
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
File: CxhwyW7wlyOBH7iSUO6m66ljwN8.mft (raw, json)
Hash identifier: +ZNGiwUOOfA3dNMoG5NATFBuD4YfkyGSeOC7ccDEjic=
Subject key identifier: 54:9B:18:4F:C8:72:12:E8:C8:56:BD:EA:FC:4F:3A:23:97:27:B3:08
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial: 019D213889E87AACA5EC6EB27B0FE92E2B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
Manifest number: 1820
Signing time: Tue 24 Mar 2026 19:00:46 +0000
Manifest this update: Tue 24 Mar 2026 19:00:46 +0000
Manifest next update: Wed 25 Mar 2026 19:00:46 +0000
Files and hashes: 1: 1g5Vvv96ighDkSqXd-c3m0Fystw.roa (hash: vG+feQkpTWab4/oRvuuesxoi31NwjEJhw9SKZVjbK2M=)
2: 3H8BLKzmkCfljUjNrQGOgxtelOg.roa (hash: v8PSaEUxks+gqrCM9n7vdattQCJR6qYVTo0H/ICFPWs=)
3: CxhwyW7wlyOBH7iSUO6m66ljwN8.crl (hash: dDEs+KfcyKvAlKtykGQpl6iIJFepe70TO/aJOvx/Z78=)
4: OVADbrvDVPwea8LYrO-Mwb3Qj2g.roa (hash: 7l0K8yYViyqwamqByXDtNcYGRuw4fCtQkRZ/3UwAsLE=)
5: OoGvPehNjKU6hE3SxfV0wILIsN4.roa (hash: 7Php/xkVqP8tmnrDY7MQsYCSTzCCLDFw6kgWF4S8f2I=)
6: gSEruQPSsoefkss2yCXL7050kig.roa (hash: P+q5a1NeLiWUtBFC04Wzt8w9SD2Mit1ctA7LK/VHJRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 15:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:21:38:89:e8:7a:ac:a5:ec:6e:b2:7b:0f:e9:2e:2b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
Validity
Not Before: Mar 24 19:00:46 2026 GMT
Not After : Mar 25 19:00:46 2026 GMT
Subject: CN=549b184fc87212e8c856bdeafc4f3a239727b308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:d9:e0:70:15:eb:3e:4f:52:23:06:a5:dd:
be:cc:3d:c0:1f:65:17:e4:5f:3b:d5:a4:a3:fd:6c:
4b:52:a7:d2:17:5c:7b:05:82:94:e1:b0:25:5f:13:
e4:31:1c:da:ef:94:5a:10:88:5f:e6:43:45:40:44:
c1:fa:6b:03:42:bd:94:6d:02:02:14:7a:04:c8:29:
6a:72:ec:0f:1e:4e:2e:81:d3:a3:7c:a6:77:7a:52:
28:33:1f:e4:98:a2:96:0d:ac:c1:01:08:38:4c:0c:
5d:3d:83:61:58:5a:35:65:f7:50:e2:1c:df:ce:d6:
f9:90:72:32:6b:53:68:8c:a9:f8:ec:b6:eb:14:e2:
08:9e:63:58:2f:2d:9d:39:0f:ea:60:87:5a:34:6c:
65:10:8a:f8:ac:b5:6f:11:97:31:c7:69:04:30:ba:
6f:37:41:2f:1b:22:c2:a9:7e:8b:15:09:94:0d:2c:
45:5b:3f:3e:26:68:68:ba:30:db:55:a3:82:28:4a:
51:4c:35:5c:43:7a:68:35:92:77:9a:4d:bd:11:27:
79:82:8b:d3:1c:59:03:e4:73:0d:27:ec:94:f9:2d:
6c:62:e7:69:04:27:99:65:bd:73:8b:40:2f:ef:62:
24:ea:62:1a:da:a3:ec:05:34:93:5d:9e:52:07:b7:
d1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9B:18:4F:C8:72:12:E8:C8:56:BD:EA:FC:4F:3A:23:97:27:B3:08
