Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/Cx9B-WxYsltjTex9KqX1FtLYVZQ.mft
File: Cx9B-WxYsltjTex9KqX1FtLYVZQ.mft (raw, json)
Hash identifier: bb1/mZlqxkMiAAq09CAOAcBNGNXwvThdW75VC7lYpk0=
Subject key identifier: 5F:C5:60:EA:5C:D1:8E:F0:52:D8:D7:C0:56:1E:93:49:B5:7E:00:4B
Authority key identifier: 0B:1F:41:F9:6C:58:B2:5B:63:4D:EC:7D:2A:A5:F5:16:D2:D8:55:94
Certificate issuer: /CN=0b1f41f96c58b25b634dec7d2aa5f516d2d85594
Certificate serial: 01A15930386336CBF84205BC254AB2BE01F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx9B-WxYsltjTex9KqX1FtLYVZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/Cx9B-WxYsltjTex9KqX1FtLYVZQ.mft
Manifest number: 012C
Signing time: Tue 20 Oct 2026 12:01:34 +0000
Manifest this update: Tue 20 Oct 2026 12:01:34 +0000
Manifest next update: Wed 21 Oct 2026 12:01:34 +0000
Files and hashes: 1: 0Il0hGQus6JFrI28dhOelMSkxAo.roa (hash: 229pizDgAWKKq44Ig1yRqRrjbGCQ9KdVQEjYQSFdDNw=)
2: Cx9B-WxYsltjTex9KqX1FtLYVZQ.crl (hash: htN7UKYybxrNeaP9hF3UBUumJFqZXhmf6n6Hh/deZtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/Cx9B-WxYsltjTex9KqX1FtLYVZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/Cx9B-WxYsltjTex9KqX1FtLYVZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx9B-WxYsltjTex9KqX1FtLYVZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:30:38:63:36:cb:f8:42:05:bc:25:4a:b2:be:01:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1f41f96c58b25b634dec7d2aa5f516d2d85594
Validity
Not Before: Oct 20 12:01:34 2026 GMT
Not After : Oct 21 12:01:34 2026 GMT
Subject: CN=5fc560ea5cd18ef052d8d7c0561e9349b57e004b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:44:06:f9:16:05:2f:4d:1a:9b:bb:35:ac:8a:
42:b4:70:37:d2:59:66:0f:47:c1:d2:14:b2:3d:35:
61:a9:39:c7:8a:32:27:a6:f4:93:09:15:d1:d5:1c:
08:97:69:b6:98:39:87:5d:44:26:f9:16:33:a3:56:
6b:23:82:1e:cc:74:5e:23:e3:79:cc:2f:d8:b1:2a:
e4:9d:7a:27:2e:29:be:06:3a:be:c5:32:3b:59:82:
17:2c:93:96:d8:57:3d:68:1b:e3:c8:58:d5:69:dd:
af:24:17:5f:10:12:fd:81:a6:83:19:9e:a1:18:a1:
9b:01:32:8f:19:18:11:22:3a:c2:af:2f:b1:dd:16:
20:d4:49:b8:09:35:0c:ab:da:52:c1:96:c2:c7:71:
2e:c3:a3:fa:79:0b:fd:d0:02:07:0c:ea:79:1b:f2:
b8:f4:04:a2:72:9d:72:59:e6:39:62:f0:43:36:44:
40:8f:f1:77:c8:7c:92:4a:73:27:81:0b:5e:d0:6a:
c4:ee:4a:e8:2d:fc:5b:2d:f4:23:88:24:ea:f7:81:
cf:e0:ac:be:39:95:4b:81:63:b3:ad:cf:d7:45:5a:
10:fa:5d:21:58:ca:8e:11:ca:49:4f:d4:e6:9d:15:
6d:28:ba:b0:01:f2:99:0c:8c:2e:a7:af:53:82:1a:
04:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C5:60:EA:5C:D1:8E:F0:52:D8:D7:C0:56:1E:93:49:B5:7E:00:4B
X509v3 Authority Key Identifier:
keyid:0B:1F:41:F9:6C:58:B2:5B:63:4D:EC:7D:2A:A5:F5:16:D2:D8:55:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx9B-WxYsltjTex9KqX1FtLYVZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/Cx9B-WxYsltjTex9KqX1FtLYVZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/Cx9B-WxYsltjTex9KqX1FtLYVZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6c:db:a0:dc:dd:24:d6:e1:e9:56:24:be:2c:84:82:44:bb:
82:c6:86:b8:ec:69:6b:bc:b3:c7:da:f3:86:97:d6:f3:06:8b:
4a:85:79:d3:78:cd:49:50:fc:c4:f8:01:06:73:fb:5c:1a:99:
30:6f:a2:92:73:70:62:bb:70:4b:9b:18:b9:59:e9:77:72:fb:
10:d9:41:2c:b3:f1:b2:66:5b:08:84:f2:24:14:6c:c3:cf:6d:
8b:ac:4b:86:a4:ad:cc:1d:77:a8:07:6e:5c:05:bb:9a:fc:f6:
78:7d:49:2d:0d:21:58:e4:e7:d6:b3:65:6a:c4:52:b6:19:db:
fa:e4:eb:88:41:db:2b:a1:09:e7:06:94:6e:a1:50:4f:ef:7b:
8f:75:27:4b:59:29:e0:a9:98:74:84:84:70:e0:00:c3:61:a2:
35:19:8f:97:b7:72:3d:da:b0:b5:66:c5:77:2e:d6:dd:ba:7f:
e1:18:88:5b:cc:85:b7:3c:76:4a:82:04:b3:6a:55:c3:60:d2:
70:0a:bd:ea:4b:65:d3:1e:df:1a:88:c4:d2:46:3d:7d:ed:5b:
62:f5:2c:68:b5:6b:91:71:7f:3d:4f:3d:cd:7a:d4:73:ab:b8:
df:51:55:cf:77:49:af:38:00:c7:e8:07:2f:3f:4f:bb:55:61:
ed:ca:a0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:19:25 2026 by rpki-client