2c:29:6c:c6:c9:e1:06:db:16:
ee:71:fc:76:93:96:3f:86:6d:ee:12:55:a5:ed:8b:
79:c0:f0:2a:70:7a:e6:3e:9f:42:da:7e:31:a2:37:
94:47:9d:7f:54:22:b6:c4:6c:83:89:f6:24:1c:b8:
e7:0d:07:b2:e9:de:24:9c:4a:b5:5d:c8:49:53:4a:
48:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B1:A1:87:FA:3E:77:B0:B4:00:56:88:76:62:2F:1E:40:22:DF:EC
X509v3 Authority Key Identifier:
keyid:AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:34:dc:f2:80:4c:4d:61:50:95:c4:5d:e4:19:49:d4:c4:98:
03:bf:ba:be:2a:df:ed:3d:92:05:47:6c:81:dd:49:a5:95:87:
a0:40:76:67:c5:fb:d4:74:e5:f3:50:45:15:ba:b5:66:8f:2d:
38:cc:d6:9f:b8:17:b0:fd:87:34:17:34:dc:75:1b:a7:87:9d:
8b:23:e3:f5:45:8a:23:35:2e:37:a1:fb:28:d2:b0:c5:b3:43:
f4:e9:21:17:48:4c:a2:e5:14:2e:fa:63:71:72:d8:db:87:95:
1b:40:aa:68:46:97:57:30:d2:6d:28:38:d8:7d:60:90:15:63:
27:80:87:d2:59:20:3c:dd:05:7f:d4:c5:67:b0:c7:33:02:46:
46:f7:b7:9f:77:d1:97:21:c1:54:78:f6:5f:c4:5b:5c:8e:5d:
9b:0b:71:54:0e:65:c2:ef:0a:81:de:9f:87:37:85:1e:e5:24:
5c:ba:18:ba:b1:bc:a0:15:de:b5:05:23:71:1e:0a:e9:46:68:
89:4b:62:36:b6:9d:df:28:82:1c:17:6b:83:6f:7d:28:a8:f4:
08:2b:9f:c5:e3:60:cc:31:66:ac:75:28:ec:21:64:cb:b6:e1:
c5:c2:68:b5:22:9d:fd:33:e3:6e:22:3c:42:10:55:78:33:97:
ea:06:4c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:30:58 2026 by rpki-client