Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
File: RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json)
Hash identifier: 46dQOJNWBAc67NYJCMiyMWwBSngQFEaEe3dwJci2Jkk=
Subject key identifier: B2:7B:82:4D:F7:6A:09:94:8C:20:88:2A:DE:77:EB:40:91:B1:9D:B9
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial: 01A133DA00C3AD18A8E8BDE0540959B3BC73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
Manifest number: 1AA0
Signing time: Tue 13 Oct 2026 06:01:27 +0000
Manifest this update: Tue 13 Oct 2026 06:01:27 +0000
Manifest next update: Wed 14 Oct 2026 06:01:27 +0000
Files and hashes: 1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: 6nYRBG+Vz4c2TnlYBbAgB0zjz0LCTa9r6YuziFuB1yA=)
2: SQFAkjt57y-pTXhYLYstw04Yit8.roa (hash: hgGTZStyS8714Gh8ubpZL/WCwm7djUM9MS9CR1krlpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:da:00:c3:ad:18:a8:e8:bd:e0:54:09:59:b3:bc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47119a205683167925b9f04174312637b1600c07
Validity
Not Before: Oct 13 06:01:27 2026 GMT
Not After : Oct 14 06:01:27 2026 GMT
Subject: CN=b27b824df76a09948c20882ade77eb4091b19db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:2a:d6:22:ea:61:3b:d1:cc:3d:e4:3c:78:
d8:e6:e9:5b:b4:eb:59:f2:2d:e8:65:91:3a:97:9c:
45:6c:3b:e6:9b:cd:c9:2d:1d:17:32:8d:8c:71:7e:
71:3d:da:3f:82:d7:5e:76:f5:59:3a:fc:2e:7d:9e:
ba:cb:20:15:82:8a:c2:08:80:f2:a4:0f:63:f1:01:
14:8f:e6:0c:56:ef:29:75:f4:a2:04:2f:4d:a1:1c:
f2:0f:6e:01:ce:c2:19:87:1d:2f:db:c8:0f:d4:19:
47:67:f2:e8:2d:9a:49:28:fd:c6:57:0c:07:53:5a:
7c:1f:49:d1:7e:42:b8:18:eb:fa:6c:55:b4:5c:9c:
28:e4:c7:61:0c:d5:85:03:69:7b:17:f4:39:59:c5:
09:cd:f5:0e:22:99:3a:55:2c:5b:62:98:4b:a7:d1:
dc:89:1e:79:27:fc:e2:1a:c6:a9:d6:82:3c:70:f0:
8b:66:9c:07:1f:89:0b:76:28:c4:d2:3f:2b:f4:c0:
93:1c:1c:5c:bb:e7:d4:17:4a:d9:ce:26:29:0e:7a:
f4:5e:e6:8b:db:ca:b6:06:02:21:e3:84:bb:d6:3b:
7e:af:86:a5:32:7a:08:48:b0:0b:4c:61:2c:b9:95:
31:72:27:cf:cd:c3:48:e0:04:e6:69:2c:91:75:cd:
40:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7B:82:4D:F7:6A:09:94:8C:20:88:2A:DE:77:EB:40:91:B1:9D:B9
X509v3 Authority Key Identifier:
keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:84:86:c1:38:f0:f3:e4:c3:6c:a4:64:41:6c:ac:36:7b:05:
4b:fb:01:70:70:a9:33:5f:c9:e5:c7:9b:f1:1b:d2:0d:c1:0a:
77:d7:bd:dc:c8:a8:8e:65:6e:ba:0c:03:c0:69:c5:8d:a3:19:
32:70:21:19:47:da:aa:ab:67:e9:c9:df:bc:a4:df:51:d0:ec:
55:d8:37:b5:07:a9:2b:a0:89:5d:17:ac:82:23:a0:e6:87:af:
88:ff:04:aa:31:81:67:3b:09:6b:20:30:d9:58:32:b0:d8:9d:
24:1b:ab:3b:35:76:a5:c8:25:ff:93:c6:ee:44:96:a7:83:ef:
46:13:6a:75:43:19:af:3f:1e:a5:12:ea:34:1c:6b:89:42:23:
8e:c9:4f:48:47:73:22:33:cd:55:af:a6:a1:ca:64:1e:b8:8e:
ea:53:2e:e0:28:18:e4:fa:d3:a1:c0:f2:12:de:17:0a:02:c0:
26:8d:8f:0e:ec:0a:87:03:4a:52:50:3c:59:0f:66:94:39:cd:
42:72:11:ad:36:4c:a4:e5:d1:fd:e2:3e:12:89:6c:33:5b:3e:
ba:ef:6c:b3:f2:e6:6f:b4:82:c8:d5:50:42:b3:3d:82:4f:7f:
a8:09:b9:c0:09:da:59:ab:4d:84:89:d6:a8:15:2d:4b:89:af:
fe:53:f6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:11:31 2026 by rpki-client