Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
File: rxfMznTBr7qDt7qF2XcSsrzEpeg.mft (raw, json)
Hash identifier: 5gMngUsTJyy2+dlYt0rkdwLv7/uDqq6/EgpfETZ5cxU=
Subject key identifier: E7:6B:8F:76:91:51:72:D0:AD:9B:8B:C8:49:07:81:5F:41:99:8C:33
Authority key identifier: AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
Certificate issuer: /CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Certificate serial: 019FAD89136951D26DFE44725B36E5CEC91D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
Manifest number: 0403
Signing time: Wed 29 Jul 2026 11:01:09 +0000
Manifest this update: Wed 29 Jul 2026 11:01:09 +0000
Manifest next update: Thu 30 Jul 2026 11:01:09 +0000
Files and hashes: 1: fWVWhQr_IOS3Ere6cXK65HkUY_E.roa (hash: 6xJw6F8DBsgdoe+Xw5KCeHZGXvkk/TDJRq4n5OCTKlI=)
2: rxfMznTBr7qDt7qF2XcSsrzEpeg.crl (hash: 1nLM8+CUzKMnobDNWQdk9pMvXr6RkyRXLn7VUdIXt9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:89:13:69:51:d2:6d:fe:44:72:5b:36:e5:ce:c9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Validity
Not Before: Jul 29 11:01:09 2026 GMT
Not After : Jul 30 11:01:09 2026 GMT
Subject: CN=e76b8f76915172d0ad9b8bc84907815f41998c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c8:9b:80:21:be:8d:61:fd:e9:b5:1a:5d:38:
f0:5a:01:7f:7a:64:82:f5:a6:0f:6d:6b:00:14:e2:
e0:fd:a5:7a:a9:ab:70:7b:3b:a8:59:52:03:cb:96:
78:1d:ca:13:e5:79:bd:8d:46:b8:e2:de:4a:5a:2a:
7a:c3:e1:92:c1:02:80:9a:0e:66:e6:18:ad:78:8d:
61:81:d7:e3:1e:69:da:e4:9f:3c:13:c4:43:01:3d:
98:ff:51:b4:55:b6:ac:d0:25:58:0c:fe:44:29:23:
60:42:09:97:81:86:c4:89:7c:a0:c4:15:fb:2b:89:
c6:88:19:ea:a9:e1:27:2e:60:ee:44:20:d7:37:99:
09:ec:66:e3:bb:af:c4:d7:f9:b7:4e:86:fb:d8:50:
88:80:92:68:97:a9:ec:38:7b:88:3a:34:0b:8e:7d:
88:9d:2a:11:6f:cd:fd:29:59:67:d7:96:17:78:3e:
68:33:8f:11:ba:82:36:6e:de:f8:38:82:08:d9:01:
69:66:30:59:fd:82:5a:dc:84:f6:bc:36:dc:e2:93:
ac:07:b1:16:c6:52:85:9f:16:02:84:fc:7c:4a:f4:
a8:66:17:c0:14:7e:c4:bc:71:96:94:c9:d4:b0:5a:
65:8b:57:07:56:cc:a1:d9:c5:bf:01:0b:9b:60:6a:
f1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6B:8F:76:91:51:72:D0:AD:9B:8B:C8:49:07:81:5F:41:99:8C:33
X509v3 Authority Key Identifier:
keyid:AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:34:40:5d:98:4f:89:14:78:7f:f5:00:8a:70:5f:f0:ee:af:
9f:6d:69:de:81:bb:ab:3d:e7:50:ea:10:78:89:1b:ca:62:d9:
