
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
File: CxhwyW7wlyOBH7iSUO6m66ljwN8.mft (raw, json)
Hash identifier: yI+32Zp2XMCr1XMLp/WIOCAFP3ey3o085TUCQ2h03Qo=
Subject key identifier: 28:C0:85:30:36:CA:0B:10:9B:FF:1E:CA:76:14:E0:61:20:7E:9B:DE
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial: 019F85316D5928489D9757C7AC63FC4CDCE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
Manifest number: 195F
Signing time: Tue 21 Jul 2026 15:00:36 +0000
Manifest this update: Tue 21 Jul 2026 15:00:36 +0000
Manifest next update: Wed 22 Jul 2026 15:00:36 +0000
Files and hashes: 1: 1g5Vvv96ighDkSqXd-c3m0Fystw.roa (hash: vG+feQkpTWab4/oRvuuesxoi31NwjEJhw9SKZVjbK2M=)
2: CxhwyW7wlyOBH7iSUO6m66ljwN8.crl (hash: 2sYIeZbwnQ7vHlmwqQ3e4jGTgbkQVNUxgRuPtLaFlwE=)
3: gSEruQPSsoefkss2yCXL7050kig.roa (hash: P+q5a1NeLiWUtBFC04Wzt8w9SD2Mit1ctA7LK/VHJRo=)
4: xTeZw6t6j0kCgTpKAjZyek6V1QQ.roa (hash: 7eLkL929YGBrLf10p7Xu8H5BWgjYEKgp3pDvwQ/th+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:31:6d:59:28:48:9d:97:57:c7:ac:63:fc:4c:dc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
Validity
Not Before: Jul 21 15:00:36 2026 GMT
Not After : Jul 22 15:00:36 2026 GMT
Subject: CN=28c0853036ca0b109bff1eca7614e061207e9bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:44:cc:bd:ef:71:04:00:93:4e:83:16:6f:6c:
d9:f2:bd:c4:47:f7:c1:1d:f8:f8:dc:bd:f1:ba:b7:
76:5a:e0:83:f7:9d:d5:27:68:5b:40:14:76:a6:0e:
aa:77:94:38:85:ad:5e:5a:63:11:a4:05:eb:42:12:
42:eb:39:d7:1f:e4:6c:2f:5d:32:db:92:28:36:bb:
a0:3a:40:4e:f1:ed:9a:fb:15:1a:a4:f5:75:8d:03:
20:3a:a6:8f:20:98:45:3b:ef:02:c6:cd:86:72:7a:
f0:63:32:c9:04:6b:eb:d9:24:38:6a:99:f9:83:42:
6e:d5:46:15:7f:5c:06:58:b2:be:d7:7e:5d:95:a4:
0b:99:a0:dc:9c:5f:ec:ed:74:cc:0e:7f:81:ad:9f:
3a:0b:9f:6f:a3:8a:53:08:94:47:c3:da:b5:49:57:
7f:6c:6b:13:ac:1c:4a:2b:46:db:22:48:46:4d:57:
dc:b4:51:2c:d2:d7:6d:c3:49:28:af:35:2e:f7:d6:
95:1d:92:41:cd:a7:29:39:fa:b7:3f:82:ea:5c:c8:
67:d6:87:91:ea:30:1a:4a:4c:7a:f6:fe:2f:01:e5:
32:57:68:16:8e:5b:fb:9e:46:b6:12:aa:27:98:7d:
e7:20:56:32:d1:d5:66:d6:e7:b4:6b:da:7a:30:e9:
93:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C0:85:30:36:CA:0B:10:9B:FF:1E:CA:76:14:E0:61:20:7E:9B:DE
X509v3 Authority Key Identifier:
keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:11:a2:c6:a8:e9:bb:7e:c2:3e:25:15:d9:57:bb:5b:ff:47:
dd:2a:de:58:8d:51:f2:04:17:97:c8:e9:e6:1f:32:4a:a3:d3:
41:28:bf:6c:6c:14:2c:99:4f:a7:1f:1f:b4:4e:1b:7a:12:87:
53:3f:48:cb:c5:f4:62:51:02:94:9a:0d:75:ba:3a:07:9e:6e:
00:1b:67:51:22:80:6a:3b:af:7f:c7:fc:0a:af:70:4d:6e:b5:
ae:7e:20:0d:33:9d:10:44:9b:fc:38:55:9f:9b:aa:19:f9:1d:
59:57:99:42:e7:1c:20:84:e9:50:98:ff:96:f1:e0:4f:7f:22:
dd:64:b8:2d:f5:cd:ca:09:e8:f5:e2:14:1c:fe:b6:5c:8f:89:
c8:33:6f:44:df:ce:05:96:21:a6:8b:57:c5:6f:da:6c:35:ba:
ad:05:56:4e:2f:02:a8:ff:38:65:c8:e9:0e:c9:73:80:a3:85:
a2:6c:a7:d3:a1:00:5f:d3:97:0f:96:4d:ef:d7:66:61:3a:e5:
75:de:8f:26:66:6d:46:d9:91:b6:62:b5:7c:6a:27:68:11:2a:
20:dd:a0:18:04:fd:61:0d:3e:c5:a6:6b:16:17:2b:a2:c3:22:
aa:10:4b:56:41:85:ab:b7:e8:de:86:c4:3b:e0:60:1a:a3:12:
fb:af:18:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:28:43 2026 by rpki-client