Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier: BP2nbQFbt3ZK4QHpiJFmLcnilr5FG7+uyGfscGezETE=
Subject key identifier: F5:5C:7D:AC:82:C2:FB:1E:AC:64:50:C6:BC:46:7A:19:CE:AF:23:CA
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 019E498D7AC836B55274B4DEEC1E8094C21C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number: 134E
Signing time: Thu 21 May 2026 08:01:09 +0000
Manifest this update: Thu 21 May 2026 08:01:09 +0000
Manifest next update: Fri 22 May 2026 08:01:09 +0000
Files and hashes: 1: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: O6Wqi3MGfwhYO1MS/xsRfKtNMWjMlpDUB81J3aDWZiI=)
2: gLcTJvZ-bTiZKez7VJlhXddzj5I.roa (hash: njLU3hmp1ice1mv35YuU3QwtIJDPeTW7I2pUB3WU76k=)
3: iGV0CoyrITzjkKDaw4INbKqkpdE.roa (hash: S/9miWwjqyjrqWzqhVaykBqXwqlsa3o7EOP2wtoRCcU=)
4: t8eIgMClHX3oL8Kz7kDeYL0J8-I.roa (hash: jcUfNtNFO2Y7xEuTx/9w6iJn9BhR83TnoBAGY+TGric=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:8d:7a:c8:36:b5:52:74:b4:de:ec:1e:80:94:c2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: May 21 08:01:09 2026 GMT
Not After : May 22 08:01:09 2026 GMT
Subject: CN=f55c7dac82c2fb1eac6450c6bc467a19ceaf23ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:d7:37:af:c6:5a:18:0c:f4:5e:87:cb:bf:
a3:b4:3a:03:be:fa:7e:eb:fc:ae:c6:94:76:12:a8:
23:e3:42:75:e3:7d:e2:09:67:b9:b4:60:d5:27:8a:
7f:00:e1:67:6d:43:75:48:6b:86:86:8c:12:f0:85:
33:2c:ac:11:ec:4d:fc:04:90:f9:8c:35:94:11:99:
71:90:7b:63:66:27:70:ba:95:af:33:8a:38:35:f7:
b7:0c:b1:50:c7:51:b6:f4:ff:84:7c:42:cb:19:53:
4c:42:f5:09:f0:9c:90:c5:2b:21:6e:52:35:8a:7a:
be:b4:d0:e5:70:4d:b9:fd:49:12:2e:de:e0:a0:c2:
a6:6c:5c:20:cd:cf:83:51:fb:65:b2:e2:77:89:b1:
c2:5c:52:b6:8f:49:8e:11:7a:d9:ab:2b:4d:45:f9:
a3:06:d4:4a:73:5a:53:94:dc:29:c7:ee:24:8f:87:
4f:27:25:7a:20:d5:f7:ae:1a:6b:14:f7:b5:5a:ad:
37:5d:25:f5:1e:00:69:7d:97:92:06:73:25:ca:fe:
57:17:ce:33:a4:5c:1a:d2:d6:f2:5f:51:29:bd:3a:
04:65:2a:e5:a0:18:82:77:3c:0c:96:22:ad:10:2e:
b8:fc:37:5d:38:06:8f:15:24:2d:3f:08:14:49:f1:
c8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5C:7D:AC:82:C2:FB:1E:AC:64:50:C6:BC:46:7A:19:CE:AF:23:CA
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d4:b7:9c:fa:bd:5a:3b:e2:09:5c:ea:e2:ef:a0:da:80:25:
01:f0:12:0f:66:69:0b:5f:d2:2d:9f:85:ce:1d:aa:ba:c0:df:
5a:eb:23:71:1c:fc:5c:30:40:c9:b5:77:d4:94:dd:6f:1f:50:
82:b8:ab:ff:30:8e:15:d4:b4:08:a4:7a:65:e8:7a:c6:50:29:
c0:57:ca:b0:c4:27:40:be:f2:89:54:e8:ef:d9:ad:ee:fb:ba:
3b:07:3f:87:cd:d7:14:5a:3c:a9:b9:91:c4:a5:a9:2e:2c:08:
63:9c:c1:c4:78:bd:20:20:ca:38:c1:c4:b0:ba:87:48:48:f8:
fb:c1:fe:bd:a7:7d:e9:48:37:c9:89:14:c6:69:3d:cd:d8:c1:
6a:92:46:49:3a:c4:a5:03:e6:1c:ab:7d:55:90:04:77:41:d9:
8c:cf:75:bb:1d:b2:77:1f:4d:17:7c:f3:d5:cf:29:eb:ea:50:
ac:68:25:15:7e:4c:09:f1:e2:d7:1b:6a:9f:3f:18:60:13:b0:
68:89:96:c0:07:7b:3f:cb:37:47:5a:72:a8:f0:87:c0:92:c9:
1c:54:29:fd:96:f8:6e:d7:32:f6:be:3f:8c:d1:e0:c5:5b:51:
6f:0d:72:ce:ff:f1:4f:16:4c:5e:4d:ee:91:a1:b5:ad:c9:c1:
25:67:52:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 17:46:00 2026 by rpki-client