Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json)
Hash identifier: /4gxRfI+H6qOiGnyDu23sm2PHps939jlDz+i5DqFD/4=
Subject key identifier: 37:42:0E:22:CB:83:3E:B7:5D:44:37:70:05:37:D2:EA:D5:E9:BC:0D
Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48
Certificate serial: 019F122E5F37F3A5E687E14ABDDA2F3AA69E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
Manifest number: 1296
Signing time: Mon 29 Jun 2026 07:00:56 +0000
Manifest this update: Mon 29 Jun 2026 07:00:56 +0000
Manifest next update: Tue 30 Jun 2026 07:00:56 +0000
Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: hb+pQQ5HNbxoV8r1OOf+2I7Qo+yDFdMy+KV6ONnkMNA=)
2: Rzs2HXQzTLrDqDj9LP1oWAbKMGw.roa (hash: OG2fkvNtGY/HMomh9VL9hQ1Vbd5noSl5aNza/Xw2mXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:5f:37:f3:a5:e6:87:e1:4a:bd:da:2f:3a:a6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48
Validity
Not Before: Jun 29 07:00:56 2026 GMT
Not After : Jun 30 07:00:56 2026 GMT
Subject: CN=37420e22cb833eb75d4437700537d2ead5e9bc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:3e:84:54:f6:76:bb:4f:99:a9:86:f8:e3:
bc:85:3e:34:80:97:58:aa:68:32:e7:23:90:77:90:
4a:74:a3:46:bc:25:44:34:7d:a4:7d:af:5f:13:02:
3c:61:32:0b:98:77:b1:7c:61:93:c7:bc:0b:8b:26:
18:87:dd:8a:e8:bc:d8:b1:01:1e:b3:15:4e:71:f1:
ad:c9:aa:c5:21:3b:96:9e:a6:93:16:89:5f:87:33:
67:4d:2b:93:ea:fa:82:49:22:21:75:57:8b:70:c1:
40:c3:fd:f1:c9:95:df:b2:b8:16:b6:2e:20:4a:89:
75:5c:12:4b:ac:62:11:6b:1a:54:0d:16:0c:55:6e:
22:ef:91:42:d4:33:b5:29:0d:83:cc:f6:34:23:ad:
18:49:29:02:a7:6c:be:07:e3:cd:8d:ac:d1:bd:dc:
12:be:86:a5:29:cd:85:37:bb:d4:9a:a6:b2:2e:ba:
30:c8:77:e4:69:ff:90:fc:a1:36:1d:81:09:8b:bc:
85:94:8a:16:4d:08:fd:26:f8:bb:5f:e7:27:a0:0f:
6f:8d:31:d1:63:e1:bb:06:4b:54:db:84:b2:fd:12:
37:a9:65:40:dc:92:f1:fd:22:c1:86:3b:c8:3b:ad:
06:14:7e:47:ba:ac:57:87:46:82:aa:b5:c3:40:58:
8e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:42:0E:22:CB:83:3E:B7:5D:44:37:70:05:37:D2:EA:D5:E9:BC:0D
X509v3 Authority Key Identifier:
keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e6:1e:4f:85:ab:a8:9c:da:8c:b0:4d:2c:14:91:f5:cf:1c:
4f:a2:66:42:99:e7:1f:b2:98:48:d7:bd:d2:12:0e:f1:ca:ca:
27:9e:b5:71:58:b0:3a:c5:be:dc:0c:5f:86:98:aa:bb:aa:13:
ab:8a:64:e2:a3:10:e4:9d:ad:ad:db:47:24:ef:c2:18:a7:90:
e8:0b:03:a8:d9:b9:57:05:b0:ec:3d:a2:a2:e9:e7:c9:81:da:
7f:c1:f3:6d:bc:02:b2:c0:a9:ad:cc:2b:da:a7:bf:54:4c:47:
35:63:cd:e5:14:dc:9a:84:af:72:64:d0:ff:5e:18:21:c1:38:
bf:66:6e:a9:b2:7c:e1:15:13:28:d9:7c:8c:0a:14:a0:e5:78:
0d:b5:ae:25:cf:c0:a9:78:36:e7:89:a7:ec:46:f6:77:02:5c:
1e:5e:e5:f5:25:b6:36:11:cc:21:ab:44:db:78:41:18:82:c7:
60:d4:b7:68:62:98:b3:0c:48:15:e4:b3:b1:cb:c4:d7:8d:e8:
0a:e4:f0:09:8c:90:94:a0:13:9e:7c:b6:c4:a4:72:50:09:e3:
32:ad:48:b4:c0:a9:03:0f:6a:a1:9e:e8:d7:be:9a:ac:c7:ac:
5f:32:05:f5:d2:aa:e4:0d:8a:65:9e:eb:35:8c:8d:36:ec:f2:
a8:0e:ff:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:45:32 2026 by rpki-client