Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier: fZbCw5ZoCLdRoQBOBOkS4VouBPjoTqgeVDtKIBLcXXk=
Subject key identifier: A6:54:F6:7C:5D:E6:92:0E:D7:C7:3B:09:59:94:AA:66:89:49:C7:00
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 01A04198A688D7DAAF1AC4C267778D74CF30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number: 1453
Signing time: Thu 27 Aug 2026 05:01:58 +0000
Manifest this update: Thu 27 Aug 2026 05:01:58 +0000
Manifest next update: Fri 28 Aug 2026 05:01:58 +0000
Files and hashes: 1: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: Ev1CRzDOAG4rAi3CLRO301O/WPJG+43CRsRN2cBpttk=)
2: gLcTJvZ-bTiZKez7VJlhXddzj5I.roa (hash: njLU3hmp1ice1mv35YuU3QwtIJDPeTW7I2pUB3WU76k=)
3: iGV0CoyrITzjkKDaw4INbKqkpdE.roa (hash: S/9miWwjqyjrqWzqhVaykBqXwqlsa3o7EOP2wtoRCcU=)
4: t8eIgMClHX3oL8Kz7kDeYL0J8-I.roa (hash: jcUfNtNFO2Y7xEuTx/9w6iJn9BhR83TnoBAGY+TGric=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 05:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:98:a6:88:d7:da:af:1a:c4:c2:67:77:8d:74:cf:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Aug 27 05:01:58 2026 GMT
Not After : Aug 28 05:01:58 2026 GMT
Subject: CN=a654f67c5de6920ed7c73b095994aa668949c700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ac:03:fb:2c:ab:72:58:fe:67:95:f7:93:73:
a7:0e:10:c9:97:a7:a1:32:fc:bb:f7:8e:bc:2d:e9:
11:45:ec:5c:a9:fc:2c:36:b7:a3:b6:fd:0b:9b:ad:
3f:4d:1f:96:fa:40:b6:cd:95:7b:b1:08:1e:0a:a9:
a5:1c:cd:6f:f3:85:3b:cc:d2:e4:f8:a3:c5:13:8a:
4a:06:08:ff:c4:2b:c8:a0:8b:03:36:1f:da:eb:70:
cc:5a:21:3a:90:2d:82:eb:75:e3:ac:cd:18:bc:9b:
74:fb:05:a3:61:a3:a5:a0:6d:2a:b2:3d:aa:c3:49:
7b:06:57:e8:06:b9:3d:37:a6:64:ad:2d:4e:c2:c6:
96:89:5c:b8:55:e0:3c:d7:51:dc:e7:3c:58:dc:0e:
e5:2e:dd:66:8a:76:87:63:66:be:71:54:6f:12:06:
d7:0b:0a:16:53:36:4c:f3:1c:88:44:df:37:ab:2f:
ae:80:59:42:b1:94:d1:5b:95:25:7f:da:15:f9:7b:
5d:c2:35:3f:58:7c:a4:5a:a5:72:8f:b8:c6:d7:aa:
ca:29:3c:5f:bd:8f:6d:48:72:49:21:d5:3a:4a:33:
4a:d6:e8:9d:f1:3e:30:6e:b2:e0:e8:c3:d8:15:d3:
8f:4d:1e:ec:ba:72:67:6e:3d:25:02:49:bc:c8:c5:
7e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:54:F6:7C:5D:E6:92:0E:D7:C7:3B:09:59:94:AA:66:89:49:C7:00
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3a:c6:97:92:10:ea:26:21:99:61:eb:97:73:5a:bf:47:64:
7d:2f:2b:8d:4e:e5:6c:b4:36:03:de:25:aa:0a:cf:46:19:aa:
85:68:9b:b0:5c:8e:93:66:bc:d4:4a:35:73:a7:36:f3:9e:1e:
ba:a4:78:0b:85:65:76:44:00:d3:2e:9d:17:18:3e:ff:67:6d:
73:a3:c8:e7:65:cf:ef:61:b5:d4:5a:55:dd:25:47:07:80:94:
33:ea:13:13:97:51:6f:de:70:50:be:16:23:1c:77:4f:7f:a8:
e6:83:f9:4f:3a:2c:c2:87:61:2c:0a:5b:71:7e:c2:9f:e5:fe:
9f:21:d0:f5:f5:ea:bd:ed:8a:a1:0b:84:f4:ac:6b:b7:26:c7:
a5:7c:f4:6f:3c:2c:d9:b4:3a:5f:56:ce:c4:7d:b0:33:6c:34:
b2:8f:76:d0:38:29:d2:76:ae:1a:37:28:05:ff:9e:42:68:6d:
9d:63:7c:78:fe:1e:7a:e5:76:3a:73:51:69:d5:7e:0a:86:43:
39:88:eb:fc:c4:b8:47:17:7b:58:20:bc:44:53:fe:20:a1:73:
40:d0:72:d5:dd:e4:6e:9b:12:ba:53:5d:14:86:c1:1c:3e:19:
62:fe:15:ec:42:f3:f2:a3:8c:04:b4:71:b2:c1:5a:eb:91:ed:
fb:bf:bd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 14:14:59 2026 by rpki-client