
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json)
Hash identifier: sywAfK+Wv42o9xAVe/yH9UFjtU7GRvqcrcls4gH1fU8=
Subject key identifier: CC:7E:AC:84:8A:6F:9D:C7:40:4F:6C:AD:B7:A6:A8:7F:93:9C:B9:F1
Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48
Certificate serial: 019E288233F8E49D6C0FDE38C5D478A6BBF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
Manifest number: 121D
Signing time: Thu 14 May 2026 22:01:21 +0000
Manifest this update: Thu 14 May 2026 22:01:21 +0000
Manifest next update: Fri 15 May 2026 22:01:21 +0000
Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: K+gmoUeQy/8tVp+9ywOLXNvLf5U9ICKv2DMoJKSlnSI=)
2: Rzs2HXQzTLrDqDj9LP1oWAbKMGw.roa (hash: OG2fkvNtGY/HMomh9VL9hQ1Vbd5noSl5aNza/Xw2mXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:82:33:f8:e4:9d:6c:0f:de:38:c5:d4:78:a6:bb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48
Validity
Not Before: May 14 22:01:21 2026 GMT
Not After : May 15 22:01:21 2026 GMT
Subject: CN=cc7eac848a6f9dc7404f6cadb7a6a87f939cb9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e6:84:1d:02:85:7b:03:48:53:14:65:cc:cb:
25:bc:6d:d1:29:64:03:b3:cf:74:ee:ea:94:bb:79:
46:0f:ea:f9:a0:10:79:51:ff:79:15:ad:57:a2:f6:
1b:f2:12:fb:ac:13:44:e4:c1:f5:35:d5:58:1f:9d:
0f:fa:22:e3:f8:78:ca:41:ad:a9:27:aa:b0:76:84:
fa:12:bd:bf:a5:45:02:56:04:37:e6:e1:ba:bd:8a:
78:09:ed:d1:a6:2b:d8:fe:9d:56:8e:0c:00:c7:0d:
eb:0a:88:6b:bc:f7:dd:9f:f2:55:ec:97:59:dd:d6:
bb:e8:e4:e1:25:60:11:06:ff:5c:6f:c3:91:85:c1:
69:bc:0c:16:ce:1a:6c:f4:fc:6b:4b:11:aa:37:a9:
b7:69:7b:40:46:72:7b:16:8e:b8:57:90:f9:82:7a:
81:26:34:02:ef:a1:b9:85:e8:19:5f:83:63:b8:cb:
98:fc:86:ff:67:0c:5d:7f:18:64:20:a6:44:e4:5f:
7b:1e:3f:55:f9:c4:69:1d:07:7d:2f:69:f1:6d:df:
1c:ea:09:79:61:dc:ec:2e:b6:e5:80:22:1a:34:17:
44:e3:22:e2:df:65:68:dc:59:91:0b:bd:ed:84:ad:
ab:cb:b0:51:56:a2:d5:f5:97:e0:92:e6:15:09:c7:
8a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7E:AC:84:8A:6F:9D:C7:40:4F:6C:AD:B7:A6:A8:7F:93:9C:B9:F1
X509v3 Authority Key Identifier:
keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:8c:43:06:87:be:4b:e4:db:30:a9:ca:da:3a:10:8e:ca:60:
5c:47:2b:c2:c2:fe:78:35:b7:e7:07:00:2a:ae:36:02:22:8a:
07:8b:b9:e2:32:fc:46:6c:f9:af:16:89:cb:cf:33:83:78:03:
f2:ec:49:6b:f1:9b:2e:45:11:39:e8:88:f7:ed:ec:92:8f:99:
c6:69:1a:67:73:66:c0:f8:17:fb:bf:09:28:0a:53:0a:85:4b:
32:18:f4:70:ef:f3:f5:0c:3b:13:9b:11:df:f7:84:70:21:96:
f2:38:9d:ee:a6:02:d5:6f:4b:da:54:0d:75:5d:38:3b:d3:6f:
81:df:4f:e9:8d:d8:77:f7:ca:d1:41:2a:12:c9:31:e0:bf:90:
c6:26:fb:b7:01:7d:d2:bb:d5:f0:82:10:11:84:fd:17:ce:a2:
ac:ae:88:30:61:ab:10:ec:ed:e8:6d:79:a5:4c:60:20:80:57:
a7:4d:2d:56:48:38:18:24:2f:6e:af:0c:18:56:4f:c1:fe:22:
8d:67:ba:9b:43:d1:b0:ff:6d:06:04:f1:05:94:bf:3b:3b:43:
4f:5d:52:70:c8:df:08:50:84:4a:79:57:27:1e:e7:da:2b:36:
12:2f:96:57:8d:64:bf:0d:4f:ad:6d:15:e8:ff:4d:29:1c:14:
3b:25:30:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:08:15 2026 by rpki-client