Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier: xA0INO2c/BhtCQampkrpzlKfc4X0pldUfKmRHByada4=
Subject key identifier: A8:46:73:28:AF:E3:BD:C4:F4:14:12:56:84:95:61:13:DD:8A:13:47
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 01A161576195E45398F28F0AD45278EDC567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number: 14E8
Signing time: Thu 22 Oct 2026 02:01:18 +0000
Manifest this update: Thu 22 Oct 2026 02:01:18 +0000
Manifest next update: Fri 23 Oct 2026 02:01:18 +0000
Files and hashes: 1: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: LmGt7WNy1fu76q96HmOGIuRO319WQKV/53ANqJ7+/zo=)
2: gLcTJvZ-bTiZKez7VJlhXddzj5I.roa (hash: njLU3hmp1ice1mv35YuU3QwtIJDPeTW7I2pUB3WU76k=)
3: iGV0CoyrITzjkKDaw4INbKqkpdE.roa (hash: S/9miWwjqyjrqWzqhVaykBqXwqlsa3o7EOP2wtoRCcU=)
4: t8eIgMClHX3oL8Kz7kDeYL0J8-I.roa (hash: jcUfNtNFO2Y7xEuTx/9w6iJn9BhR83TnoBAGY+TGric=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:57:61:95:e4:53:98:f2:8f:0a:d4:52:78:ed:c5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Oct 22 02:01:18 2026 GMT
Not After : Oct 23 02:01:18 2026 GMT
Subject: CN=a8467328afe3bdc4f414125684956113dd8a1347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:81:83:b4:20:cd:51:e4:06:35:97:a1:20:77:
59:ef:7e:f0:f9:d0:d8:c9:81:f2:57:bd:99:8b:49:
fc:2c:d3:f1:9e:f2:8b:29:05:98:8b:63:c6:74:3a:
6b:5e:01:f0:88:55:c6:0d:e0:46:16:6f:77:a4:11:
7c:5b:3f:c2:7c:0e:a5:14:13:0f:b3:b6:4f:b7:51:
8b:f1:a5:92:47:58:1d:51:87:0a:02:61:4a:3e:11:
0e:c5:27:9f:9f:b6:76:27:0f:5d:c5:30:af:07:4d:
5a:43:a3:c9:53:d9:0b:a9:de:48:84:da:51:dc:cb:
54:9d:7f:4c:ac:02:ed:7a:94:ac:50:6d:47:a9:b9:
9b:3e:7c:6a:e7:ef:27:e5:2a:33:92:9f:15:e4:dd:
69:3d:dd:7d:69:7d:5e:9b:9c:f1:65:65:13:eb:15:
fd:e3:52:7a:68:ed:60:52:9b:9c:e9:ca:54:33:9b:
73:00:b3:8f:fe:ea:e3:a4:99:d4:33:2a:1e:20:db:
b5:87:93:2b:f2:f3:cb:74:68:f1:cb:45:18:07:a9:
9a:9f:08:38:b7:76:6d:c6:21:53:3d:94:c0:a9:9e:
67:7f:c1:13:ce:4b:fe:d3:04:d9:b3:00:72:17:21:
51:3b:2a:d3:13:62:b3:2b:a7:97:d3:9f:c8:68:02:
fd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:46:73:28:AF:E3:BD:C4:F4:14:12:56:84:95:61:13:DD:8A:13:47
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:cd:1f:78:8b:94:d4:89:ec:b0:d9:9a:4c:07:bb:ec:a0:9f:
67:56:c3:a8:c3:d7:b8:e3:f6:20:a4:78:6a:55:23:f4:c7:98:
bc:1e:f2:e6:f5:6b:f1:45:7a:46:ec:d7:21:12:3b:30:4f:c2:
1d:ff:73:3c:73:98:64:51:ff:d8:e3:c7:1c:93:37:94:35:06:
de:e1:81:5e:2d:25:5a:44:e2:67:60:10:1b:65:59:72:f1:46:
b8:3d:22:e9:ae:f9:64:2a:23:ba:19:f8:cc:44:55:71:3d:e9:
be:a1:8e:43:1e:25:f9:5f:6b:0c:f4:9c:1c:6d:17:5e:ed:96:
92:05:18:21:84:9f:c0:44:f7:82:56:87:6d:d9:6e:5f:12:24:
80:9e:ee:4b:74:c2:52:54:cc:8f:e2:d8:b4:3c:b7:b0:1a:37:
cf:43:34:a1:f8:2c:21:c0:52:d1:53:29:47:f6:27:9e:8d:1e:
35:0a:7c:bd:10:4e:20:ce:7a:37:2c:5c:7b:e5:4d:26:f7:cd:
ac:e1:2c:5f:1e:79:52:70:c4:d4:84:93:2f:41:a1:4d:b1:ae:
40:2c:23:2c:86:b1:7d:c2:b4:c4:11:2b:a3:9b:fe:6e:bd:b8:
c5:45:45:01:82:f8:dd:56:9d:a9:9f:a2:e2:88:e2:05:b4:61:
33:dc:10:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFhV2GV5FOY8o8K1FJ47cVnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMWQ5YWQ0MDRlY2RhZmE3MGVhOWE0YzlkMTBiOTgwMTgy
OWVhMWYwHhcNMjYxMDIyMDIwMTE4WhcNMjYxMDIzMDIwMTE4WjAzMTEwLwYDVQQD
EyhhODQ2NzMyOGFmZTNiZGM0ZjQxNDEyNTY4NDk1NjExM2RkOGExMzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IGDtCDNUeQGNZehIHdZ737w+dDY
yYHyV72Zi0n8LNPxnvKLKQWYi2PGdDprXgHwiFXGDeBGFm93pBF8Wz/CfA6lFBMP
s7ZPt1GL8aWSR1gdUYcKAmFKPhEOxSefn7Z2Jw9dxTCvB01aQ6PJU9kLqd5IhNpR
3MtUnX9MrALtepSsUG1HqbmbPnxq5+8n5Sozkp8V5N1pPd19aX1em5zxZWUT6xX9
41J6aO1gUpuc6cpUM5tzALOP/urjpJnUMyoeINu1h5Mr8vPLdGjxy0UYB6manwg4
t3ZtxiFTPZTAqZ5nf8ETzkv+0wTZswByFyFROyrTE2KzK6eX05/IaAL9eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhGcyiv473E9BQSVoSVYRPdihNHMB8GA1UdIwQY
MBaAFHMdmtQE7Nr6cOqaTJ0QuYAYKeofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYt
ZTIwYTY1NGZjYTk1LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYtZTIwYTY1NGZjYTk1
LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgs0feIuU
1InssNmaTAe77KCfZ1bDqMPXuOP2IKR4alUj9MeYvB7y5vVr8UV6RuzXIRI7ME/C
Hf9zPHOYZFH/2OPHHJM3lDUG3uGBXi0lWkTiZ2AQG2VZcvFGuD0i6a75ZCojuhn4
zERVcT3pvqGOQx4l+V9rDPScHG0XXu2WkgUYIYSfwET3glaHbdluXxIkgJ7uS3TC
UlTMj+LYtDy3sBo3z0M0ofgsIcBS0VMpR/Ynno0eNQp8vRBOIM56Nyxce+VNJvfN
rOEsXx55UnDE1ISTL0GhTbGuQCwjLIaxfcK0xBEro5v+br24xUVFAYL43VadqZ+i
4ojiBbRhM9wQAw==
-----END CERTIFICATE-----
Generated at Thu Oct 22 11:52:12 2026 by rpki-client