Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
File: RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json)
Hash identifier: tXwVSullcaC+AI8U1beEtdFpg5c8uuKV5NGumWc7Lp4=
Subject key identifier: 21:5E:66:9B:2F:E3:37:FD:84:14:9C:74:65:42:2C:EB:00:D5:1A:04
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial: 019CAB34984BAC8BEC37D138ECEE9B532861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:01:16 +0000
Manifest this update: Sun 01 Mar 2026 21:01:16 +0000
Manifest next update: Mon 02 Mar 2026 21:01:16 +0000
Files and hashes: 1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: 6hZacb+IAAAuBAG/XWkQ9A27HGpvAun7yn09LYKs6Fc=)
2: SQFAkjt57y-pTXhYLYstw04Yit8.roa (hash: hgGTZStyS8714Gh8ubpZL/WCwm7djUM9MS9CR1krlpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:98:4b:ac:8b:ec:37:d1:38:ec:ee:9b:53:28:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47119a205683167925b9f04174312637b1600c07
Validity
Not Before: Mar 1 21:01:16 2026 GMT
Not After : Mar 2 21:01:16 2026 GMT
Subject: CN=215e669b2fe337fd84149c7465422ceb00d51a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:df:d6:56:cb:f6:30:cc:56:a6:07:da:2f:e0:
75:1d:49:6d:80:26:cc:89:4f:04:19:06:39:a9:ef:
81:0a:84:36:e3:26:8f:2a:a8:fb:b9:66:b6:4b:c6:
e5:14:42:8d:a7:74:f2:25:d7:37:80:11:64:4c:a8:
8e:8b:65:3e:20:d3:a8:95:be:71:1c:83:9a:61:51:
7e:74:bf:ee:5e:da:ff:a6:a7:87:86:12:d9:8c:28:
3b:47:3a:77:39:72:29:ad:fc:e1:64:0a:d4:04:85:
34:66:40:ac:09:f2:5f:8d:f9:3f:e6:fa:51:24:29:
37:58:17:77:4e:b6:e0:7a:c3:fb:fa:29:74:90:04:
af:78:4c:fc:59:eb:e0:db:db:25:6a:a6:23:2c:9d:
cf:b7:9a:c0:95:19:62:b2:75:cb:62:4c:2a:9c:3c:
43:07:fc:1f:57:bf:30:ea:99:7a:b2:47:b6:94:a6:
d7:81:c5:42:cb:7a:63:a5:01:9b:23:bf:0a:3a:99:
af:a7:4d:c2:6c:67:ea:12:90:62:f6:71:03:91:b8:
d4:46:0a:42:e0:47:0b:84:b0:89:8a:8c:9e:49:0d:
85:30:de:6b:77:9e:68:36:13:98:f3:2d:c5:59:fa:
7f:8f:5c:6a:cb:47:62:23:5d:dc:8b:b2:38:9a:c5:
44:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5E:66:9B:2F:E3:37:FD:84:14:9C:74:65:42:2C:EB:00:D5:1A:04
X509v3 Authority Key Identifier:
keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:83:fe:3c:0d:f9:0d:25:df:26:fe:fc:5b:ed:a6:4d:58:d5:
b7:01:fc:88:4a:d8:70:67:e3:21:e9:72:18:6d:6f:16:36:3b:
57:a1:4e:ec:6e:d8:e8:92:b5:3d:15:5f:e6:a8:f8:88:d9:f3:
0f:a7:dd:23:1e:a4:b7:ac:b0:d1:26:e5:54:55:a5:44:4e:49:
7c:3a:1e:3f:76:97:8c:ed:60:44:da:0e:8d:d9:46:88:f2:4d:
fc:21:a6:b0:5b:b8:85:24:e9:a5:d3:21:ee:e3:9d:49:d6:af:
7f:d1:e4:9b:2c:e1:71:06:21:87:a9:d9:f4:2a:61:4d:f1:59:
9b:45:73:d4:d8:bf:f3:43:b4:f8:79:d5:3e:ef:cd:65:54:90:
f5:43:fb:36:6f:d9:ef:a0:4c:2b:37:05:e9:a0:14:31:65:78:
71:27:51:c0:b7:3a:62:04:a5:bc:ce:30:f8:ac:04:ca:a1:4a:
bd:ce:e7:16:c8:38:7e:e7:06:10:58:fc:81:45:cc:af:3c:ec:
6a:a2:f6:40:db:4a:dd:97:68:3b:45:26:52:30:cb:a5:9d:0e:
84:dd:cc:34:12:a6:98:71:01:c9:11:5f:1e:5f:ae:a4:f0:58:
70:0b:e8:e7:6f:3f:e1:10:11:d3:57:bf:7c:96:1a:f6:ff:8a:
20:42:10:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNJhLrIvsN9E47O6bUyhhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MTE5YTIwNTY4MzE2NzkyNWI5ZjA0MTc0MzEyNjM3YjE2
MDBjMDcwHhcNMjYwMzAxMjEwMTE2WhcNMjYwMzAyMjEwMTE2WjAzMTEwLwYDVQQD
EygyMTVlNjY5YjJmZTMzN2ZkODQxNDljNzQ2NTQyMmNlYjAwZDUxYTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut/WVsv2MMxWpgfaL+B1HUltgCbM
iU8EGQY5qe+BCoQ24yaPKqj7uWa2S8blFEKNp3TyJdc3gBFkTKiOi2U+INOolb5x
HIOaYVF+dL/uXtr/pqeHhhLZjCg7Rzp3OXIprfzhZArUBIU0ZkCsCfJfjfk/5vpR
JCk3WBd3TrbgesP7+il0kASveEz8Wevg29slaqYjLJ3Pt5rAlRlisnXLYkwqnDxD
B/wfV78w6pl6ske2lKbXgcVCy3pjpQGbI78KOpmvp03CbGfqEpBi9nEDkbjURgpC
4EcLhLCJioyeSQ2FMN5rd55oNhOY8y3FWfp/j1xqy0diI13ci7I4msVERwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFeZpsv4zf9hBScdGVCLOsA1RoEMB8GA1UdIwQY
MBaAFEcRmiBWgxZ5JbnwQXQxJjexYAwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnhHYUlGYURGbmtsdWZCQmRERW1ON0ZnREFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hYjM2YTAtMDRlYy00MTkwLWI1OWQt
MmEwZTQ1ODYyYzAzLzEvUnhHYUlGYURGbmtsdWZCQmRERW1ON0ZnREFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hYjM2YTAtMDRlYy00MTkwLWI1OWQtMmEwZTQ1ODYyYzAz
LzEvUnhHYUlGYURGbmtsdWZCQmRERW1ON0ZnREFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIP+PA35
DSXfJv78W+2mTVjVtwH8iErYcGfjIelyGG1vFjY7V6FO7G7Y6JK1PRVf5qj4iNnz
D6fdIx6kt6yw0SblVFWlRE5JfDoeP3aXjO1gRNoOjdlGiPJN/CGmsFu4hSTppdMh
7uOdSdavf9HkmyzhcQYhh6nZ9CphTfFZm0Vz1Ni/80O0+HnVPu/NZVSQ9UP7Nm/Z
76BMKzcF6aAUMWV4cSdRwLc6YgSlvM4w+KwEyqFKvc7nFsg4fucGEFj8gUXMrzzs
aqL2QNtK3ZdoO0UmUjDLpZ0OhN3MNBKmmHEByRFfHl+upPBYcAvo528/4RAR01e/
fJYa9v+KIEIQEg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:04 2026 by rpki-client