Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
File: CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft (raw, json)
Hash identifier: n6YjMXtklzAOL0xpES+ugUXe/F3kDdL1LE0guaK6T2g=
Subject key identifier: A9:69:B4:46:3C:14:F8:72:05:C7:36:67:6B:80:BB:9E:47:B5:E7:85
Authority key identifier: 09:7B:B4:8E:21:4B:B4:D8:DB:42:30:3E:9D:92:A6:C7:09:48:CC:1D
Certificate issuer: /CN=097bb48e214bb4d8db42303e9d92a6c70948cc1d
Certificate serial: 01A1630EB92D9BEC2D162C1E02F19B734432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
Manifest number: 0229
Signing time: Thu 22 Oct 2026 10:01:11 +0000
Manifest this update: Thu 22 Oct 2026 10:01:11 +0000
Manifest next update: Fri 23 Oct 2026 10:01:11 +0000
Files and hashes: 1: 3UrLjHCB4pwcHVB3zBFHrMVrSsw.roa (hash: FmQXFHkHNyNXx7/DlR8LyUj511QpfY6zuQXRoYOyGLo=)
2: 3vZIFgD88S-GCNxDnP1LiF3y1Mc.roa (hash: IojT01yCuekhR3J8NVJlRfRwjrsV8AmZFTiDSTjzBYk=)
3: CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl (hash: AF9sRN/FGwjLdn9a4GBZbABt9jZF5+OGaEcAxFBNzxo=)
4: XK1u2OpOHfPFyWFSpStjjFR21eM.roa (hash: zmHubFupuS74yLzF6KkoHbfyUplOIcN6d9GoVLzuZOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:0e:b9:2d:9b:ec:2d:16:2c:1e:02:f1:9b:73:44:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097bb48e214bb4d8db42303e9d92a6c70948cc1d
Validity
Not Before: Oct 22 10:01:11 2026 GMT
Not After : Oct 23 10:01:11 2026 GMT
Subject: CN=a969b4463c14f87205c736676b80bb9e47b5e785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:dd:a3:f0:dc:79:d3:55:f8:93:fa:b7:78:
b2:8a:0a:76:98:24:8b:60:47:4a:02:ff:c0:9f:54:
59:0f:2c:aa:82:54:5e:4b:40:0b:6a:9d:39:af:79:
84:1d:0e:ee:86:4e:c2:50:89:bc:28:0b:3a:c2:95:
e3:be:d9:88:4c:f3:5e:5e:e5:37:bb:70:32:7a:90:
76:99:1f:bf:42:97:18:3c:9b:17:b4:b3:11:18:6d:
74:82:dd:fa:67:ef:5f:1c:68:bc:66:64:e6:c2:2b:
8d:e2:48:ad:ea:f6:eb:8e:7b:a3:48:8a:3c:97:e5:
71:ea:df:f4:de:9f:b7:c5:fa:c6:5c:13:b3:20:f1:
d0:de:b8:7d:4b:29:8c:0b:60:ce:ac:8e:ae:23:fd:
84:88:c2:51:3e:fe:0b:ba:56:ac:6b:5a:d3:a3:50:
2e:7b:03:c1:4d:48:71:95:81:f4:65:64:71:59:ed:
5b:cb:92:33:6b:fd:b4:13:bf:f8:e5:b7:1b:0c:37:
f1:a6:2a:a9:77:fa:78:5e:8d:b5:b4:09:d7:7f:e4:
c6:78:f2:6e:93:1f:c8:6f:81:f3:cc:fe:ef:bb:25:
d5:78:92:10:05:c4:01:99:3f:14:85:ec:63:d5:39:
d2:ba:92:6a:10:90:de:c3:4d:af:cb:ae:8d:a1:fb:
8f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:69:B4:46:3C:14:F8:72:05:C7:36:67:6B:80:BB:9E:47:B5:E7:85
X509v3 Authority Key Identifier:
keyid:09:7B:B4:8E:21:4B:B4:D8:DB:42:30:3E:9D:92:A6:C7:09:48:CC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:11:d8:f2:3f:a5:81:af:0e:ba:ee:b6:23:19:9d:e0:3a:10:
cf:ca:93:b6:47:20:fc:1e:ec:eb:f0:9c:07:de:40:05:e7:cf:
59:d0:0d:d8:86:a3:52:00:6b:ea:5f:e2:3b:15:b4:8d:52:86:
8a:1a:ef:ab:56:1b:9a:17:45:e4:f0:94:c5:3b:b9:89:49:71:
85:6f:e7:1b:fa:33:14:2e:3d:c1:f0:19:f8:e6:41:66:62:4a:
91:c4:66:49:19:24:bc:a9:07:35:9c:88:58:b3:41:89:57:26:
66:5f:32:74:94:ca:ba:55:a3:df:64:e0:f5:12:5d:90:99:cf:
e4:a1:0a:75:6c:4e:cf:99:c0:ed:f9:c4:47:28:bb:c3:5d:ee:
16:a5:b6:84:d5:90:01:5c:4a:60:90:cc:13:42:5f:7d:18:7d:
39:78:6f:9f:13:1f:f8:e2:d5:d2:32:5b:cf:00:49:c2:10:3f:
60:53:ec:f9:e1:79:62:65:d8:d7:dc:d5:ab:9c:7f:22:2b:96:
89:a4:de:5f:56:81:2c:b6:e6:b4:3b:ac:b7:ad:79:0e:bf:cc:
63:39:d1:cd:9a:d4:1d:aa:25:a8:5a:28:7a:1c:85:c6:0b:b3:
ae:b4:04:c3:99:f0:18:7a:8b:f7:a1:2e:70:17:05:9b:bf:0c:
29:f2:9a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 12:19:41 2026 by rpki-client