Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
File: rxfMznTBr7qDt7qF2XcSsrzEpeg.mft (raw, json)
Hash identifier: ihhe97W/ydEvc5B4NwRFm1+3QQbJj5qf1WUWHrQKq6I=
Subject key identifier: 34:96:C0:9F:71:92:41:1A:9C:A9:76:81:30:7F:21:73:74:EC:89:94
Authority key identifier: AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
Certificate issuer: /CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Certificate serial: 019EC1EE3A3D1BBB067418034B364A82E5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
Manifest number: 0389
Signing time: Sat 13 Jun 2026 17:01:15 +0000
Manifest this update: Sat 13 Jun 2026 17:01:15 +0000
Manifest next update: Sun 14 Jun 2026 17:01:15 +0000
Files and hashes: 1: fWVWhQr_IOS3Ere6cXK65HkUY_E.roa (hash: 6xJw6F8DBsgdoe+Xw5KCeHZGXvkk/TDJRq4n5OCTKlI=)
2: rxfMznTBr7qDt7qF2XcSsrzEpeg.crl (hash: Oo/hw4Mma+XvFMZ3EuDO1FC5TbQ9ke/2FHfTuPe8/1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ee:3a:3d:1b:bb:06:74:18:03:4b:36:4a:82:e5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Validity
Not Before: Jun 13 17:01:15 2026 GMT
Not After : Jun 14 17:01:15 2026 GMT
Subject: CN=3496c09f7192411a9ca97681307f217374ec8994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:df:2b:28:d2:f3:e3:cd:84:2c:a1:1a:a0:08:
9b:2e:3e:c8:37:dd:25:ff:6e:ac:59:0c:68:6b:69:
13:f8:b4:0c:1c:55:9e:91:d3:60:57:98:80:50:04:
fd:3c:04:7d:53:ec:cd:13:f4:83:9b:c7:64:85:8d:
e3:06:6d:6e:ce:7c:3b:ea:b9:e6:fc:81:3c:82:4d:
e6:bc:aa:1a:c9:a4:88:22:ea:2f:7a:86:5e:c1:b8:
59:4b:39:23:9d:55:91:0f:d6:82:47:74:d8:5e:fb:
f3:89:bb:05:5c:77:cd:2e:90:ba:ba:d6:e0:05:4d:
62:27:e4:fb:1c:26:2d:12:00:79:fc:ed:5c:d2:d6:
b6:8d:04:71:72:16:f1:1d:1a:15:0a:f7:30:4a:8d:
6b:c2:e9:17:7e:3f:82:b6:73:9f:d3:8f:89:a3:5e:
ca:6d:3c:01:df:8d:15:c2:f1:82:85:dc:4b:47:fd:
b7:ae:bf:01:16:30:98:d1:d4:a7:8b:34:16:53:ac:
22:56:ff:5d:be:2f:a1:2e:40:f8:eb:77:46:66:41:
2e:59:fc:81:66:5e:50:77:ac:46:59:09:71:d7:af:
cf:0f:f7:47:9d:51:6e:d2:92:8c:0b:71:01:a8:7f:
fe:9f:e8:11:71:d9:d4:71:55:de:2a:c4:c2:bf:bc:
ad:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:96:C0:9F:71:92:41:1A:9C:A9:76:81:30:7F:21:73:74:EC:89:94
X509v3 Authority Key Identifier:
keyid:AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fb:ad:c5:a3:c9:53:45:ba:2a:fa:73:36:89:e5:35:40:12:
a1:db:f1:cc:56:f0:bb:fb:f2:e0:ac:0c:41:0d:fb:8f:fe:04:
fc:1d:25:f7:b0:65:fc:1f:bf:2d:ef:bf:89:66:13:3a:b3:c7:
a6:41:a8:fe:18:d8:66:e9:f9:8d:f5:32:48:4e:99:d7:d7:eb:
88:da:0f:9a:11:3e:69:4d:95:1b:a8:1d:f6:a1:9a:af:bc:ec:
04:33:33:ee:f1:e3:17:e6:83:58:22:73:db:88:50:1d:25:fa:
9b:3a:6b:13:da:b1:49:37:3d:08:94:1c:e5:17:15:16:38:01:
64:21:b8:43:11:f3:2e:44:a2:ba:ba:f1:dd:09:56:fd:db:18:
0e:85:a5:37:7f:ea:b9:58:33:6f:a1:13:78:0e:23:f7:6d:7e:
a6:2a:24:ff:fd:a4:69:42:eb:ac:02:f1:56:11:e7:61:e0:d2:
d3:e3:b1:6e:e4:48:1f:56:82:5c:a6:1e:bc:18:cc:e6:2e:1b:
24:6e:0e:6f:96:15:ad:6a:b5:11:6d:e1:e2:e3:ba:92:7a:97:
e4:7d:8a:71:f9:3d:27:25:7b:01:d5:46:76:14:5c:80:72:61:
b6:37:88:d1:8b:68:96:89:18:99:f2:62:ad:9e:c3:cd:0f:4d:
1a:d1:75:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:45:20 2026 by rpki-client