X509v3 Authority Key Identifier:
keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:93:50:6d:f4:22:14:f9:69:59:14:28:40:a4:65:8b:7d:4a:
d6:53:2a:35:2e:f8:12:ba:29:27:1b:ed:7d:c4:08:08:8b:3a:
14:92:c7:d1:f4:18:63:8a:f2:05:ce:e1:f1:8a:1c:6e:62:fd:
99:c4:44:73:28:c9:53:26:c6:ed:1d:86:d5:e5:fb:22:91:34:
75:37:41:c4:e9:1f:10:d6:72:c7:d9:7d:e1:04:66:df:64:d6:
17:47:fc:49:74:22:8e:fa:73:43:07:a1:f6:32:bb:e7:5a:b0:
0e:63:43:fe:1a:f4:f7:e5:70:30:49:5f:95:a5:7d:4e:dd:5e:
c7:dd:1c:ee:25:22:5c:db:e6:a7:1a:0c:4c:68:ce:d5:1b:98:
0f:f5:fb:71:aa:12:a5:c5:c8:d0:f2:7b:d1:bf:3d:ef:d4:af:
fe:93:41:d9:fb:86:4f:dd:73:3d:32:14:d4:50:3f:b7:83:97:
03:19:1c:d7:9f:57:2d:88:64:7e:9f:a2:be:28:96:2a:ba:3e:
74:c1:93:ce:90:f9:44:5b:41:ca:f9:1f:8d:45:95:5f:2f:bb:
e7:1d:17:fb:f4:c4:bb:33:80:57:0e:5f:ec:fa:8a:3e:f3:62:
3d:fe:dd:92:2a:9c:09:2e:c7:5b:25:8e:45:92:8a:42:2d:96:
dc:4b:92:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0hOInoeqyl7G6yew/pLitLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMTg3MGM5NmVmMDk3MjM4MTFmYjg5MjUwZWVhNmViYTk2
M2MwZGYwHhcNMjYwMzI0MTkwMDQ2WhcNMjYwMzI1MTkwMDQ2WjAzMTEwLwYDVQQD
Eyg1NDliMTg0ZmM4NzIxMmU4Yzg1NmJkZWFmYzRmM2EyMzk3MjdiMzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtLZ4HAV6z5PUiMGpd2+zD3AH2UX
5F871aSj/WxLUqfSF1x7BYKU4bAlXxPkMRza75RaEIhf5kNFQETB+msDQr2UbQIC
FHoEyClqcuwPHk4ugdOjfKZ3elIoMx/kmKKWDazBAQg4TAxdPYNhWFo1ZfdQ4hzf
ztb5kHIya1NojKn47LbrFOIInmNYLy2dOQ/qYIdaNGxlEIr4rLVvEZcxx2kEMLpv
N0EvGyLCqX6LFQmUDSxFWz8+JmhoujDbVaOCKEpRTDVcQ3poNZJ3mk29ESd5govT
HFkD5HMNJ+yU+S1sYudpBCeZZb1zi0Av72Ik6mIa2qPsBTSTXZ5SB7fRgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSbGE/IchLoyFa96vxPOiOXJ7MIMB8GA1UdIwQY
MBaAFAsYcMlu8JcjgR+4klDupuupY8DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMt
YTJlMjRmOTgwYjNmLzEvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMtYTJlMjRmOTgwYjNm
LzEvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5NQbfQi
FPlpWRQoQKRli31K1lMqNS74EropJxvtfcQICIs6FJLH0fQYY4ryBc7h8YocbmL9
mcREcyjJUybG7R2G1eX7IpE0dTdBxOkfENZyx9l94QRm32TWF0f8SXQijvpzQweh
9jK751qwDmND/hr09+VwMElflaV9Tt1ex90c7iUiXNvmpxoMTGjO1RuYD/X7caoS
pcXI0PJ70b8979Sv/pNB2fuGT91zPTIU1FA/t4OXAxkc159XLYhkfp+iviiWKro+
dMGTzpD5RFtByvkfjUWVXy+75x0X+/TEuzOAVw5f7PqKPvNiPf7dkiqcCS7HWyWO
RZKKQi2W3EuSLQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 01:17:55 2026 by rpki-client