Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
File: R4x_xrIR4nH3SD9yHUXyON195cQ.mft (raw, json)
Hash identifier: uTriR8lkooAkNJiUEdH9ALCF7sN/lLzm3n569oGLYok=
Subject key identifier: 01:B8:45:78:B1:0A:43:EF:2F:1F:8E:21:36:2E:8C:A5:39:16:F3:88
Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Certificate serial: 019CABA1D0BE89B4FDB50C7620611173C23C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
Manifest number: 09F3
Signing time: Sun 01 Mar 2026 23:00:34 +0000
Manifest this update: Sun 01 Mar 2026 23:00:34 +0000
Manifest next update: Mon 02 Mar 2026 23:00:34 +0000
Files and hashes: 1: OBJUqWKdq6kiQbp0gg2le_lxwc8.roa (hash: Q6TNVRFJT35RFtqmG8IVN0WlQLvaNhPi6XH41fNOOas=)
2: R4x_xrIR4nH3SD9yHUXyON195cQ.crl (hash: 3UsTBYaI+ryLQin1awS4Y3xjFybV5Htd7aCQxBOsgO4=)
3: pDXgmFSEjeXu5kTO9JnxKOTny04.roa (hash: zBFnWy98uBKGBRB8AClKYux+jyTzJfSF7W9SKPlT+0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d0:be:89:b4:fd:b5:0c:76:20:61:11:73:c2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Validity
Not Before: Mar 1 23:00:34 2026 GMT
Not After : Mar 2 23:00:34 2026 GMT
Subject: CN=01b84578b10a43ef2f1f8e21362e8ca53916f388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3b:24:2d:11:8d:72:48:d1:de:8d:4a:9f:90:
f7:21:67:0f:48:51:d8:92:b4:a8:fc:e2:cf:50:e9:
b1:8e:e1:f2:fd:fe:3a:20:e4:ca:38:bc:cc:18:91:
23:bd:9d:da:02:d8:29:80:08:3d:dc:db:55:7b:c2:
22:06:58:5a:b6:ad:68:83:bd:8c:90:cf:e9:6b:50:
d8:34:a1:0a:d0:85:c8:a9:fb:b4:bb:a6:59:2e:4d:
84:a3:b4:04:f9:6a:12:4e:df:29:7b:24:65:16:b6:
a6:d9:e4:80:15:3b:76:52:3e:66:ad:fb:9f:b6:7e:
48:c1:ae:94:2a:de:86:bf:d6:18:c8:c9:14:33:23:
6a:aa:98:2b:8d:18:25:74:0a:77:48:00:11:7a:bb:
88:4d:f5:cb:44:10:35:13:7e:74:16:7b:b1:84:2a:
8d:5d:f7:4c:c7:34:4d:aa:e4:15:1d:c3:c7:10:fc:
87:92:65:ee:bf:cf:36:44:66:e6:96:8f:b0:27:1a:
1f:2a:36:1d:a5:7c:5e:bc:34:9f:31:c3:26:9a:dc:
51:8a:1e:c3:b9:3e:8d:1c:25:fe:f7:6a:2d:a2:4e:
08:e1:9a:d3:3d:c4:5b:b8:f4:6b:2b:09:fb:4b:24:
0e:fe:41:3a:7f:29:5a:65:6b:02:26:cc:f6:f7:21:
7b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B8:45:78:B1:0A:43:EF:2F:1F:8E:21:36:2E:8C:A5:39:16:F3:88
X509v3 Authority Key Identifier:
keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:07:8c:60:14:f2:c6:6f:51:97:34:47:78:d2:4b:70:4b:2e:
