Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
File: RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json)
Hash identifier: vhepEF/GzA4TNWvmi03ZXy8BtuVI8KBvRss7Jdorcdw=
Subject key identifier: 08:6C:19:CD:BA:3E:5D:E5:EC:96:E2:7C:E2:11:59:F2:20:9C:74:E4
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial: 01A135C81CFD04690F1DD271BFBB2F08A81C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
Manifest number: 1AA1
Signing time: Tue 13 Oct 2026 15:01:09 +0000
Manifest this update: Tue 13 Oct 2026 15:01:09 +0000
Manifest next update: Wed 14 Oct 2026 15:01:09 +0000
Files and hashes: 1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: lUM3uXXSINxsZbonjFRzbCUfg+BLqZ+4g1O/7Fx+Mnw=)
2: SQFAkjt57y-pTXhYLYstw04Yit8.roa (hash: hgGTZStyS8714Gh8ubpZL/WCwm7djUM9MS9CR1krlpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:c8:1c:fd:04:69:0f:1d:d2:71:bf:bb:2f:08:a8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47119a205683167925b9f04174312637b1600c07
Validity
Not Before: Oct 13 15:01:09 2026 GMT
Not After : Oct 14 15:01:09 2026 GMT
Subject: CN=086c19cdba3e5de5ec96e27ce21159f2209c74e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:f6:d7:72:f8:79:3d:1a:52:bd:ab:74:7c:
24:2b:f4:55:38:cf:aa:ce:99:00:2e:8f:22:1b:8c:
60:e6:e1:ee:2a:e8:4b:0c:f9:8a:1e:b7:c0:c7:db:
c9:9a:eb:54:f3:ce:c7:05:a2:50:fa:1e:c2:ff:22:
a3:01:02:81:03:bd:6f:87:0d:49:9d:e0:37:b2:f0:
5d:29:9c:d9:24:d9:a2:6f:1f:bb:ad:ba:2b:00:e8:
93:e6:87:40:b0:7b:29:5e:49:96:4d:4c:5d:ed:db:
4c:d4:06:2a:80:39:b4:06:9d:0a:59:f9:0b:b1:9b:
e4:74:38:ca:a6:ba:18:2c:1d:ce:0a:57:6c:8b:42:
9d:83:8a:38:2b:58:0e:97:45:22:2f:ca:3d:ea:32:
96:e2:36:2d:83:e2:18:c2:06:c5:69:81:2a:a7:75:
90:b2:1a:c8:78:00:23:ab:91:a9:81:df:6d:d2:e1:
7d:b1:1f:ac:7c:79:f4:af:c2:28:88:15:84:af:9b:
8f:6c:e6:3f:d5:b3:fe:01:0b:97:dc:00:ba:e8:6f:
d3:34:8d:03:0f:76:5c:28:33:6a:4a:99:ea:3e:67:
a2:8b:15:e1:0b:2a:20:7a:bc:93:b6:3c:1d:f6:ea:
35:70:9e:4a:e2:6c:ac:f7:36:34:5d:01:e5:09:38:
86:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6C:19:CD:BA:3E:5D:E5:EC:96:E2:7C:E2:11:59:F2:20:9C:74:E4
X509v3 Authority Key Identifier:
keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a4:4a:d4:29:be:97:da:39:56:61:79:95:1d:7f:0a:b1:2a:
23:78:21:6b:e3:99:12:af:07:3b:8e:21:11:80:a7:46:30:9d:
d9:dc:00:97:12:17:8f:e1:e6:35:d3:43:d8:a5:2c:8c:dd:ee:
b4:e5:c5:f1:1a:92:38:50:25:7a:2b:e9:59:93:b9:36:43:9b:
66:c1:e4:3b:d8:df:ae:95:d6:5d:6b:79:dd:fe:a9:be:3c:06:
a8:c2:7a:c0:46:8e:c2:90:34:fb:e7:1d:99:04:3f:47:c4:16:
13:6d:55:5f:5b:0c:c0:26:dd:ba:16:21:da:85:db:fc:26:d1:
07:fe:76:6c:50:a3:ea:35:28:bd:01:99:6a:54:5e:e7:f8:2a:
ac:11:f7:93:17:f8:48:45:ac:4b:f5:e0:b0:13:90:d1:3b:f8:
f3:a2:5f:d0:15:09:a3:4b:5c:72:57:2f:f2:63:14:fa:a6:66:
09:9b:c9:96:6f:03:34:5d:21:fd:2d:3b:4f:0a:0b:70:16:00:
59:ba:46:f0:4a:8a:a6:6e:e6:69:90:5c:85:a0:26:53:bb:a2:
1b:80:dd:89:8b:43:64:1b:40:11:ef:d0:ae:1d:46:10:ae:be:
4f:a2:14:85:06:6c:95:bb:4e:1c:b6:d6:58:da:d8:ea:c7:81:
e2:2e:e9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:35:13 2026 by rpki-client