Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
File: CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft (raw, json)
Hash identifier: rN6vEjFgoWjWoZ8Ocd7Vn6XiyqXXIW+Vin2nO2QfXTM=
Subject key identifier: E7:04:87:5B:21:B2:83:26:61:22:83:5E:27:05:D2:FE:78:15:D0:83
Authority key identifier: 09:7B:B4:8E:21:4B:B4:D8:DB:42:30:3E:9D:92:A6:C7:09:48:CC:1D
Certificate issuer: /CN=097bb48e214bb4d8db42303e9d92a6c70948cc1d
Certificate serial: 019DA90C9ACA5C1EE48387AA2A26E9826320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
Manifest number: 3B
Signing time: Mon 20 Apr 2026 04:01:08 +0000
Manifest this update: Mon 20 Apr 2026 04:01:08 +0000
Manifest next update: Tue 21 Apr 2026 04:01:08 +0000
Files and hashes: 1: 3UrLjHCB4pwcHVB3zBFHrMVrSsw.roa (hash: FmQXFHkHNyNXx7/DlR8LyUj511QpfY6zuQXRoYOyGLo=)
2: 3vZIFgD88S-GCNxDnP1LiF3y1Mc.roa (hash: IojT01yCuekhR3J8NVJlRfRwjrsV8AmZFTiDSTjzBYk=)
3: CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl (hash: syqH88v7xk2K46gYA1rQUdyPSuKu6A6xFspfDRDXSqk=)
4: XK1u2OpOHfPFyWFSpStjjFR21eM.roa (hash: zmHubFupuS74yLzF6KkoHbfyUplOIcN6d9GoVLzuZOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:0c:9a:ca:5c:1e:e4:83:87:aa:2a:26:e9:82:63:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097bb48e214bb4d8db42303e9d92a6c70948cc1d
Validity
Not Before: Apr 20 04:01:08 2026 GMT
Not After : Apr 21 04:01:08 2026 GMT
Subject: CN=e704875b21b283266122835e2705d2fe7815d083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7a:f4:21:f1:7c:88:f5:c8:e3:d6:02:c8:0e:
ab:8b:bc:3b:ef:e5:a1:16:25:5a:06:89:ac:12:92:
70:c2:2f:8a:62:0c:35:4b:f2:1d:25:a6:be:f3:dd:
a8:15:51:8e:77:af:ce:4a:3c:ad:7d:98:c8:62:39:
3f:d6:75:0e:50:1b:65:6e:82:41:78:99:09:c7:75:
15:b3:91:39:85:7a:8d:0d:b5:ff:9f:50:e2:ad:13:
ec:b8:28:8c:45:19:c7:20:aa:8b:3b:58:78:ff:23:
78:e8:4b:34:8f:d5:37:2a:d1:99:d6:bf:a3:1a:87:
39:89:8f:8a:07:f9:ae:88:e3:ae:f6:42:7c:04:ab:
4a:02:c1:04:bc:a2:a6:53:8b:dd:5d:cc:45:cc:f0:
58:86:46:b5:7e:44:0e:69:bb:0b:10:b2:b9:3e:e1:
ee:25:30:83:8e:2d:fd:5c:d9:30:d7:37:79:67:f0:
87:74:d4:f5:8b:04:73:a4:e0:6d:7e:c7:94:81:57:
76:9f:05:61:e4:30:b4:89:b6:75:3a:25:b6:c6:f5:
a1:99:84:12:51:8b:4b:39:d4:f6:ac:87:59:ff:94:
7a:19:21:fd:5d:ff:9f:6d:4d:64:c5:7f:75:13:68:
14:21:71:8b:ee:cb:da:d6:ca:86:92:fd:5a:93:95:
62:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:04:87:5B:21:B2:83:26:61:22:83:5E:27:05:D2:FE:78:15:D0:83
X509v3 Authority Key Identifier:
keyid:09:7B:B4:8E:21:4B:B4:D8:DB:42:30:3E:9D:92:A6:C7:09:48:CC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b4:49:79:b0:f0:d4:f5:0d:07:28:ce:8c:ed:f6:7f:14:06:
bd:6a:f2:1e:9c:dc:11:68:1a:79:cf:05:5f:79:73:18:ec:f5:
2f:89:99:fc:74:fa:d2:48:0c:37:f6:1a:dc:31:e1:bf:8a:95:
67:af:eb:03:7c:14:2d:b6:36:17:46:49:d6:cf:bf:c5:67:c2:
98:53:ca:8c:c1:93:a8:2d:dc:04:6c:f7:bb:90:23:8e:03:ca:
64:32:78:38:31:e0:3e:37:f8:cd:d7:37:3e:3e:bd:e4:0b:94:
c2:15:b4:4c:99:b0:74:df:c1:66:72:7d:87:1d:d8:2f:e7:d1:
31:45:36:06:6b:ca:d6:ee:41:df:56:00:fe:6d:1b:07:c5:48:
a9:e6:53:cb:a5:30:7b:ac:72:ff:ee:a6:a5:57:2c:72:59:fb:
58:5c:a6:da:0d:59:85:d0:9b:80:d3:91:28:23:94:3b:9d:a4:
02:56:01:00:bc:54:c1:8a:12:4d:f3:32:98:5e:2c:b7:5d:61:
99:49:b3:30:3c:ad:db:3a:d0:21:a8:93:27:57:03:bf:d4:3e:
f4:8b:58:92:00:3d:6e:5f:57:f5:de:a0:96:9c:08:bb:7d:93:
a0:09:ed:b9:10:b0:2e:99:8f:7a:bd:5a:8c:ea:72:d3:25:65:
32:63:00:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:23:35 2026 by rpki-client