Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
File: rxfMznTBr7qDt7qF2XcSsrzEpeg.mft (raw, json)
Hash identifier: U2+lauYPXT++vWJpJocD1Au0EXuDC4FnfxXOB7LtlsA=
Subject key identifier: CE:80:11:EF:74:DF:AE:2C:B1:8B:82:69:6D:D0:CE:FF:A7:E2:3F:83
Authority key identifier: AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
Certificate issuer: /CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Certificate serial: 01A0D314DCA2FCB3547A96FA0438D1D1CEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
Manifest number: 049B
Signing time: Thu 24 Sep 2026 11:02:34 +0000
Manifest this update: Thu 24 Sep 2026 11:02:34 +0000
Manifest next update: Fri 25 Sep 2026 11:02:34 +0000
Files and hashes: 1: fWVWhQr_IOS3Ere6cXK65HkUY_E.roa (hash: 6xJw6F8DBsgdoe+Xw5KCeHZGXvkk/TDJRq4n5OCTKlI=)
2: rxfMznTBr7qDt7qF2XcSsrzEpeg.crl (hash: iuLP4ZdyE08ImsOgW80lJ0AIqkwPIZ8gdsnUPqcGof0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:14:dc:a2:fc:b3:54:7a:96:fa:04:38:d1:d1:ce:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Validity
Not Before: Sep 24 11:02:34 2026 GMT
Not After : Sep 25 11:02:34 2026 GMT
Subject: CN=ce8011ef74dfae2cb18b82696dd0ceffa7e23f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:81:18:4e:b1:7e:2a:69:1f:e8:10:f8:f0:
cf:69:9a:fb:2a:5f:b7:8b:bd:cf:03:63:09:6c:e7:
fb:13:5a:07:d2:d8:4f:44:d5:75:68:02:5f:1c:70:
8f:1b:cf:b5:ed:92:c1:3e:7a:3a:b5:d7:28:a1:f0:
ad:67:c5:38:58:d6:52:c6:c1:79:15:84:70:78:e7:
6a:5c:69:55:71:b2:65:f2:ea:b7:e0:f2:43:65:df:
f3:f3:b8:db:e7:07:85:84:21:bc:23:e5:e3:ad:5c:
d9:23:76:76:07:e6:35:48:22:57:8b:1d:52:30:1f:
91:fb:64:3d:ab:75:83:d4:d9:dd:8c:c2:06:db:bf:
60:ec:b1:19:17:ae:f0:15:12:bf:2b:bf:5c:9a:27:
5d:72:af:7d:74:81:ef:ba:9c:a5:2c:9c:6d:90:a2:
91:a8:ef:e6:84:89:0d:5a:ea:53:e7:a2:5f:58:b6:
f6:e0:5c:e4:36:8b:ec:d5:ff:c3:9d:91:fb:b8:8b:
bf:c1:03:5c:86:23:e0:53:5d:4d:d6:4e:aa:78:d0:
d0:2f:21:1a:34:c4:6c:b8:e7:97:3f:cf:a3:57:ae:
52:d9:40:68:c7:8d:79:a7:94:d4:71:8f:00:30:1e:
b0:82:5f:09:1a:5b:ef:ff:53:95:84:22:15:70:cc:
9a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:80:11:EF:74:DF:AE:2C:B1:8B:82:69:6D:D0:CE:FF:A7:E2:3F:83
X509v3 Authority Key Identifier:
keyid:AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6a:35:08:71:a2:e2:fa:f8:7d:10:82:2b:ce:e9:9c:71:0e:
6f:fc:94:ce:c2:16:fa:ad:b8:c3:1b:8e:a1:89:c2:6a:41:45:
60:a8:0b:3a:21:35:ac:51:ed:75:11:b2:83:21:b8:49:8f:ad:
54:1b:18:39:24:33:b8:c8:06:d3:cd:ac:62:4c:8b:09:1f:ad:
9c:1b:a0:8e:36:f3:0f:04:1f:a7:7f:5d:af:0f:05:dd:07:83:
59:d8:37:4a:78:2d:c8:81:9f:40:52:0f:46:ed:cd:e2:af:ac:
51:f3:21:b0:fa:41:6a:89:0e:99:c7:16:0a:5b:69:a7:a9:7f:
32:f2:34:64:c3:25:54:88:28:a5:5e:8d:e6:a4:38:9f:cc:60:
07:a8:95:f5:83:c2:67:16:90:c3:5f:96:44:58:b1:07:6e:23:
e8:59:a3:00:c6:f9:85:ac:34:52:03:7c:12:31:a8:ce:3f:82:
6c:a3:32:70:ef:98:37:e8:31:d5:35:66:49:3e:31:e3:48:44:
4c:99:f4:f9:20:65:19:a9:ce:29:5f:d9:79:fa:af:3c:eb:46:
23:b3:67:29:d2:f0:09:2e:88:79:b4:11:94:21:92:72:bc:f9:
38:0a:a4:78:90:23:d5:87:22:3b:6e:e1:94:f9:f5:49:e0:df:
f7:49:fd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:13:36 2026 by rpki-client