Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
File: RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json)
Hash identifier: I/QzfXSPy+TtJRn6561YLKHs1hyUpy9U2A9+Eg+tv08=
Subject key identifier: 8D:B9:1F:A9:E1:96:84:62:BA:1F:2B:11:10:1E:9F:21:1B:13:5D:AE
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial: 019D98BDF113C8A3EEE8F603A1DA8A44003B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 00:01:17 +0000
Manifest this update: Fri 17 Apr 2026 00:01:17 +0000
Manifest next update: Sat 18 Apr 2026 00:01:17 +0000
Files and hashes: 1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: vxTH10qrL+v9hAwU4viSg20cC3hjXXXDU9cDupqsNRE=)
2: SQFAkjt57y-pTXhYLYstw04Yit8.roa (hash: hgGTZStyS8714Gh8ubpZL/WCwm7djUM9MS9CR1krlpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:f1:13:c8:a3:ee:e8:f6:03:a1:da:8a:44:00:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47119a205683167925b9f04174312637b1600c07
Validity
Not Before: Apr 17 00:01:17 2026 GMT
Not After : Apr 18 00:01:17 2026 GMT
Subject: CN=8db91fa9e1968462ba1f2b11101e9f211b135dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f9:01:fb:07:59:67:94:fa:65:b2:4c:2c:0e:
47:99:d4:47:ff:1d:9b:2b:e0:83:a5:fa:b1:8f:4b:
f0:ea:bc:93:cb:2a:6e:81:c9:df:5c:0f:74:19:f8:
6e:a4:ec:59:7b:b3:44:71:03:ec:8e:51:f6:0f:f0:
e7:ca:d5:d6:82:3b:b6:bd:79:a4:a7:7c:95:47:cf:
89:b1:f6:8d:78:fc:e7:98:31:da:a8:58:a8:c7:29:
bb:ed:1d:f8:a7:ba:eb:80:5e:4f:fe:f4:6d:af:64:
11:11:e6:2e:b5:90:7f:d4:21:89:5e:79:f0:78:b4:
41:a6:9d:0c:01:bf:11:a7:92:1d:8d:9e:dc:08:fa:
ed:e5:1a:66:0d:1c:b7:4b:b3:d7:f3:a0:5a:1c:78:
46:5b:9f:5c:a2:60:42:84:5b:00:8e:bb:66:5a:69:
51:47:06:75:a7:91:65:e1:89:4a:02:a4:59:ae:fb:
08:54:fa:0c:3f:de:c1:aa:15:23:d9:5b:5b:66:aa:
82:23:0e:08:81:66:da:fa:17:b9:22:df:59:65:b8:
97:5d:07:e2:71:fb:f7:f0:1e:0b:12:60:bc:33:85:
0d:22:9f:9f:3f:fb:49:c3:3a:83:6a:0a:52:eb:3e:
ae:9e:9d:f5:e6:64:f8:0a:d2:7d:6e:4a:bf:3b:a2:
80:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B9:1F:A9:E1:96:84:62:BA:1F:2B:11:10:1E:9F:21:1B:13:5D:AE
X509v3 Authority Key Identifier:
keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3c:be:5b:5f:9e:4d:4f:d6:06:8a:94:0d:82:06:95:a8:90:
c9:28:56:42:5e:4a:86:ac:68:d6:83:8c:0a:c5:14:9c:ba:c5:
a3:c9:3c:18:0e:84:9f:03:dc:f5:30:df:a7:98:cc:0a:23:bf:
65:cf:c7:34:48:0b:d0:06:ac:d6:4a:d8:d0:c8:95:19:d3:35:
51:cf:96:1c:63:57:ee:58:59:5e:89:03:d7:86:b8:05:6b:71:
40:3e:53:c1:2f:6f:d8:04:d1:f8:73:48:26:1e:ec:b6:40:0c:
5c:d0:e7:8f:61:f3:22:cd:4c:cb:23:13:b5:45:63:44:30:77:
e4:c2:2d:b5:3d:a0:c1:d8:f0:ef:02:14:38:9e:22:9d:55:aa:
aa:10:a3:64:cc:f4:09:6a:cf:d0:49:9d:51:dc:90:e6:fb:d2:
61:64:76:08:39:29:8e:be:c0:80:37:c0:52:c8:96:58:4c:fa:
b5:f6:21:b7:aa:ba:ef:24:fa:a2:ad:ff:4a:5a:2a:48:8c:d5:
49:8d:0b:e6:b8:4c:e0:76:d2:4c:75:69:12:3c:bd:83:f0:59:
c4:66:2d:ac:00:b1:0f:c6:f4:5d:e5:cd:b9:e7:06:24:79:fe:
96:02:3a:8b:71:f4:d3:46:40:83:10:71:f5:f5:7f:7b:f7:91:
2a:0e:ac:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:52 2026 by rpki-client