Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
File: cxU1ourrxowWV6r89aeIyHUdm2I.mft (raw, json)
Hash identifier: XXnc6nC5gnabGcVVEOEw9sz1mby1mdLp7iwOgqHScgg=
Subject key identifier: A8:DE:BE:37:CB:CC:D9:6E:DE:84:CE:B1:15:3A:74:DE:F8:85:14:88
Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Certificate serial: 019F3784EE192BADBC5948C6B8B537190551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
Manifest number: 1874
Signing time: Mon 06 Jul 2026 13:01:26 +0000
Manifest this update: Mon 06 Jul 2026 13:01:26 +0000
Manifest next update: Tue 07 Jul 2026 13:01:26 +0000
Files and hashes: 1: KFAbKKe7jo2XjrWvMFjbhME-DXc.roa (hash: 4OtvIQVEiPvcGG7i9r46Rvs1hJ/uhdVoDzjyfUfIYZk=)
2: TMosgBiabWiuRyi5Ssatcr00sSE.roa (hash: F+7FnUFFY40UIl2jFbgxyGZqPlinYg7PSVeRNWNABjs=)
3: cxU1ourrxowWV6r89aeIyHUdm2I.crl (hash: Sm7bXQaL08nfbQzVVlqEEhM8H+fc7sgvANHJZvhF2Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:84:ee:19:2b:ad:bc:59:48:c6:b8:b5:37:19:05:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Validity
Not Before: Jul 6 13:01:26 2026 GMT
Not After : Jul 7 13:01:26 2026 GMT
Subject: CN=a8debe37cbccd96ede84ceb1153a74def8851488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:3b:a3:6e:6c:75:7e:f2:29:e3:2e:b8:3e:
81:29:72:ed:d2:c8:80:bd:94:94:9a:9e:b1:eb:43:
a4:7f:b7:22:19:ae:67:11:d8:af:00:e5:5e:4a:f9:
a9:03:89:96:c4:1d:b6:39:b5:dd:9a:f6:58:aa:f9:
84:ab:80:9f:d1:4c:2b:46:2d:22:21:78:23:ed:96:
f3:9e:08:93:ee:ec:09:a4:91:91:7e:a8:14:25:1d:
38:f6:04:a9:9e:c0:1f:b1:3f:fe:05:64:c8:87:cc:
f5:49:82:03:76:df:a1:8d:2b:bd:64:ec:80:40:d4:
4c:d8:fe:ac:69:d2:69:91:03:a8:15:53:1b:6c:ca:
52:f4:a6:a4:61:a5:dc:92:16:bb:68:d1:77:37:82:
a9:54:ad:10:1a:9d:26:1c:d9:1d:cb:e0:5b:75:27:
2c:2d:13:28:81:ad:13:4a:69:c2:e1:22:c9:0d:47:
c3:62:ae:4c:d1:7c:8b:cb:3c:bf:1d:c1:88:ff:11:
9b:7a:46:bd:0e:ae:c4:c1:62:9b:ea:50:9b:9c:ec:
8e:98:8b:49:ed:c9:2d:4c:a6:c4:fe:a0:96:70:57:
b1:76:0d:2f:fa:27:f7:a4:90:d2:7f:88:12:36:b1:
75:3d:2b:b3:8b:b3:4a:04:ea:08:52:4a:18:d0:2e:
dc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DE:BE:37:CB:CC:D9:6E:DE:84:CE:B1:15:3A:74:DE:F8:85:14:88
X509v3 Authority Key Identifier:
keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:af:35:b3:92:e5:45:34:2e:fc:67:38:d3:45:da:fe:3c:34:
64:63:e6:0b:0e:38:32:16:9c:19:c9:49:a9:f5:ed:9c:da:cd:
16:2f:e0:7c:a1:10:f1:aa:be:fa:3e:03:26:86:70:72:14:20:
b7:26:2d:ea:8b:15:f3:38:38:6e:96:82:4f:28:b5:05:f6:cb:
ed:a7:ec:95:20:f7:9d:df:7e:39:8e:30:8b:b7:00:0e:97:9b:
d7:8c:83:1e:8b:f0:7e:58:1c:15:24:aa:5e:d2:51:e9:46:53:
bf:a5:34:f6:f2:6d:d1:ed:b6:8c:ab:d2:76:1b:db:31:ca:76:
fe:07:14:0e:b2:a9:d9:4c:c8:73:c3:b1:36:ff:09:51:2c:a1:
87:b4:00:53:bd:3e:7e:10:3d:fb:bd:26:fe:65:c7:b6:d1:07:
83:e2:d1:f3:4b:e9:65:92:77:a5:bf:04:ad:db:1a:ed:2b:80:
ee:1e:5b:8b:21:ca:7a:44:d8:38:0b:d0:d1:bc:36:a3:2b:b1:
d0:e3:37:c8:87:2a:35:ce:32:73:96:f0:c1:a1:28:d1:c3:d2:
79:97:97:2e:33:f9:8c:cc:7e:07:9f:e5:99:3f:84:4e:5a:78:
76:b0:7b:a4:6e:ab:71:ab:c9:61:88:bb:b8:65:e3:8f:3d:b4:
2b:69:29:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:13:00 2026 by rpki-client