45:9e:9f:74:66:c7:55:ba:e2:91:6b:2c:9b:0a:00:d5:c8:59:
9e:92:2e:e1:04:73:c8:42:d3:ed:18:d8:9e:63:f8:4a:87:ea:
66:a5:db:99:43:77:80:0d:54:cc:cf:ca:69:6d:98:8d:86:1e:
4a:01:1e:20:f4:c4:58:44:2c:c3:54:bb:3f:79:18:af:96:65:
73:e9:59:ff:06:7b:e9:58:59:00:14:26:1c:aa:90:db:b2:11:
48:7e:1e:94:82:3d:6f:81:ea:2e:4f:c1:45:04:bd:8c:f1:17:
72:dd:ec:8d:92:92:79:b6:b4:dd:4b:77:9e:a1:86:76:e9:97:
61:42:4c:55:81:5b:c2:e3:64:ea:ab:e7:a5:d6:d8:8b:64:9c:
39:2d:16:ff:a6:10:b3:0f:2d:57:c3:ce:ae:0d:b6:0b:84:7d:
d1:fd:4a:54:82:b0:63:30:46:fe:61:6b:06:5f:cd:96:58:fd:
40:49:80:01:1a:3a:b9:82:48:18:73:57:6f:ac:40:82:23:2c:
7e:c5:b6:c4:ec:4a:36:af:71:96:35:14:46:18:a9:8c:f8:5e:
97:39:be:51:ed:60:b9:8e:8a:ef:d4:e6:cb:d0:03:22:a0:37:
9f:b2:1d:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrodC+ibT9tQx2IGERc8I8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3OGM3ZmM2YjIxMWUyNzFmNzQ4M2Y3MjFkNDVmMjM4ZGQ3
ZGU1YzQwHhcNMjYwMzAxMjMwMDM0WhcNMjYwMzAyMjMwMDM0WjAzMTEwLwYDVQQD
EygwMWI4NDU3OGIxMGE0M2VmMmYxZjhlMjEzNjJlOGNhNTM5MTZmMzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjskLRGNckjR3o1Kn5D3IWcPSFHY
krSo/OLPUOmxjuHy/f46IOTKOLzMGJEjvZ3aAtgpgAg93NtVe8IiBlhatq1og72M
kM/pa1DYNKEK0IXIqfu0u6ZZLk2Eo7QE+WoSTt8peyRlFram2eSAFTt2Uj5mrfuf
tn5Iwa6UKt6Gv9YYyMkUMyNqqpgrjRgldAp3SAAReruITfXLRBA1E350FnuxhCqN
XfdMxzRNquQVHcPHEPyHkmXuv882RGbmlo+wJxofKjYdpXxevDSfMcMmmtxRih7D
uT6NHCX+92otok4I4ZrTPcRbuPRrKwn7SyQO/kE6fylaZWsCJsz29yF7hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAG4RXixCkPvLx+OITYujKU5FvOIMB8GA1UdIwQY
MBaAFEeMf8ayEeJx90g/ch1F8jjdfeXEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZTJjYmYtNzA1Ni00NDE5LWI1MWMt
NjJiMWRhMjYxMzI5LzEvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS82ZTJjYmYtNzA1Ni00NDE5LWI1MWMtNjJiMWRhMjYxMzI5
LzEvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQeMYBTy
xm9RlzRHeNJLcEsuRZ6fdGbHVbrikWssmwoA1chZnpIu4QRzyELT7RjYnmP4Sofq
ZqXbmUN3gA1UzM/KaW2YjYYeSgEeIPTEWEQsw1S7P3kYr5Zlc+lZ/wZ76VhZABQm
HKqQ27IRSH4elII9b4HqLk/BRQS9jPEXct3sjZKSeba03Ut3nqGGdumXYUJMVYFb
wuNk6qvnpdbYi2ScOS0W/6YQsw8tV8POrg22C4R90f1KVIKwYzBG/mFrBl/Nllj9
QEmAARo6uYJIGHNXb6xAgiMsfsW2xOxKNq9xljUURhipjPhelzm+Ue1guY6K79Tm
y9ADIqA3n7IdWA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:37:59 2026 by rpki-client