Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
File: CxsxjlBXocEDQWB83d2ttG1xq_U.mft (raw, json)
Hash identifier: rT5RXe3f57eGLecVjujByz+dxknOUhgXKsnK7/e+Cns=
Subject key identifier: DF:6E:76:30:52:65:16:6E:A7:03:D3:28:2E:51:42:4B:96:D9:B4:EA
Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
Certificate issuer: /CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Certificate serial: 019D378969D6F6D28AEE57CDFD36F50A5985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 03:00:45 +0000
Manifest this update: Sun 29 Mar 2026 03:00:45 +0000
Manifest next update: Mon 30 Mar 2026 03:00:45 +0000
Files and hashes: 1: AyjB4EHPCDq9p7LZ4QxN-ryxrkM.roa (hash: TjTKp2DaLx4thRMtFk13G01LVFaqUeVARGlNcCmXfhM=)
2: CxsxjlBXocEDQWB83d2ttG1xq_U.crl (hash: 0q8cfU5vxvRv9JrRtha+yXgI2t3JsHo31mGifbRW1js=)
3: NjX_-QFT-KYIQb8IhhsWdmtYmIs.roa (hash: alZ0M56XHk3ZVrQNYJTxZZ2onR/AK2JyEOwbu/Z8qYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:69:d6:f6:d2:8a:ee:57:cd:fd:36:f5:0a:59:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Validity
Not Before: Mar 29 03:00:45 2026 GMT
Not After : Mar 30 03:00:45 2026 GMT
Subject: CN=df6e76305265166ea703d3282e51424b96d9b4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:91:6d:d4:49:b9:0f:9e:a9:1a:f9:97:69:3b:
46:64:cb:6a:cc:c3:74:e4:85:10:71:81:4c:80:f6:
4d:1b:71:88:20:ff:72:bd:b3:f3:55:55:30:cf:6f:
31:0f:90:1d:87:84:0b:2c:2c:b8:df:04:a5:59:04:
5a:ff:4b:26:f6:43:2b:e1:cc:c1:ee:29:ab:64:49:
ca:bd:28:08:b5:91:b8:e6:5b:f2:2b:cd:b0:3b:7d:
94:fb:3f:28:aa:cc:74:6f:e8:3a:36:89:78:2f:42:
1b:47:d1:a0:92:6a:90:2a:35:c9:21:aa:9e:42:f4:
26:67:88:a8:c7:d9:fa:80:b8:bd:47:3b:68:06:4c:
2f:6c:8a:2f:12:fe:03:a6:af:db:d7:cf:e5:46:6b:
56:b5:6f:f0:33:f0:65:2c:75:70:78:c9:cb:68:b2:
18:4e:eb:bd:7e:1a:ae:0d:d2:cb:b1:65:44:2b:a0:
da:e7:9a:90:86:7e:e0:4a:15:1c:16:cc:ae:85:0b:
1b:f7:b6:53:1e:08:0d:7f:48:61:bf:fc:57:63:1f:
6e:5b:77:cc:bc:91:a1:ff:f5:15:22:04:cc:13:fe:
85:4a:53:f7:5d:64:5f:df:a4:db:2c:8d:fb:63:71:
0c:df:f0:7f:f3:95:23:e5:b4:d6:14:07:62:df:95:
3d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6E:76:30:52:65:16:6E:A7:03:D3:28:2E:51:42:4B:96:D9:B4:EA
X509v3 Authority Key Identifier:
keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ce:75:88:a8:08:f2:20:82:47:64:36:56:e1:25:f1:8e:a4:
a5:dd:3c:54:a4:de:37:a4:cb:99:21:57:a3:ed:88:fd:77:2e:
c4:1d:6e:10:14:61:d7:01:63:a5:a1:69:f4:b9:64:14:d0:03:
73:4f:eb:40:c3:6a:50:c6:75:4d:24:36:b2:a5:34:e1:23:e8:
99:39:68:b2:37:7b:63:31:e3:59:0b:9a:91:0a:fd:99:2f:c9:
b9:5d:a7:44:12:18:71:27:a7:88:37:40:40:c3:94:dc:8b:ea:
b6:b2:d8:d9:20:14:0a:71:bd:57:29:c6:33:9a:c5:b3:a6:7e:
1a:1f:17:ed:32:5d:bc:5b:5d:8a:3d:fa:29:dc:7d:12:a1:35:
a4:53:03:68:73:81:68:2f:75:c7:e7:e2:63:2f:ac:5a:7f:1c:
8c:00:de:21:02:fb:5a:cc:b4:99:82:bc:96:53:21:ee:9e:26:
54:a4:0a:ce:6e:f5:56:b8:14:e4:ac:62:96:9f:69:d2:b5:39:
fa:5d:36:e6:22:76:b4:48:e1:dc:97:61:e1:11:2c:25:fc:c4:
58:5e:99:56:fc:13:36:46:08:bc:02:07:3d:68:73:44:20:3a:
7e:52:71:a4:2e:5e:34:04:24:6f:d8:79:ec:50:75:43:64:67:
fb:0a:7e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:30 2026 by rpki-client