Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
File: CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft (raw, json)
Hash identifier: rSD9kZ0yYPFIrNsalraoOqnJzDZap0SuBKpPGT6siXo=
Subject key identifier: 4B:2F:E1:6E:CF:21:D6:95:AD:19:0D:A1:85:02:81:AC:08:82:87:88
Authority key identifier: 09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90
Certificate issuer: /CN=097b5d1490b385a2f80c2a0324fe98e351091490
Certificate serial: 019D3AC1B89ADFE4EF5299E67AD83ED15275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
Manifest number: 0A54
Signing time: Sun 29 Mar 2026 18:01:07 +0000
Manifest this update: Sun 29 Mar 2026 18:01:07 +0000
Manifest next update: Mon 30 Mar 2026 18:01:07 +0000
Files and hashes: 1: CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl (hash: sa56SSALm5DLln/WQ2FK/lIB8RrpDDIuXEud1Phq5gQ=)
2: bLCakBk74vA_pvVpNhXg4pCbVXw.roa (hash: GBhXQa+nuToOfYjhvINVNifJDhn+gqtN3QAytiiva2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:b8:9a:df:e4:ef:52:99:e6:7a:d8:3e:d1:52:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097b5d1490b385a2f80c2a0324fe98e351091490
Validity
Not Before: Mar 29 18:01:07 2026 GMT
Not After : Mar 30 18:01:07 2026 GMT
Subject: CN=4b2fe16ecf21d695ad190da1850281ac08828788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:18:da:a7:bf:dd:26:b1:88:70:0b:08:7b:f1:
60:79:e7:d1:c1:0e:2c:bc:4d:21:42:1a:8e:2d:a0:
9e:42:6f:4a:c4:9b:28:b7:da:cf:e6:81:5a:dc:c2:
40:13:be:7b:31:82:04:9b:d1:19:7f:11:68:3c:cb:
be:68:ba:47:da:5f:e6:63:3e:4f:23:f1:bf:22:45:
ee:4f:a0:38:ed:b6:9c:02:42:16:51:a2:60:12:77:
77:bf:ab:8b:f4:e7:85:75:c8:8e:75:f3:2b:2a:89:
01:2a:e9:ef:2a:3c:84:a5:11:ba:37:08:66:b8:00:
97:40:91:39:b2:b7:45:61:cd:77:bf:3f:c8:86:cd:
cd:9a:af:21:cb:88:48:1d:e1:03:06:7b:d7:6d:47:
0d:bd:15:8e:94:46:86:ce:35:5f:47:bd:41:25:04:
f5:06:99:81:58:8e:d1:1c:ae:b5:2b:2b:c5:d4:d6:
17:5f:e9:20:ad:57:39:2d:f0:b7:9c:b9:62:04:b2:
e5:08:46:f2:db:b9:e7:95:9f:fb:18:af:af:70:92:
de:b6:24:8d:84:72:cc:f2:59:79:25:a6:5e:bc:4c:
b6:95:69:af:19:b8:86:43:a7:bd:6c:a6:17:5a:49:
60:a2:91:7d:6f:6b:1f:6c:14:bb:10:2b:43:af:a8:
82:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2F:E1:6E:CF:21:D6:95:AD:19:0D:A1:85:02:81:AC:08:82:87:88
X509v3 Authority Key Identifier:
keyid:09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:06:6f:cf:04:a9:02:e8:39:b6:97:a3:6d:26:d1:69:cb:43:
cf:ef:e0:c9:1f:5c:ab:62:a5:93:a8:06:88:cd:fc:d7:c9:e3:
79:4c:a6:3b:58:6b:d2:cc:38:eb:dd:87:ce:63:18:ad:3f:80:
54:47:e8:9c:e1:da:2d:7a:dd:09:55:7a:39:19:d2:5a:03:a2:
a4:b3:0f:0b:f8:a2:46:11:18:19:0c:9d:46:3a:ee:96:79:4f:
3b:d5:98:38:f9:3d:c0:46:d6:e3:a2:e0:82:13:41:e6:dc:36:
45:77:da:64:0d:a4:97:0e:89:bb:13:8b:53:a0:74:41:74:0e:
a1:3b:6d:e2:0c:24:83:fc:fc:4f:62:61:38:56:62:16:76:21:
79:40:1e:be:e7:9e:cc:5c:5e:99:59:54:80:0a:69:aa:f4:59:
59:32:6c:fb:b6:fa:62:1f:d3:cf:40:b5:bd:cd:fa:0a:71:41:
1f:2f:46:f5:f0:8c:0c:b3:b1:27:53:68:26:4a:2b:5b:a9:dd:
a9:95:00:44:20:40:c3:e3:71:82:d7:f7:7e:50:8f:b1:52:56:
95:9c:da:8c:13:f4:13:9d:c3:3c:8a:b7:08:c1:49:25:ab:75:
2a:71:9d:ee:9f:43:8b:3e:41:e0:6d:c2:57:6c:17:ca:5f:a4:
f4:89:e3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:14 2026 by rpki-client