Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/Cx9B-WxYsltjTex9KqX1FtLYVZQ.mft
File: Cx9B-WxYsltjTex9KqX1FtLYVZQ.mft (raw, json)
Hash identifier: KUKYqse1l6GXvWaJkL5d9E0jPNz+/J+AIb8qzV/tXeA=
Subject key identifier: 99:36:7F:D0:3A:CE:CA:D8:A2:FD:D7:09:70:29:4E:B1:21:20:11:32
Authority key identifier: 0B:1F:41:F9:6C:58:B2:5B:63:4D:EC:7D:2A:A5:F5:16:D2:D8:55:94
Certificate issuer: /CN=0b1f41f96c58b25b634dec7d2aa5f516d2d85594
Certificate serial: 01A0016FE14B351D9F14692ABB9883D59CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx9B-WxYsltjTex9KqX1FtLYVZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/Cx9B-WxYsltjTex9KqX1FtLYVZQ.mft
Manifest number: 7A
Signing time: Fri 14 Aug 2026 18:01:44 +0000
Manifest this update: Fri 14 Aug 2026 18:01:44 +0000
Manifest next update: Sat 15 Aug 2026 18:01:44 +0000
Files and hashes: 1: 0Il0hGQus6JFrI28dhOelMSkxAo.roa (hash: 229pizDgAWKKq44Ig1yRqRrjbGCQ9KdVQEjYQSFdDNw=)
2: Cx9B-WxYsltjTex9KqX1FtLYVZQ.crl (hash: 2tg5Sd3n0HTbPudfrUP/boUbmLzQlFYSsyPklno+M2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/Cx9B-WxYsltjTex9KqX1FtLYVZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/Cx9B-WxYsltjTex9KqX1FtLYVZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx9B-WxYsltjTex9KqX1FtLYVZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:e1:4b:35:1d:9f:14:69:2a:bb:98:83:d5:9c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1f41f96c58b25b634dec7d2aa5f516d2d85594
Validity
Not Before: Aug 14 18:01:44 2026 GMT
Not After : Aug 15 18:01:44 2026 GMT
Subject: CN=99367fd03acecad8a2fdd70970294eb121201132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:a0:3e:8b:d1:19:92:ab:2b:78:34:a4:92:
9f:ed:97:e3:31:3a:cf:73:48:a1:e6:c2:76:3a:ce:
02:18:b1:b7:ae:fe:2f:37:91:d9:08:78:af:00:42:
d3:0d:e7:85:64:15:60:87:9a:46:7e:c9:42:12:02:
c7:6c:9e:44:5f:71:8c:37:0c:fa:af:87:0d:23:4d:
88:49:ed:ba:c1:4d:5e:3c:f0:df:f6:9a:3a:71:d7:
db:6b:49:38:67:8a:fa:dd:2c:11:3a:46:a0:af:07:
a3:1d:58:07:9c:2b:3a:4b:72:b8:e3:3b:81:68:03:
d9:64:4d:72:26:9a:bc:d9:27:ac:e2:05:e4:81:26:
18:7a:2b:c1:bf:83:19:47:e0:08:21:71:5f:7f:4e:
ed:ef:3a:31:17:5c:56:c5:f9:8d:5d:8e:05:10:94:
b9:68:61:40:5f:f2:c8:0a:7d:2d:69:1a:4d:95:01:
5b:73:78:1f:1c:07:46:d9:73:31:0f:3d:7a:59:69:
77:af:6c:77:10:2b:e2:5c:e8:ed:02:5c:53:d1:3d:
df:d3:b8:8e:94:d4:a9:cd:af:6b:36:b3:5c:50:99:
2f:c5:dd:5c:73:53:56:e8:eb:75:e7:3e:aa:cd:62:
92:2f:c3:b4:13:26:2f:97:51:e2:53:ff:0c:71:6b:
24:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:36:7F:D0:3A:CE:CA:D8:A2:FD:D7:09:70:29:4E:B1:21:20:11:32
X509v3 Authority Key Identifier:
keyid:0B:1F:41:F9:6C:58:B2:5B:63:4D:EC:7D:2A:A5:F5:16:D2:D8:55:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx9B-WxYsltjTex9KqX1FtLYVZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/Cx9B-WxYsltjTex9KqX1FtLYVZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/Cx9B-WxYsltjTex9KqX1FtLYVZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:57:aa:61:2a:ef:e5:53:8b:9a:e4:45:c6:5a:16:98:d5:b4:
95:1f:34:c0:dc:fe:e7:f7:67:39:6a:f0:22:41:74:82:97:6a:
c2:89:bc:20:9f:a7:ee:e1:ec:8a:fb:54:6b:61:1f:47:e6:12:
3a:61:27:de:3d:18:64:ba:06:0d:60:7a:9a:72:51:29:6e:fd:
04:3e:05:76:e2:39:d2:a3:c4:64:cf:e0:b6:7b:4f:69:2a:2e:
c6:3b:9b:7e:90:05:38:62:4e:c8:c2:9d:3e:91:4a:9a:4a:16:
af:b3:9b:0f:dc:d3:35:7a:3a:03:80:04:32:71:b0:d4:4d:a6:
d7:ab:6b:ed:3f:0b:51:3d:c9:a2:dd:cf:c5:cd:9b:14:3e:43:
7a:7a:67:e9:28:42:55:f4:2e:1c:03:b7:71:fb:2a:12:dd:6b:
a3:55:df:bc:d1:27:3b:8e:86:8c:25:03:f3:b3:ea:c0:1a:a8:
90:7c:e6:b9:7d:3d:74:7a:c8:5f:4b:4e:0d:5f:99:e4:e2:ea:
41:44:c0:79:39:f9:84:38:f8:4d:45:f0:09:30:e5:49:9b:36:
b2:e7:43:49:02:84:2a:03:5b:be:f9:df:d6:8d:f1:4f:c5:9c:
fd:79:45:40:73:22:41:a8:70:0b:d1:29:63:20:34:53:c9:de:
b6:88:c3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:11:59 2026 by rpki-client