Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
File: cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft (raw, json)
Hash identifier: Ry8maHLncBfYmDv6fxGr5NORzxElAbl7d/PlSwg7cLE=
Subject key identifier: 1A:83:7F:82:D6:77:A1:0F:65:B4:EB:E4:FE:9F:D1:D7:D8:6E:58:A5
Authority key identifier: 73:18:9D:26:BA:E7:F8:5C:B4:E0:6A:B5:AB:53:6D:E5:A8:0C:16:A1
Certificate issuer: /CN=73189d26bae7f85cb4e06ab5ab536de5a80c16a1
Certificate serial: 01A08C439A82A2828413DDDEF2C1B708AFFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 17:00:35 +0000
Manifest this update: Thu 10 Sep 2026 17:00:35 +0000
Manifest next update: Fri 11 Sep 2026 17:00:35 +0000
Files and hashes: 1: StxoWp_RJ1797k0oHsjoVvZHf10.roa (hash: nD5a2Jb4fZiufTRyTRxdHS8BCxtbGh40rJHL37nPIac=)
2: cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl (hash: DR5H0vVNfQQ4abLyRPq/jFnbYss1+0EZJi6g54B6Smw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:9a:82:a2:82:84:13:dd:de:f2:c1:b7:08:af:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73189d26bae7f85cb4e06ab5ab536de5a80c16a1
Validity
Not Before: Sep 10 17:00:35 2026 GMT
Not After : Sep 11 17:00:35 2026 GMT
Subject: CN=1a837f82d677a10f65b4ebe4fe9fd1d7d86e58a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:5d:4e:b1:14:3a:23:d1:97:16:10:b9:bc:
8a:e3:96:de:1a:af:75:7d:63:45:35:0e:26:0b:cb:
7b:b9:01:20:8d:af:27:e1:ab:01:b7:9d:03:ab:d1:
5f:b8:41:5f:e2:61:98:0b:d5:c0:5b:8c:2b:85:21:
00:5b:e6:bf:df:76:8c:6f:a0:f5:84:51:ce:74:6e:
02:0e:60:18:ac:40:09:21:8d:f3:93:60:93:ee:19:
2b:fc:2c:b8:0a:f2:7f:13:b8:da:5c:6d:43:3c:7e:
9e:18:b7:17:95:47:0c:ad:b6:c3:30:c0:20:ca:69:
36:3b:88:b1:03:b4:89:38:e4:eb:8b:da:11:2b:bd:
d0:da:64:4d:1b:62:a8:17:0b:45:6c:d5:ad:1c:68:
d7:17:ee:71:6d:31:3e:db:f8:6e:ef:da:ce:34:a1:
16:80:a8:7d:e5:05:c5:e6:22:50:0c:0a:cf:aa:48:
8e:ed:66:d9:ea:01:64:1d:10:5a:f2:d9:e0:78:04:
a4:a3:c1:1a:b2:0a:cb:56:5f:1d:be:eb:71:65:8c:
10:86:57:54:21:be:41:23:08:ad:55:d9:f3:82:ec:
ab:66:f4:df:e2:13:58:9c:52:5b:3b:76:da:85:2b:
67:dd:a5:09:51:42:9c:f0:f2:31:38:40:44:86:02:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:83:7F:82:D6:77:A1:0F:65:B4:EB:E4:FE:9F:D1:D7:D8:6E:58:A5
X509v3 Authority Key Identifier:
keyid:73:18:9D:26:BA:E7:F8:5C:B4:E0:6A:B5:AB:53:6D:E5:A8:0C:16:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4f:27:c2:12:0f:49:76:70:9b:c9:70:1f:f8:b6:53:95:a7:
ec:5b:db:9d:da:67:4c:31:63:73:18:c7:b6:af:19:4d:ef:ad:
13:cf:eb:1b:cf:72:51:92:49:db:4c:63:df:02:f6:9e:de:b4:
2f:86:dd:4c:53:6d:ff:fb:17:fd:ab:b4:20:ac:a3:84:32:58:
e4:a0:b3:be:0f:c9:41:3a:8e:a5:2a:e6:a7:36:01:a6:27:2e:
c2:fc:62:dd:8b:4d:bf:34:bf:b8:bb:1c:3c:03:bd:91:eb:ed:
1c:fc:f9:a9:21:ba:8b:54:eb:c9:44:17:29:d0:10:48:fa:b4:
df:11:97:38:52:f9:64:1f:2c:75:6d:d8:e7:ef:f6:f5:2d:32:
25:e6:57:3c:41:02:37:42:21:a8:e3:ae:30:a1:59:c0:c0:c6:
d6:44:f8:d1:c0:73:77:e5:38:d8:e4:8a:24:cb:12:90:84:e4:
53:cb:cb:28:84:9e:82:9e:45:c3:8a:f8:f9:85:6a:bb:a2:db:
b4:9e:c5:f1:b0:a0:31:cc:22:47:3e:19:32:c7:f4:d7:74:59:
08:aa:40:1d:49:1b:64:d1:f3:0e:b0:aa:99:6c:90:19:a3:77:
ba:91:6c:58:9e:5f:fb:07:07:b0:31:bc:4e:cb:3b:c5:78:3d:
53:db:b9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:13:42 2026 by rpki-client