Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
File: cxwTgoWLDclamtvqRyizH54iwNg.mft (raw, json)
Hash identifier: 2yU8seoWBHyvOniD8Krp127UuCbuyPnH1CTg/ZuooC0=
Subject key identifier: 6F:E4:2C:F7:49:2E:71:F5:FE:66:80:A6:A1:14:C1:36:83:62:AE:79
Authority key identifier: 73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
Certificate issuer: /CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Certificate serial: 019D389C2DE30573C6A81B190C0919943CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
Manifest number: 09ED
Signing time: Sun 29 Mar 2026 08:00:52 +0000
Manifest this update: Sun 29 Mar 2026 08:00:52 +0000
Manifest next update: Mon 30 Mar 2026 08:00:52 +0000
Files and hashes: 1: cxwTgoWLDclamtvqRyizH54iwNg.crl (hash: mShe+Ln+jihUGbS4k5lr9vKEg/8UtUr2yClTecXilX4=)
2: eCfciMd8WvfOpLwSmZnFxhRFtP8.roa (hash: mnu1L5F4WUL4nlzWuT0asBSz38ZR2rhi6ZOxZOIl63c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:2d:e3:05:73:c6:a8:1b:19:0c:09:19:94:3c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Validity
Not Before: Mar 29 08:00:52 2026 GMT
Not After : Mar 30 08:00:52 2026 GMT
Subject: CN=6fe42cf7492e71f5fe6680a6a114c1368362ae79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:97:b8:5c:67:8f:49:84:4b:b4:c3:a1:4f:
98:d3:ec:f6:11:9a:7f:86:d2:66:ba:ea:3d:67:a0:
6a:ef:4a:33:39:b5:57:1b:50:79:29:2d:d6:6c:5c:
ec:f9:54:71:30:33:1a:33:f8:3b:e3:4b:6b:16:e3:
55:ef:28:12:a0:1e:3f:f2:b0:20:2f:f9:1d:e1:84:
7c:dd:00:28:c3:3b:bb:0e:d0:55:b5:be:c1:05:28:
fa:10:4a:9e:11:9c:79:f6:dd:c9:0a:5c:a1:6d:a6:
27:96:1b:fc:77:0a:ae:49:7b:fa:85:77:00:7e:57:
09:55:99:40:5d:a1:a5:01:1f:a2:74:be:9c:d9:fe:
d0:f1:a4:96:e0:fa:6f:18:45:91:27:44:c9:b6:66:
66:27:69:09:fe:be:bb:d6:e5:3a:a5:c3:88:23:60:
90:2f:8c:d3:a1:6c:99:da:50:3f:99:07:4e:de:bb:
1b:4b:3d:07:2d:d9:e0:e5:91:46:c3:8d:5b:58:15:
fc:9d:bd:65:73:25:c5:c1:16:ab:41:84:e5:3b:e9:
7a:df:36:fd:e0:9e:21:91:c1:bb:e1:97:69:08:d1:
ad:98:6a:45:0f:1e:cb:a9:8f:03:9d:d2:8d:d7:05:
fd:99:04:75:26:80:90:1c:b5:64:1c:31:8e:c6:3a:
73:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E4:2C:F7:49:2E:71:F5:FE:66:80:A6:A1:14:C1:36:83:62:AE:79
X509v3 Authority Key Identifier:
keyid:73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:07:69:7e:f0:63:81:8c:a5:06:cd:9d:0c:3a:2e:4b:52:53:
98:0e:c4:49:55:19:a2:db:46:96:3c:4a:c4:e2:6b:31:9a:8d:
29:f6:a1:dd:2c:ec:54:e9:63:3d:a3:1d:9b:79:41:1c:96:5f:
95:ac:46:87:71:bd:91:b8:5e:f9:5b:42:38:df:02:1f:70:bf:
05:76:94:e8:67:3e:ba:ef:3e:7e:e2:a7:3f:af:67:e8:19:46:
3b:74:65:16:5d:45:a5:c5:f1:c6:d7:9a:ac:f6:fe:13:65:b0:
91:1b:f2:01:b0:36:8f:92:8d:42:66:1a:5f:bf:56:11:2c:fd:
df:ba:32:9f:53:50:da:d8:0d:a3:bd:f0:d7:94:62:49:5c:21:
e7:f8:e3:7f:dc:7d:70:ba:ad:57:34:e4:6d:9f:e2:f7:70:7e:
40:e7:03:26:5c:27:d4:c4:77:94:75:9d:a4:7e:64:7f:81:e5:
32:20:ab:eb:9e:fd:0f:f5:2c:ea:0d:c3:b9:81:65:5f:fd:3d:
a4:b1:74:c3:57:87:b3:03:63:39:40:97:81:6a:49:25:53:ad:
43:0c:6f:4c:cf:75:74:5c:92:78:47:29:e7:29:77:2f:ac:d2:
da:ab:70:ea:e4:d8:5e:2d:f3:b6:41:b9:a6:71:14:37:6f:95:
78:a9:64:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:29 2026 by rpki-client