Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
File: CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft (raw, json)
Hash identifier: BTVHgQ61c15BR5uwcRnr//Nqgaw+KtpcSsCsWynrW8Q=
Subject key identifier: 29:23:B6:B8:6C:1F:31:91:59:B2:9B:98:DD:27:A4:7D:C8:67:51:D2
Authority key identifier: 09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90
Certificate issuer: /CN=097b5d1490b385a2f80c2a0324fe98e351091490
Certificate serial: 019E2A3982664F9F34E34D1847684352EB04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
Manifest number: 0AD0
Signing time: Fri 15 May 2026 06:01:12 +0000
Manifest this update: Fri 15 May 2026 06:01:12 +0000
Manifest next update: Sat 16 May 2026 06:01:12 +0000
Files and hashes: 1: CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl (hash: wCnueFafXY+COzKnz0AcGzMDLlhW0koAKlJmgI4nYyk=)
2: bLCakBk74vA_pvVpNhXg4pCbVXw.roa (hash: GBhXQa+nuToOfYjhvINVNifJDhn+gqtN3QAytiiva2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:39:82:66:4f:9f:34:e3:4d:18:47:68:43:52:eb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097b5d1490b385a2f80c2a0324fe98e351091490
Validity
Not Before: May 15 06:01:12 2026 GMT
Not After : May 16 06:01:12 2026 GMT
Subject: CN=2923b6b86c1f319159b29b98dd27a47dc86751d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:10:30:12:cb:cc:c3:82:4c:69:9e:b9:0c:
d1:8a:e5:27:63:f5:2b:68:80:28:2f:a8:e8:91:f2:
9d:b6:3e:6c:fd:a9:83:51:6c:6a:e7:d2:ce:e8:b7:
c5:80:89:0a:1a:f9:f8:8c:13:d2:c4:22:23:3a:2a:
2c:83:b1:cc:a3:1f:97:c2:3d:e3:15:07:a8:cb:c6:
b1:a7:89:07:39:0c:28:d4:ee:b2:88:de:44:71:4a:
0d:41:1c:c8:bd:28:59:78:ed:75:0c:70:61:1d:f1:
db:b9:d4:57:ec:90:96:2e:f5:00:17:94:e6:47:ef:
58:10:00:86:76:ad:41:e5:a1:76:a6:d2:65:3e:12:
fa:10:bc:02:f1:a0:4c:e5:44:a9:ea:7a:b4:ed:91:
a9:b3:c2:b7:60:f4:64:c9:46:ee:eb:34:ce:7d:fc:
b1:ce:63:26:61:5a:50:65:32:58:47:25:3e:cb:4c:
e6:ee:d5:4c:b8:1e:6f:cb:06:39:6b:52:16:87:7e:
99:0d:d1:e7:09:e6:bd:83:e7:36:23:72:e7:88:42:
a0:0d:14:07:e4:7e:c9:ed:d0:0b:08:5e:4d:57:fe:
c0:32:bb:83:1c:8d:e4:86:aa:96:95:85:79:ad:37:
95:a3:c4:51:9f:f9:ba:07:a4:97:2a:0e:c7:c2:95:
50:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:23:B6:B8:6C:1F:31:91:59:B2:9B:98:DD:27:A4:7D:C8:67:51:D2
X509v3 Authority Key Identifier:
keyid:09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:36:13:3c:ff:aa:47:fe:c9:3c:cb:90:75:8a:1d:e4:00:d9:
9e:18:be:52:09:97:8e:2f:26:42:7d:14:ce:84:f5:7e:2b:af:
6d:80:58:2c:ef:d5:f2:16:1e:58:1c:09:d1:d0:0a:ce:b8:2b:
c1:6a:79:03:17:7c:be:7c:e8:21:74:79:e8:56:b8:79:7b:2d:
e7:5d:45:34:d5:41:47:d3:01:da:90:8f:9f:1a:38:e7:b4:d4:
68:7b:5a:37:fb:75:43:20:02:8a:c6:7f:e9:3b:b6:8c:18:1b:
14:12:6b:ab:5b:1d:9d:8b:15:1c:a0:d8:3f:55:d3:7c:5a:a1:
80:c9:8f:cf:01:de:99:a2:d2:bd:e0:19:a3:f3:07:24:58:82:
9b:22:d5:b9:ec:36:cf:2b:b9:b5:a0:bd:3d:1f:e3:e6:47:eb:
80:b3:f6:86:ab:9a:25:aa:2b:1d:df:30:01:36:ef:4a:d4:9f:
f5:ff:94:16:f2:5b:83:6e:01:da:bd:aa:73:b8:5d:7c:bf:18:
0c:39:c7:6a:5a:4e:f6:8d:1f:69:97:17:4a:a3:33:07:85:36:
61:4e:1b:47:4a:3f:ed:05:9e:f4:50:68:00:3d:77:36:7f:11:
e9:25:ea:39:2c:0c:df:7f:a1:e3:2b:18:3b:5f:40:df:64:e2:
87:a4:ce:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 12:43:23 2026 by rpki-client