Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
File: cxU1ourrxowWV6r89aeIyHUdm2I.mft (raw, json)
Hash identifier: h0HVWUpsaLkiKnpMsvzRb89QvASvKK611FN0794RXvg=
Subject key identifier: AA:B5:34:5C:5F:56:64:2C:FA:29:45:23:31:05:D8:13:DA:07:BC:49
Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Certificate serial: 01A11E2D68A3B63F5072C6579996BCD5E56D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
Manifest number: 1970
Signing time: Fri 09 Oct 2026 01:00:54 +0000
Manifest this update: Fri 09 Oct 2026 01:00:54 +0000
Manifest next update: Sat 10 Oct 2026 01:00:54 +0000
Files and hashes: 1: KFAbKKe7jo2XjrWvMFjbhME-DXc.roa (hash: 4OtvIQVEiPvcGG7i9r46Rvs1hJ/uhdVoDzjyfUfIYZk=)
2: TMosgBiabWiuRyi5Ssatcr00sSE.roa (hash: F+7FnUFFY40UIl2jFbgxyGZqPlinYg7PSVeRNWNABjs=)
3: cxU1ourrxowWV6r89aeIyHUdm2I.crl (hash: 18J25pDrNegIn63i58eyfuhJ5pz9qhLkXW3CDI0FYR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 22:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:2d:68:a3:b6:3f:50:72:c6:57:99:96:bc:d5:e5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Validity
Not Before: Oct 9 01:00:54 2026 GMT
Not After : Oct 10 01:00:54 2026 GMT
Subject: CN=aab5345c5f56642cfa2945233105d813da07bc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:db:d2:63:94:10:fc:1e:5a:1a:27:b4:c7:
d2:65:a1:2d:77:c2:a5:eb:5d:84:6c:46:0a:3f:c6:
29:29:32:41:43:dc:17:9d:24:df:e8:98:f3:60:56:
58:b6:1e:b3:b2:30:cd:fd:30:16:97:1e:c5:0d:57:
90:94:1b:c6:ad:86:3a:bc:5d:e1:43:49:03:a9:c6:
94:b6:da:52:00:4f:e5:57:7d:14:80:e8:bf:03:8f:
65:b3:88:fa:46:28:67:f1:0c:00:2f:fa:92:ed:bf:
ee:b0:34:f3:d0:7f:5f:d1:2e:42:9a:3a:b5:b9:3f:
c4:a3:85:6a:cc:61:6d:da:27:9b:aa:bc:ef:41:a8:
ce:88:78:8c:82:b2:5d:17:fa:75:93:ff:b0:2c:53:
b9:07:3b:59:d0:89:8a:a2:c9:00:fc:be:86:16:da:
6f:b5:3f:00:a0:ac:f8:05:d8:3f:88:9a:bd:d5:cb:
75:60:91:de:4e:15:02:67:93:1e:9e:c3:40:10:4e:
a5:95:d5:c2:67:a2:ef:7e:8c:ce:d6:43:00:d2:70:
37:57:2e:9e:8e:a5:0b:50:bd:cb:66:03:f8:9b:68:
50:a9:fd:fc:33:f5:cc:b9:97:73:e0:ce:5c:b3:96:
8c:f0:2b:0d:11:90:bb:db:77:d3:16:1b:ee:9f:e8:
9b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B5:34:5C:5F:56:64:2C:FA:29:45:23:31:05:D8:13:DA:07:BC:49
X509v3 Authority Key Identifier:
keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7d:cf:a9:49:a3:32:4e:63:35:ac:2e:09:4d:8f:ce:5a:d6:
ba:48:33:a4:e4:63:b4:fa:12:ff:bb:58:7c:dd:27:9b:ac:dd:
c2:17:12:5a:b5:19:6b:9f:66:34:fb:4d:e8:dd:c0:a6:36:03:
1a:7e:d6:19:92:ac:f2:c7:2e:fc:67:41:2c:12:a9:52:a5:3e:
0a:9f:8c:ea:c2:bd:e9:07:40:10:59:ea:a7:31:f8:e8:38:2e:
24:44:e8:e6:1b:19:72:22:21:89:52:f7:8b:49:a7:e7:52:7a:
1d:30:33:c6:f2:d5:da:5e:c3:b8:3b:49:8d:71:5d:12:1a:56:
bf:02:44:35:fa:ea:69:7e:73:f8:28:22:46:47:ad:9d:70:6b:
2a:8d:7e:71:34:9b:18:73:cd:1a:77:42:83:a0:38:51:1a:6b:
3e:6c:62:f1:06:c4:f6:0d:d0:5d:63:dd:71:25:fb:46:8a:8c:
9f:62:23:ab:e0:03:58:01:cd:a8:b6:e3:48:4a:e8:55:a2:fa:
6f:5a:30:2b:86:38:73:5f:7e:0e:58:a9:b2:4d:52:f3:fd:a2:
3e:42:1c:fb:e5:c8:84:ff:e9:44:82:c4:ff:1e:57:45:3c:ab:
eb:09:a4:c9:1a:75:b6:9d:33:4f:d1:38:d9:1c:12:4e:ad:f7:
8f:79:f3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 08:22:11 2026 by rpki-client