Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
File: CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft (raw, json)
Hash identifier: 9GnxB3AetqqQ4m2PV4iF8IfCfxitjnwLB9s7Qu1Nz7E=
Subject key identifier: 7C:6E:9F:8B:89:6A:B4:23:21:B8:F6:40:21:2A:18:84:30:E8:0B:AC
Authority key identifier: 09:7B:B4:8E:21:4B:B4:D8:DB:42:30:3E:9D:92:A6:C7:09:48:CC:1D
Certificate issuer: /CN=097bb48e214bb4d8db42303e9d92a6c70948cc1d
Certificate serial: 01A06DCC4E0BD51933CBC0B806C0BCE99F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
Manifest number: 01AA
Signing time: Fri 04 Sep 2026 19:01:40 +0000
Manifest this update: Fri 04 Sep 2026 19:01:40 +0000
Manifest next update: Sat 05 Sep 2026 19:01:40 +0000
Files and hashes: 1: 3UrLjHCB4pwcHVB3zBFHrMVrSsw.roa (hash: FmQXFHkHNyNXx7/DlR8LyUj511QpfY6zuQXRoYOyGLo=)
2: 3vZIFgD88S-GCNxDnP1LiF3y1Mc.roa (hash: IojT01yCuekhR3J8NVJlRfRwjrsV8AmZFTiDSTjzBYk=)
3: CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl (hash: ETU4vaP8Y8ee50ADk+e3VKbapXxiM23u1a2YL5JaCUs=)
4: XK1u2OpOHfPFyWFSpStjjFR21eM.roa (hash: zmHubFupuS74yLzF6KkoHbfyUplOIcN6d9GoVLzuZOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:cc:4e:0b:d5:19:33:cb:c0:b8:06:c0:bc:e9:9f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097bb48e214bb4d8db42303e9d92a6c70948cc1d
Validity
Not Before: Sep 4 19:01:40 2026 GMT
Not After : Sep 5 19:01:40 2026 GMT
Subject: CN=7c6e9f8b896ab42321b8f640212a188430e80bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:71:f0:e0:74:e3:9c:cf:66:86:63:35:47:6d:
4a:98:7b:cc:e0:3c:ba:97:1a:d6:fc:8f:d4:37:5a:
a6:a9:2f:60:73:6d:73:b3:da:bc:dc:b8:da:6a:fa:
b9:d6:ca:be:f9:c7:a2:27:ef:bf:3c:94:de:f4:c4:
1c:d7:87:a1:7a:07:4b:3b:89:80:43:1d:15:d9:f9:
b5:95:0a:e6:93:72:89:9e:8d:2d:ef:90:45:bf:3c:
c0:96:1b:ee:38:bb:98:8b:50:d0:a0:69:30:00:b1:
15:9c:0a:6b:b8:aa:70:dc:23:ba:88:d7:3f:28:c6:
3f:14:dd:df:56:9a:3c:c5:8d:e8:cb:aa:10:12:20:
c7:eb:25:82:4c:3c:62:2a:76:ac:19:f0:4b:5b:6e:
b2:7f:3a:f2:3d:4e:da:3e:03:86:ff:d6:06:fb:e0:
7e:23:82:21:50:07:85:28:4a:c3:ed:1f:cc:36:65:
d0:e8:ac:99:51:85:a8:a9:54:c1:35:0a:df:f2:20:
a4:93:8b:b3:96:e3:23:4a:44:02:be:3b:23:33:23:
49:10:36:f9:34:d4:e2:36:46:3d:08:ef:28:8b:c4:
80:20:38:43:e4:9e:26:8a:01:9f:40:bc:4d:52:22:
51:92:c4:e1:0c:5a:66:8c:55:82:c4:87:94:e4:c1:
c0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6E:9F:8B:89:6A:B4:23:21:B8:F6:40:21:2A:18:84:30:E8:0B:AC
X509v3 Authority Key Identifier:
keyid:09:7B:B4:8E:21:4B:B4:D8:DB:42:30:3E:9D:92:A6:C7:09:48:CC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e9:8d:3f:d3:9a:9a:1f:24:9b:2e:8b:a1:48:04:95:69:d5:
20:35:9c:dd:03:30:c4:42:49:8d:9d:f5:18:a0:8c:19:f4:90:
d2:56:37:76:a8:08:13:8d:39:f2:fc:e0:07:f6:94:dd:ee:34:
04:34:00:bd:7e:5f:03:1a:60:7c:f2:85:da:66:18:34:9b:08:
5c:48:02:cc:8d:60:8f:9b:4e:32:da:f0:00:b3:fd:48:0d:ce:
36:0f:ab:dc:10:20:fe:97:5a:ee:01:8f:f3:6b:a0:10:3e:35:
69:3c:40:d8:46:46:12:58:8f:32:73:87:87:66:22:61:e8:a6:
24:f7:00:1b:fb:38:d9:43:34:3b:35:77:18:03:25:5d:31:0e:
37:0d:7e:4d:71:cd:dd:80:77:cd:5b:90:40:38:05:ce:66:0b:
03:a2:4b:5c:28:76:bf:4d:b5:05:ca:a8:fa:b8:17:89:32:f6:
85:aa:e8:9d:29:a2:6a:05:a6:76:d7:62:49:e5:71:c4:7f:77:
c8:54:7a:9f:f5:30:55:59:2f:25:2b:91:ac:2e:ab:c5:01:b8:
a3:5e:d4:b8:57:3b:b7:89:1b:17:f5:eb:1f:8d:dc:c7:01:42:
3f:4d:2a:0f:ff:19:ee:8e:63:91:7f:2f:e3:03:58:44:08:93:
28:d8:5f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:58:25 2026 by rpki-client