Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
File: cxU1ourrxowWV6r89aeIyHUdm2I.mft (raw, json)
Hash identifier: x3XRKXpPIzIu1Ejbzi+sM0ze3kFLtE3if/aei7AnlCU=
Subject key identifier: FD:46:67:74:D9:BF:B5:59:CE:80:D4:3C:25:D1:D6:7B:69:FD:CB:81
Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Certificate serial: 019E4FC6694DCFEBB3360BB58FB640A7DB71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
Manifest number: 17FC
Signing time: Fri 22 May 2026 13:01:03 +0000
Manifest this update: Fri 22 May 2026 13:01:03 +0000
Manifest next update: Sat 23 May 2026 13:01:03 +0000
Files and hashes: 1: KFAbKKe7jo2XjrWvMFjbhME-DXc.roa (hash: 4OtvIQVEiPvcGG7i9r46Rvs1hJ/uhdVoDzjyfUfIYZk=)
2: TMosgBiabWiuRyi5Ssatcr00sSE.roa (hash: F+7FnUFFY40UIl2jFbgxyGZqPlinYg7PSVeRNWNABjs=)
3: cxU1ourrxowWV6r89aeIyHUdm2I.crl (hash: HOKoUdR5E4+l+fGIR9pZlDR7QnJXL2S1T9XclAMCrM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:c6:69:4d:cf:eb:b3:36:0b:b5:8f:b6:40:a7:db:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Validity
Not Before: May 22 13:01:03 2026 GMT
Not After : May 23 13:01:03 2026 GMT
Subject: CN=fd466774d9bfb559ce80d43c25d1d67b69fdcb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:34:48:28:e4:57:f3:9f:30:02:fc:8a:83:
f7:e7:26:2a:69:62:5d:d2:b7:ba:96:14:b9:23:47:
79:f7:a6:bf:ca:a0:77:fe:d2:5f:19:8e:91:0e:a4:
7e:4f:dc:0e:b6:16:6b:b0:5b:76:12:d2:db:24:27:
4b:3e:8c:da:94:fd:9b:14:00:a2:d1:61:46:4e:c5:
dc:99:bf:ab:b0:69:36:1b:3f:07:5b:5c:30:a0:eb:
64:0f:ec:e4:8f:8a:93:c8:09:f5:a7:aa:0a:c4:e7:
60:44:0d:2b:3f:7d:32:9f:cc:15:be:59:56:14:d8:
dc:c5:f1:c2:14:9e:eb:cd:2e:79:6b:f9:33:a7:71:
92:a1:bf:49:16:d7:a2:c7:d3:e9:38:73:00:0e:93:
35:f8:dc:d6:c7:b2:3d:17:6c:47:5c:d2:db:4b:39:
3b:63:eb:3a:85:f7:f9:0b:9c:67:77:4d:ed:ce:58:
ae:9e:16:72:53:bb:16:d3:c5:c1:45:59:4a:7e:ac:
30:15:9f:4f:cc:f9:9f:9d:bc:67:79:63:a8:19:f0:
6f:78:74:9b:ef:17:20:27:94:44:08:bd:15:3a:ed:
27:c0:62:8b:f3:06:8c:a4:eb:23:91:c2:ba:6b:7f:
fa:f5:c6:1f:8c:3a:05:67:17:78:68:a8:b6:4b:c6:
cf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:46:67:74:D9:BF:B5:59:CE:80:D4:3C:25:D1:D6:7B:69:FD:CB:81
X509v3 Authority Key Identifier:
keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8e:a5:54:54:4c:18:f8:f6:85:43:07:23:a2:d7:94:a8:25:
