Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
File: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft (raw, json)
Hash identifier: 9EiVmHQejbO3p2Dkxgb6VwGmZNCi+PrWNuc4dFvt4zA=
Subject key identifier: 68:05:8D:10:9D:F0:84:9D:62:D6:6A:0B:BD:8D:E1:9B:FA:55:8A:18
Authority key identifier: 71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
Certificate issuer: /CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Certificate serial: 019D3752ADE664ABF8C57442A7A0DEF54280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 02:00:58 +0000
Manifest this update: Sun 29 Mar 2026 02:00:58 +0000
Manifest next update: Mon 30 Mar 2026 02:00:58 +0000
Files and hashes: 1: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl (hash: cHPpyOR4ramf/UPCdfeUsULXF4/he/EoKAVHaYb1ZEI=)
2: fQazRsuQA7KoggBdQ3lwX4Pk9DE.roa (hash: gfbrsTU/I0e+W/MQFr0NClUgyaIVv/jWpNgk1NCWi8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:ad:e6:64:ab:f8:c5:74:42:a7:a0:de:f5:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Validity
Not Before: Mar 29 02:00:58 2026 GMT
Not After : Mar 30 02:00:58 2026 GMT
Subject: CN=68058d109df0849d62d66a0bbd8de19bfa558a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:cc:b3:7d:32:b7:70:83:64:73:9c:8e:e4:
f3:47:c8:29:c8:5b:9f:7d:92:bd:6e:eb:b7:fe:a4:
73:13:0f:4c:b2:cf:f3:9b:81:5b:4f:84:9c:57:f0:
e3:b2:46:dc:57:02:4b:d7:c9:8f:c4:b1:25:23:3e:
a0:1a:8d:10:0c:ac:45:21:cf:c9:3a:59:22:07:57:
d5:00:01:99:21:12:54:9c:35:47:c5:17:ad:96:26:
f2:89:3d:78:52:15:9a:18:25:71:05:3f:bc:7a:3c:
d6:04:92:a0:f0:0e:59:9a:db:88:d6:cd:d6:e6:47:
c4:6a:17:22:ab:f4:6c:39:58:b7:cc:7e:b2:08:e2:
23:69:42:f1:f2:73:8b:bb:cb:01:64:c6:d9:25:75:
13:97:1e:20:2b:21:ba:0e:b8:ac:ab:73:4b:c8:00:
28:77:3b:d2:1d:e1:b2:ad:7e:7c:ca:4e:33:73:70:
8d:72:cb:01:33:c3:8c:6f:5c:14:33:43:8c:51:54:
8d:bf:b6:ea:81:84:c3:e9:35:c4:14:40:e3:d0:e9:
0f:8c:56:20:2a:98:c0:28:98:cd:b1:34:ab:6b:ef:
6d:ea:61:78:2e:3f:28:a8:e5:78:bd:41:a2:46:f9:
e4:a2:f4:15:29:44:80:31:53:01:8e:3f:97:0c:cc:
c2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:05:8D:10:9D:F0:84:9D:62:D6:6A:0B:BD:8D:E1:9B:FA:55:8A:18
X509v3 Authority Key Identifier:
keyid:71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a8:a9:fb:14:46:47:20:37:68:41:ea:88:fd:cf:6d:64:86:
d6:ef:65:68:cb:58:78:90:e1:4b:b8:17:57:61:38:a4:78:53:
53:13:f6:64:e3:ed:8d:3e:5e:a3:46:de:25:84:38:f0:b7:09:
a6:92:cf:94:52:06:53:1b:2b:8d:1f:a2:5b:df:3a:fa:23:aa:
f0:86:ee:c3:c8:2b:5e:20:9d:0c:ff:3d:c2:5a:56:a3:41:f5:
eb:4d:4e:15:f4:1d:17:3e:86:92:ac:59:57:2d:09:b9:54:9d:
0f:fc:c0:7a:6c:f8:5b:c9:52:5c:a7:2b:e9:f1:ec:cf:69:d1:
82:f9:60:21:bc:7e:39:c3:5b:30:42:8b:ad:9e:65:7b:52:55:
5b:cf:f4:a0:ce:1b:15:2b:9b:d7:a8:ce:b6:28:2f:21:af:b9:
14:9b:47:9f:47:7d:0a:5a:86:83:10:ad:47:3c:6d:a7:67:6a:
ac:a6:ac:8d:ee:7e:09:79:4e:cf:05:8d:0e:12:90:d7:fe:7e:
ad:b3:14:69:20:6c:bc:1f:b7:e3:cb:50:e4:c7:2c:3b:6a:c7:
ab:d6:30:0a:45:5a:52:a5:79:f6:6d:96:3c:71:da:06:bc:7f:
5f:c7:65:09:c4:21:cc:13:7d:07:ae:4c:ab:28:f2:a4:6f:f8:
bd:dc:e3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:19 2026 by rpki-client