Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
File: cxU1ourrxowWV6r89aeIyHUdm2I.mft (raw, json)
Hash identifier: rv64oPz2ld2ekcb+qjg429bYCLSwkepxxxnvy7OWzXc=
Subject key identifier: 5A:50:46:E4:7D:AD:8C:CF:8D:B3:75:24:BC:A0:DF:EB:A9:FA:BB:C8
Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Certificate serial: 019D661A128267BF177410BE66F3C6C3560B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
Manifest number: 1783
Signing time: Tue 07 Apr 2026 04:01:17 +0000
Manifest this update: Tue 07 Apr 2026 04:01:17 +0000
Manifest next update: Wed 08 Apr 2026 04:01:17 +0000
Files and hashes: 1: KFAbKKe7jo2XjrWvMFjbhME-DXc.roa (hash: 4OtvIQVEiPvcGG7i9r46Rvs1hJ/uhdVoDzjyfUfIYZk=)
2: TMosgBiabWiuRyi5Ssatcr00sSE.roa (hash: F+7FnUFFY40UIl2jFbgxyGZqPlinYg7PSVeRNWNABjs=)
3: cxU1ourrxowWV6r89aeIyHUdm2I.crl (hash: bi63sJwasSet/CDpj/GrVUycvZtEPaN39zY/JLHOWQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:1a:12:82:67:bf:17:74:10:be:66:f3:c6:c3:56:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Validity
Not Before: Apr 7 04:01:17 2026 GMT
Not After : Apr 8 04:01:17 2026 GMT
Subject: CN=5a5046e47dad8ccf8db37524bca0dfeba9fabbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:12:0c:f3:9f:d3:a8:d7:5a:4c:61:c3:3f:73:
bb:80:ec:48:27:a9:be:c7:57:74:38:01:0e:2d:fa:
7a:6e:49:c8:b1:14:ee:5f:3b:24:4e:38:96:f4:31:
fd:9c:f2:68:6a:b6:0e:7a:8b:33:26:eb:6c:f5:94:
33:2a:64:5c:80:32:f5:5a:f2:2c:0d:13:0b:cd:d8:
79:3c:92:6c:47:4c:16:69:b9:2a:02:b3:4c:0f:01:
cc:2e:74:38:c5:cb:82:b1:88:12:e4:6f:67:be:85:
24:ec:c0:e3:6e:ae:f8:32:92:16:81:f1:e5:ba:04:
2d:b6:63:fe:14:d0:c1:50:75:14:7d:ea:87:3c:8a:
8e:54:6f:b1:98:ba:63:1e:e4:3f:48:4c:c2:40:8e:
fd:9b:13:d5:01:04:73:3d:8c:20:ed:e4:fb:15:69:
43:0a:f9:54:02:5f:b2:da:ae:b2:99:80:5f:ce:e8:
08:07:3d:0b:c8:5f:1e:86:85:fb:f9:aa:8c:65:10:
4c:cc:8a:b9:24:d3:d0:75:82:97:fa:e0:8a:12:11:
a9:b3:03:a0:53:f3:e4:b6:8b:ed:92:db:dd:80:29:
cc:b4:f7:f7:31:99:76:19:ab:1b:f3:e8:15:8f:2b:
92:e2:7d:45:25:db:f1:54:58:42:ac:7b:d0:fa:cb:
67:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:50:46:E4:7D:AD:8C:CF:8D:B3:75:24:BC:A0:DF:EB:A9:FA:BB:C8
X509v3 Authority Key Identifier:
keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:00:8d:a1:3c:a0:29:e5:b8:6a:a8:21:0f:21:7c:fd:e1:7b:
f6:0d:48:05:23:c2:5b:35:a6:98:98:54:ce:cb:bd:97:83:bb:
c1:11:db:7c:af:41:0c:5b:5d:d4:c4:a7:cb:7c:1a:76:f6:1c:
a3:ed:25:8e:fd:cd:2f:50:7d:12:8e:5c:5f:87:1d:e9:3f:8b:
5c:b5:17:18:67:a2:e1:53:fc:8e:26:66:14:aa:a9:71:ee:79:
ad:1f:99:bd:ea:0a:b2:15:9c:a9:5b:93:e7:60:57:7b:f0:12:
11:60:d9:65:f7:ec:0c:a3:81:fb:c9:42:d4:f0:51:d7:47:93:
7e:d0:11:13:a2:0e:0b:7c:34:7c:1c:f6:50:42:6d:31:5d:3c:
77:9c:7c:66:7d:ce:38:b5:22:c6:37:a1:51:92:8a:5f:7a:67:
62:cc:7e:22:6a:e9:78:75:58:b1:e5:c2:b4:92:a8:fc:ac:da:
d2:71:83:61:59:21:63:10:41:ae:1a:15:ca:fd:94:a0:5c:ed:
c4:b4:5e:03:20:0a:ad:15:17:a7:e2:ef:3b:66:59:d9:49:f2:
b0:1d:2e:2e:33:ca:d6:47:c7:69:be:ee:54:5b:61:d0:51:96:
15:91:24:c1:5e:c5:8b:e8:6f:11:7d:1f:12:96:f1:4b:e5:2d:
aa:50:75:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 12:08:32 2026 by rpki-client