Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
File: CxxtDecMxRgFtjpeIydiJSXQdbE.mft (raw, json)
Hash identifier: 93HX/hCS6zEb3DqHFoVdp05HqniNYatft7mJq27G1kg=
Subject key identifier: 21:02:2E:5B:92:8B:A0:95:4D:E4:C4:00:94:78:3A:44:90:29:06:CE
Authority key identifier: 0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
Certificate issuer: /CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Certificate serial: 019D1157839CC17DBAF2B5140A711AFA71EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
Manifest number: 0A00
Signing time: Sat 21 Mar 2026 17:00:41 +0000
Manifest this update: Sat 21 Mar 2026 17:00:41 +0000
Manifest next update: Sun 22 Mar 2026 17:00:41 +0000
Files and hashes: 1: CxxtDecMxRgFtjpeIydiJSXQdbE.crl (hash: D7pYhyJ5/PZXz50RUjUkVWNoaaX0X6SjMsC7GdCR29Q=)
2: JjNsdw31mkopTJEXLbd7F3jftjY.roa (hash: DFuBhTTsIvaSw7xpZBBqOn0fJhT7O4EMyfeXK8BYOr4=)
3: Z3vCIqOr8cFIHfCAG87UHRnj4gs.roa (hash: Nj8uppubigdG8cIGJW1LyHCqaPIHngDL7HFSlaeDITs=)
4: jN1MNJJzz6nkhurADJXEP9ytqmM.roa (hash: GRqEsDxhV3ugvj9OHpXpUsMc7ljdeWmRso4kAcjjsao=)
5: omXxQha0HM-pJ0TV0_0uSHRjPXE.roa (hash: Jj3CyBugiBkfT/V/5P2VA5GoJM48HMeye5aq9QG9uls=)
6: ps5j8iyfZH5bJ04s3Df24Oa-Z90.roa (hash: 561YCOwWidkLUNxZ27ftIMouBGOfKq4wJsC6Y9JLTu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:11:57:83:9c:c1:7d:ba:f2:b5:14:0a:71:1a:fa:71:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Validity
Not Before: Mar 21 17:00:41 2026 GMT
Not After : Mar 22 17:00:41 2026 GMT
Subject: CN=21022e5b928ba0954de4c40094783a44902906ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:e7:ce:63:0a:5d:af:01:45:80:36:86:65:
a3:9e:08:2d:0e:e6:da:1b:36:c4:44:06:c9:b5:96:
64:f6:4e:7a:f1:bc:e7:4f:d1:a3:e7:e0:95:34:6b:
a4:db:63:71:26:18:18:5e:26:b2:86:8e:bb:de:b3:
cf:75:6c:ae:70:32:c7:d2:38:f5:9d:63:b5:10:b7:
7c:8f:5c:82:ac:f6:ad:be:31:72:7b:8b:03:d3:e9:
31:b2:3c:fa:73:ef:30:f5:bb:72:f8:2e:eb:87:b9:
4a:38:35:d3:ec:7e:77:5c:78:e5:02:f1:7d:59:28:
65:54:09:d5:55:ce:51:c3:ba:9b:d5:2f:c5:c4:8a:
b7:a6:b9:96:07:cf:5e:e4:c3:cc:2a:06:f5:27:65:
13:a2:e8:7d:9a:f8:03:32:e4:87:ce:f3:37:ee:21:
80:61:4d:0e:1c:11:22:25:f1:b0:91:c8:27:22:6d:
61:3b:99:19:56:b4:57:02:d0:3e:fc:1d:3d:70:b8:
15:de:0b:0d:8d:a1:28:d6:13:a2:7d:8d:d6:19:2e:
96:69:bf:d6:86:15:9d:bc:49:4e:1a:c9:de:67:19:
94:85:cb:9b:30:4d:32:cf:02:0a:78:f6:e7:30:dd:
5d:9e:3c:e6:9e:5c:b9:f4:f2:6c:83:cd:09:fa:b7:
90:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:02:2E:5B:92:8B:A0:95:4D:E4:C4:00:94:78:3A:44:90:29:06:CE
X509v3 Authority Key Identifier:
keyid:0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fd:91:1d:fc:33:33:08:da:c8:f1:ff:59:24:2a:d1:7a:92:
61:c8:be:fe:7f:1c:02:58:4d:d6:cb:49:99:b7:68:96:ab:1d:
a0:b1:75:bb:9c:16:7d:38:04:96:8c:ff:d1:82:48:29:61:d8:
c7:99:83:71:48:90:14:5f:b5:df:f5:a8:13:36:d6:d5:04:98:
56:2e:59:da:31:c6:20:bd:9a:fb:4f:4d:51:fc:bd:fa:1b:c3:
bd:3c:0d:2f:4f:d3:57:5f:88:69:15:2e:7e:d6:59:f8:fd:02:
de:bd:bd:4f:10:44:a7:93:3f:62:32:32:b3:4a:a0:d8:d8:02:
1f:49:84:36:4b:e8:14:86:4c:f6:de:ff:53:52:d4:52:60:14:
0b:31:aa:72:9a:14:f6:18:26:b1:ee:5f:a2:c8:e1:0b:61:e2:
2b:5b:b7:c9:74:b3:a5:eb:2b:50:d2:24:4e:a3:21:d0:fe:a8:
6a:23:9d:ec:cd:54:15:dc:db:57:4f:9c:a2:0a:76:06:95:b8:
ad:a7:44:d1:57:c0:e4:5c:08:68:f2:58:a1:23:3d:fa:cd:9a:
b7:49:99:75:b7:e3:cc:b8:44:36:90:6b:40:45:35:52:70:b2:
66:21:4b:2f:39:bc:30:d3:88:24:2c:82:8d:20:bb:62:02:32:
1b:1b:ac:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0RV4OcwX268rUUCnEa+nHqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMWM2ZDBkZTcwY2M1MTgwNWI2M2E1ZTIzMjc2MjI1MjVk
MDc1YjEwHhcNMjYwMzIxMTcwMDQxWhcNMjYwMzIyMTcwMDQxWjAzMTEwLwYDVQQD
EygyMTAyMmU1YjkyOGJhMDk1NGRlNGM0MDA5NDc4M2E0NDkwMjkwNmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb/nzmMKXa8BRYA2hmWjnggtDuba
GzbERAbJtZZk9k568bznT9Gj5+CVNGuk22NxJhgYXiayho673rPPdWyucDLH0jj1
nWO1ELd8j1yCrPatvjFye4sD0+kxsjz6c+8w9bty+C7rh7lKODXT7H53XHjlAvF9
WShlVAnVVc5Rw7qb1S/FxIq3prmWB89e5MPMKgb1J2UTouh9mvgDMuSHzvM37iGA
YU0OHBEiJfGwkcgnIm1hO5kZVrRXAtA+/B09cLgV3gsNjaEo1hOifY3WGS6Wab/W
hhWdvElOGsneZxmUhcubME0yzwIKePbnMN1dnjzmnly59PJsg80J+reQhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCECLluSi6CVTeTEAJR4OkSQKQbOMB8GA1UdIwQY
MBaAFAscbQ3nDMUYBbY6XiMnYiUl0HWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAt
Zjc3NGYxZWFmYmZmLzEvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAtZjc3NGYxZWFmYmZm
LzEvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADP2RHfwz
MwjayPH/WSQq0XqSYci+/n8cAlhN1stJmbdolqsdoLF1u5wWfTgEloz/0YJIKWHY
x5mDcUiQFF+13/WoEzbW1QSYVi5Z2jHGIL2a+09NUfy9+hvDvTwNL0/TV1+IaRUu
ftZZ+P0C3r29TxBEp5M/YjIys0qg2NgCH0mENkvoFIZM9t7/U1LUUmAUCzGqcpoU
9hgmse5fosjhC2HiK1u3yXSzpesrUNIkTqMh0P6oaiOd7M1UFdzbV0+cogp2BpW4
radE0VfA5FwIaPJYoSM9+s2at0mZdbfjzLhENpBrQEU1UnCyZiFLLzm8MNOIJCyC
jSC7YgIyGxus/w==
-----END CERTIFICATE-----
Generated at Sat Mar 21 19:39:08 2026 by rpki-client