db:d0:fe:69:58:2b:bf:8c:d9:13:61:3f:2e:ea:d1:34:4a:8d:
93:0b:3f:fd:a8:e8:4e:3d:49:22:da:9b:74:e6:c1:8f:41:5c:
00:f9:ad:0f:2a:d4:ac:67:b6:37:45:b6:9a:62:50:4a:2f:9d:
b6:21:66:1e:2d:c1:21:0f:58:2b:50:f7:66:c5:af:35:ee:b9:
e9:8f:35:36:2d:eb:23:88:14:06:4f:5f:9d:ad:21:ec:df:dd:
b2:5a:9e:27:4b:0c:0c:78:7e:26:a8:42:1a:9a:ed:9b:35:47:
0e:cb:e3:b7:c6:45:b9:aa:9f:00:dd:b7:49:5d:69:bd:6b:5d:
65:5c:ae:5f:3a:9f:d1:e4:fd:89:9e:00:88:eb:2c:fe:32:85:
65:0d:34:5b:9b:d6:19:b4:4b:85:c6:52:6f:f8:2d:b2:9a:ba:
8b:a4:ca:69:04:8a:3c:2f:ff:47:f7:7c:2d:86:ea:a6:db:e9:
ea:0c:eb:56:bb:7a:b8:38:4f:e4:17:fe:1e:63:8c:ac:55:b2:
5c:91:12:91:b2:ec:90:ca:a3:62:d2:7d:e1:45:82:e6:55:7d:
e2:42:e5:c5:a5:a7:4b:1a:a3:98:cb:27:da:c3:81:11:00:2c:
9d:32:5d:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5PxmlNz+uzNgu1j7ZAp9txMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMTUzNWEyZWFlYmM2OGMxNjU3YWFmY2Y1YTc4OGM4NzUx
ZDliNjIwHhcNMjYwNTIyMTMwMTAzWhcNMjYwNTIzMTMwMTAzWjAzMTEwLwYDVQQD
EyhmZDQ2Njc3NGQ5YmZiNTU5Y2U4MGQ0M2MyNWQxZDY3YjY5ZmRjYjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt280SCjkV/OfMAL8ioP35yYqaWJd
0re6lhS5I0d596a/yqB3/tJfGY6RDqR+T9wOthZrsFt2EtLbJCdLPozalP2bFACi
0WFGTsXcmb+rsGk2Gz8HW1wwoOtkD+zkj4qTyAn1p6oKxOdgRA0rP30yn8wVvllW
FNjcxfHCFJ7rzS55a/kzp3GSob9JFteix9PpOHMADpM1+NzWx7I9F2xHXNLbSzk7
Y+s6hff5C5xnd03tzliunhZyU7sW08XBRVlKfqwwFZ9PzPmfnbxneWOoGfBveHSb
7xcgJ5RECL0VOu0nwGKL8waMpOsjkcK6a3/69cYfjDoFZxd4aKi2S8bP1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1GZ3TZv7VZzoDUPCXR1ntp/cuBMB8GA1UdIwQY
MBaAFHMVNaLq68aMFleq/PWniMh1HZtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85NjIwY2UtNDNmMC00MmJjLWFmNTkt
NDM1YmRhNWJkMDQ4LzEvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85NjIwY2UtNDNmMC00MmJjLWFmNTktNDM1YmRhNWJkMDQ4
LzEvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADY6lVFRM
GPj2hUMHI6LXlKgl29D+aVgrv4zZE2E/LurRNEqNkws//ajoTj1JItqbdObBj0Fc
APmtDyrUrGe2N0W2mmJQSi+dtiFmHi3BIQ9YK1D3ZsWvNe656Y81Ni3rI4gUBk9f
na0h7N/dslqeJ0sMDHh+JqhCGprtmzVHDsvjt8ZFuaqfAN23SV1pvWtdZVyuXzqf
0eT9iZ4AiOss/jKFZQ00W5vWGbRLhcZSb/gtspq6i6TKaQSKPC//R/d8LYbqptvp
6gzrVrt6uDhP5Bf+HmOMrFWyXJESkbLskMqjYtJ94UWC5lV94kLlxaWnSxqjmMsn
2sOBEQAsnTJdmQ==
-----END CERTIFICATE-----
Generated at Fri May 22 15:12:02 2026 by rpki-client