b3:c5:a3:b6:35:bc:05:5b:a4:26:01:6e:19:27:8d:41:8a:73:
40:43:64:cb:92:2e:f5:ef:79:4d:5a:52:bf:a4:f0:ec:8b:59:
3a:bb:37:3f:ba:84:59:32:42:3f:8c:00:34:6f:35:dc:64:54:
e1:ff:10:55:83:18:ca:fa:84:1b:fe:0f:dc:ef:a1:5c:20:af:
e4:43:12:9f:9c:3d:59:dc:b9:8b:58:db:fb:86:05:09:a2:8b:
e1:59:9a:0e:c1:04:99:83:e4:0a:d6:25:7d:cd:08:43:84:af:
31:29:18:cd:6b:b7:92:0d:1e:2b:f3:ff:fe:81:1a:e4:9c:63:
a7:22:0c:a3:6a:04:9f:0e:ae:e0:b8:c3:be:3f:d1:d6:c2:b5:
6a:4d:f2:c9:87:f8:c6:45:e4:1b:4a:8a:d5:f0:3d:77:62:e4:
7a:44:13:8b:e5:89:c4:cb:c7:57:85:5b:2d:71:fe:35:33:b5:
d1:1b:d5:64:98:db:63:c5:26:fb:53:b5:f8:9b:7d:39:f1:81:
a1:c2:3b:88:5a:fa:a4:e1:a7:2e:6d:4e:50:4e:05:ff:ba:76:
d1:cd:70:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tiRNpUdJt/kRyWzblzskdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMTdjY2NlNzRjMWFmYmE4M2I3YmE4NWQ5NzcxMmIyYmNj
NGE1ZTgwHhcNMjYwNzI5MTEwMTA5WhcNMjYwNzMwMTEwMTA5WjAzMTEwLwYDVQQD
EyhlNzZiOGY3NjkxNTE3MmQwYWQ5YjhiYzg0OTA3ODE1ZjQxOTk4YzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sibgCG+jWH96bUaXTjwWgF/emSC
9aYPbWsAFOLg/aV6qatwezuoWVIDy5Z4HcoT5Xm9jUa44t5KWip6w+GSwQKAmg5m
5hiteI1hgdfjHmna5J88E8RDAT2Y/1G0Vbas0CVYDP5EKSNgQgmXgYbEiXygxBX7
K4nGiBnqqeEnLmDuRCDXN5kJ7Gbju6/E1/m3Tob72FCIgJJol6nsOHuIOjQLjn2I
nSoRb839KVln15YXeD5oM48RuoI2bt74OIII2QFpZjBZ/YJa3IT2vDbc4pOsB7EW
xlKFnxYChPx8SvSoZhfAFH7EvHGWlMnUsFpli1cHVsyh2cW/AQubYGrxvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdrj3aRUXLQrZuLyEkHgV9BmYwzMB8GA1UdIwQY
MBaAFK8XzM50wa+6g7e6hdl3ErK8xKXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnhmTXpuVEJyN3FEdDdxRjJYY1NzcnpFcGVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iNzNjYWMtMzYxMC00MjI0LWJkYmEt
YTU3NTdhYWFmZmZhLzEvcnhmTXpuVEJyN3FEdDdxRjJYY1NzcnpFcGVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9iNzNjYWMtMzYxMC00MjI0LWJkYmEtYTU3NTdhYWFmZmZh
LzEvcnhmTXpuVEJyN3FEdDdxRjJYY1NzcnpFcGVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvTRAXZhP
iRR4f/UAinBf8O6vn21p3oG7qz3nUOoQeIkbymLZs8WjtjW8BVukJgFuGSeNQYpz
QENky5Iu9e95TVpSv6Tw7ItZOrs3P7qEWTJCP4wANG813GRU4f8QVYMYyvqEG/4P
3O+hXCCv5EMSn5w9Wdy5i1jb+4YFCaKL4VmaDsEEmYPkCtYlfc0IQ4SvMSkYzWu3
kg0eK/P//oEa5JxjpyIMo2oEnw6u4LjDvj/R1sK1ak3yyYf4xkXkG0qK1fA9d2Lk
ekQTi+WJxMvHV4VbLXH+NTO10RvVZJjbY8Um+1O1+Jt9OfGBocI7iFr6pOGnLm1O
UE4F/7p20c1w9g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 16:31:25 2026 by rpki-client