Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json)
Hash identifier: qEnof24WNM0SCpoL0+sEWU0B4lZLd9hw/885Id+lSEg=
Subject key identifier: 40:70:79:95:ED:6D:A6:07:38:E6:F9:78:1F:CC:25:81:6F:E4:6D:3E
Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48
Certificate serial: 019FFDC94729CA4FE1EC80798CA5BA3169E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
Manifest number: 1310
Signing time: Fri 14 Aug 2026 01:00:54 +0000
Manifest this update: Fri 14 Aug 2026 01:00:54 +0000
Manifest next update: Sat 15 Aug 2026 01:00:54 +0000
Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: +p/YGLislM33cqo82zaNXfPfacROXxg18VDZeGNGseM=)
2: Rzs2HXQzTLrDqDj9LP1oWAbKMGw.roa (hash: OG2fkvNtGY/HMomh9VL9hQ1Vbd5noSl5aNza/Xw2mXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:c9:47:29:ca:4f:e1:ec:80:79:8c:a5:ba:31:69:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48
Validity
Not Before: Aug 14 01:00:54 2026 GMT
Not After : Aug 15 01:00:54 2026 GMT
Subject: CN=40707995ed6da60738e6f9781fcc25816fe46d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:34:94:55:3a:19:d8:f0:a4:17:98:69:b1:
d2:65:e9:ce:4d:ae:02:f8:69:0c:b8:6c:57:51:e3:
6c:4c:f0:ed:15:1e:0f:33:bd:fd:1f:78:d3:f9:4f:
47:06:b5:c5:5f:2a:4c:0e:dd:dd:ba:9a:63:69:3b:
e3:b2:df:dc:7f:b5:ca:e6:87:ea:f0:03:04:75:3a:
c7:b4:7d:9e:06:1f:ce:8b:ea:70:2f:8a:e2:c0:d0:
a2:e5:0e:68:4d:86:e6:12:fe:c4:b2:b6:7b:1b:44:
dc:81:1a:1f:a7:7a:b2:c9:bf:10:d2:29:27:12:e3:
9a:e2:2c:cd:0d:c5:5d:09:65:1c:03:d7:bb:35:44:
40:0d:e1:85:70:b6:f3:66:42:55:4f:47:e8:c0:2c:
17:61:48:a0:0f:01:67:9a:98:0e:f3:e0:76:6b:52:
7b:8e:1b:32:7f:d9:31:08:eb:46:c5:ad:b6:bc:02:
0d:63:50:eb:b7:c5:5a:79:f7:93:7a:8d:96:78:98:
4a:1d:be:0a:a0:0e:a2:71:ee:0b:a7:af:eb:19:18:
ca:2d:64:e2:f6:7d:54:0d:22:cb:37:2e:ee:04:2c:
9a:04:9a:55:a6:96:db:d9:5c:d9:de:1d:ad:f5:6a:
03:08:66:07:0b:5a:cc:7a:24:10:f9:d0:1a:9a:16:
2f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:70:79:95:ED:6D:A6:07:38:E6:F9:78:1F:CC:25:81:6F:E4:6D:3E
X509v3 Authority Key Identifier:
keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b5:18:39:a5:96:15:fb:f0:09:d1:4b:47:9e:ab:15:01:df:
12:87:66:a6:45:d3:34:2a:9b:9f:6b:bd:58:f6:c1:a1:c8:8a:
0d:ff:f8:00:d2:ff:f1:4d:e9:09:21:92:7d:80:eb:79:32:01:
4c:f1:3e:59:b2:1f:5e:b6:71:06:2d:28:17:88:65:e7:11:77:
30:69:29:cb:d9:cd:51:6a:0e:5f:13:06:c8:de:46:53:16:e4:
c0:6d:23:48:d4:11:d1:2e:71:12:1e:5c:91:82:a6:05:11:c1:
53:7b:df:2e:66:bf:dd:73:be:46:84:b0:55:7d:88:ff:31:2d:
9b:8f:ec:ce:21:0c:d2:b7:10:ce:e0:a2:da:7d:2f:43:4f:25:
b2:5a:d5:f7:7f:54:8c:50:f3:3c:59:1e:db:a7:68:07:3b:9e:
bb:e9:b8:3f:ac:40:be:10:c6:de:0b:92:77:db:25:82:da:2d:
ef:22:66:5c:58:f5:d3:5e:0e:b6:db:18:d9:77:74:ce:d3:eb:
46:40:6d:65:15:38:c1:98:f9:00:55:91:9f:88:e7:d3:f3:f3:
76:e8:d0:e2:6d:01:ca:93:4f:3e:b9:ae:a6:21:98:6f:99:64:
29:20:b0:51:f5:a4:c6:77:bf:ee:ce:05:52:7a:4d:88:c8:f4:
6d:f6:8c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 10:13:41 2026 by rpki-client