Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
File: CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft (raw, json)
Hash identifier: FE7KptLjX69vDfhJ/SzGOWEMEU0kJa7ZlbidQjFkn24=
Subject key identifier: 44:66:D9:17:B2:10:9B:F7:00:93:06:CF:70:25:CE:37:EC:92:77:EF
Authority key identifier: 09:7B:B4:8E:21:4B:B4:D8:DB:42:30:3E:9D:92:A6:C7:09:48:CC:1D
Certificate issuer: /CN=097bb48e214bb4d8db42303e9d92a6c70948cc1d
Certificate serial: 019E90CA928EEBA1730DC7E1D745A86DDF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
Manifest number: B3
Signing time: Thu 04 Jun 2026 04:00:55 +0000
Manifest this update: Thu 04 Jun 2026 04:00:55 +0000
Manifest next update: Fri 05 Jun 2026 04:00:55 +0000
Files and hashes: 1: 3UrLjHCB4pwcHVB3zBFHrMVrSsw.roa (hash: FmQXFHkHNyNXx7/DlR8LyUj511QpfY6zuQXRoYOyGLo=)
2: 3vZIFgD88S-GCNxDnP1LiF3y1Mc.roa (hash: IojT01yCuekhR3J8NVJlRfRwjrsV8AmZFTiDSTjzBYk=)
3: CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl (hash: oTa/v/XYMjW5VMg+v2nP0QEu5R1KlXyaXn9AdXeeHrQ=)
4: XK1u2OpOHfPFyWFSpStjjFR21eM.roa (hash: zmHubFupuS74yLzF6KkoHbfyUplOIcN6d9GoVLzuZOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:ca:92:8e:eb:a1:73:0d:c7:e1:d7:45:a8:6d:df:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097bb48e214bb4d8db42303e9d92a6c70948cc1d
Validity
Not Before: Jun 4 04:00:55 2026 GMT
Not After : Jun 5 04:00:55 2026 GMT
Subject: CN=4466d917b2109bf7009306cf7025ce37ec9277ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d3:0e:c7:8a:f0:f0:3f:f4:4f:cb:be:ee:cc:
83:af:7f:9c:ff:10:9d:16:fe:aa:3e:fe:4c:de:e3:
d6:c0:4f:ae:26:7b:cd:1f:30:3c:8b:f5:3b:8a:ef:
85:6c:34:38:b5:a2:a4:31:b8:1d:3b:d4:9a:b7:30:
17:8c:12:31:84:af:d8:ba:8f:21:fe:28:9d:a1:25:
4a:8a:93:85:f6:e6:94:75:fc:89:d4:3b:84:2b:c9:
44:0d:d9:a7:27:ff:89:22:c5:d6:4b:f6:70:04:52:
87:51:6b:1a:e4:2d:e1:e0:7f:2f:93:d8:e9:a7:cc:
90:ed:02:9d:35:b0:be:b6:35:28:a8:93:f4:31:2d:
54:e1:6f:37:45:f8:7b:90:ee:32:66:a3:fa:78:29:
c2:3a:94:b1:fc:e8:ad:64:7f:92:c2:4a:90:55:76:
51:fe:5a:8b:81:80:4c:e4:e4:1e:8e:b1:d7:64:86:
e1:89:68:7c:56:f7:63:d2:1d:67:19:1a:bb:f0:61:
ca:c0:95:91:8a:77:07:ea:c3:36:cb:54:59:ff:53:
40:38:b6:95:73:d6:30:ef:14:5c:e2:95:41:9d:98:
a9:3b:ef:05:67:af:0d:ea:9b:ec:80:06:b1:5a:58:
1d:59:ae:ed:be:e2:6b:fb:bd:98:11:7c:21:fe:0f:
f4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:66:D9:17:B2:10:9B:F7:00:93:06:CF:70:25:CE:37:EC:92:77:EF
X509v3 Authority Key Identifier:
keyid:09:7B:B4:8E:21:4B:B4:D8:DB:42:30:3E:9D:92:A6:C7:09:48:CC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ae:44:a7:9d:d3:26:ce:15:e4:30:64:89:44:cd:ef:89:6e:
03:b1:d1:97:88:9b:1b:ac:c1:f4:6e:ab:7d:c9:55:95:15:69:
87:1e:7a:18:85:76:1a:a5:88:3d:50:27:63:5c:48:01:2a:b8:
9c:f8:f7:5d:8d:ae:a5:6e:bf:05:4e:e1:7e:08:94:c0:f3:ee:
a6:a6:56:06:21:09:c4:3e:1b:98:bd:f4:e6:55:57:63:0c:17:
fb:20:b5:f2:c1:12:3d:b9:b1:91:cf:f4:58:2d:f5:76:16:63:
df:ca:d4:0a:b8:5f:22:6b:4d:1d:c5:6d:a7:f3:69:51:7d:41:
3e:3d:8c:8d:91:92:4c:d8:81:78:7e:8f:ae:77:10:57:de:99:
61:74:78:7d:ca:72:68:81:69:7d:67:ec:80:03:4f:8c:cb:ae:
9c:4c:0f:ff:ae:01:94:cf:45:29:88:7b:98:90:29:84:2a:34:
b7:64:92:4e:fe:28:7e:44:93:d8:59:e1:1f:28:a8:13:ee:27:
07:7a:0b:eb:6a:dc:2b:c5:d5:30:d2:0b:c7:7e:98:d5:17:c4:
ce:a4:08:a5:bb:d0:9e:99:bf:0f:db:e3:6a:ce:33:bd:2c:ee:
f5:9b:76:b0:13:f3:5c:04:b5:b1:c7:f4:1e:03:68:d3:8d:95:
64:f9:e0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:10:40 2026 by rpki-client