Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
File: cX9V88YAexy91-ggiQVpAGdXs2Y.mft (raw, json)
Hash identifier: 5IjUj7INiLkRNjFgvG6yiLWoMm8PD3BPpeLgIg18jME=
Subject key identifier: 8E:FC:12:2E:18:A9:A9:6D:C6:17:34:77:CA:88:E5:55:EF:61:43:49
Authority key identifier: 71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
Certificate issuer: /CN=717f55f3c6007b1cbdd7e820890569006757b366
Certificate serial: 019D37F78352F540A786CE0116DFC0B5E5C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
Manifest number: 101E
Signing time: Sun 29 Mar 2026 05:01:00 +0000
Manifest this update: Sun 29 Mar 2026 05:01:00 +0000
Manifest next update: Mon 30 Mar 2026 05:01:00 +0000
Files and hashes: 1: cX9V88YAexy91-ggiQVpAGdXs2Y.crl (hash: zERJAI8uX6NwHiPx90M/aYbbf/7sA8SVTKlRzKtLnDE=)
2: i8xykzfXObXiYe0nF3-u7FcaSaM.roa (hash: 7kAYFe+z6uJVDL+1WvFsLbVtFfckz0T9S9Vl/sKw0KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:83:52:f5:40:a7:86:ce:01:16:df:c0:b5:e5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=717f55f3c6007b1cbdd7e820890569006757b366
Validity
Not Before: Mar 29 05:01:00 2026 GMT
Not After : Mar 30 05:01:00 2026 GMT
Subject: CN=8efc122e18a9a96dc6173477ca88e555ef614349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6f:d2:ed:47:01:ba:e5:07:04:c7:f5:a5:9e:
16:72:1f:1b:81:e3:ce:46:5f:11:f8:79:27:48:f2:
8b:44:a5:17:6b:29:89:a8:25:7d:d0:97:27:11:a0:
37:cc:b6:ba:85:83:ff:c3:41:c1:b7:ed:36:4d:df:
81:d9:2f:3a:c3:15:22:1d:c5:73:23:bc:7b:07:66:
21:5d:3e:7f:0d:a9:de:0e:18:de:4d:20:f9:78:c9:
cb:23:1d:8b:d7:c4:b2:47:c7:32:76:bc:0e:6f:a0:
75:7c:fa:b4:17:84:26:6f:a3:4a:52:fe:11:5f:28:
79:61:48:83:b8:f1:29:f7:09:f4:ff:1f:bc:ff:42:
a3:2e:f7:02:01:13:bd:08:d6:3f:b9:44:52:32:9a:
f1:e9:57:ae:3a:8d:4e:c4:f2:5f:1f:97:43:db:1f:
a4:d3:b0:aa:15:35:2a:b6:61:48:cf:a8:de:07:41:
60:19:9c:69:b1:de:6f:fe:b4:33:07:bc:e1:d3:33:
50:ae:7f:6d:2c:f9:9b:ed:70:64:0b:82:2c:ff:a7:
74:91:8f:f0:1a:05:9c:29:d9:c2:c5:db:f7:7e:02:
cc:6a:e9:a0:74:b0:ae:5f:79:c4:f5:ce:05:0e:a5:
52:cd:5a:a8:cf:c0:0d:19:ae:55:02:1e:03:4a:43:
e1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FC:12:2E:18:A9:A9:6D:C6:17:34:77:CA:88:E5:55:EF:61:43:49
X509v3 Authority Key Identifier:
keyid:71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d5:42:94:e5:0c:22:76:4c:dc:70:c4:fa:f7:5f:7f:fc:46:
b5:e1:5a:9b:25:ed:cb:48:42:5d:97:1d:a4:ab:d8:a2:99:82:
18:3b:1f:2a:da:27:88:5e:6f:59:85:d6:d3:a3:00:8f:6b:0a:
33:2a:ac:bd:a7:66:45:76:33:83:2b:38:a6:6f:23:d3:c7:f0:
8b:8b:2b:25:91:a9:de:16:91:7c:00:c0:32:68:21:f9:9b:3f:
8c:7a:8a:fe:05:43:09:c6:70:29:0a:c6:12:ee:5a:02:da:e9:
cf:a6:03:8a:8d:3d:27:07:84:99:74:d5:47:a1:ea:77:cf:0a:
c2:fa:cb:ee:4a:4a:5e:b9:c0:fa:6f:26:3e:0f:76:bf:d4:05:
22:3f:37:84:90:7f:15:43:b8:c7:04:8e:73:bc:2d:c9:4f:12:
c3:d3:9d:ac:49:c9:4c:c5:3d:f4:5e:6e:d9:eb:54:1f:e2:76:
95:f6:49:5f:11:52:bb:86:06:63:97:1f:11:f5:6c:c0:6c:01:
52:66:e2:f6:70:ac:84:9a:65:36:9c:ce:e5:8d:f4:47:d3:15:
7b:1a:87:cb:0a:36:82:52:01:74:b3:87:85:8f:03:d7:db:a7:
00:96:c4:c8:6f:05:8c:d1:08:98:bc:99:f4:c4:d0:6b:b2:96:
20:19:da:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:14 2026 by rpki-client