Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
File: cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json)
Hash identifier: XfrU/nR0o2Y4QTggZe3BEh8bxKikKVN/NKJOJr+LRKE=
Subject key identifier: A0:42:A5:58:D2:FA:6F:84:22:B4:E3:95:57:BB:46:FA:38:E7:9E:5F
Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
Certificate issuer: /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Certificate serial: 019ED0BCA39A2586280598214771EA8ACB1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
Manifest number: 1964
Signing time: Tue 16 Jun 2026 14:01:23 +0000
Manifest this update: Tue 16 Jun 2026 14:01:23 +0000
Manifest next update: Wed 17 Jun 2026 14:01:23 +0000
Files and hashes: 1: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: B+BSWaJJaHmKGugp5ZKQzn75fartXBWhKIipICn97o0=)
2: mbuE0G4tXcvxYI0m6o1MnCuIyBo.roa (hash: Nc7NtzvPla6o9BhIFsNEzrhAOEqN5rOwpnDgkrScjgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 14:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:bc:a3:9a:25:86:28:05:98:21:47:71:ea:8a:cb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Validity
Not Before: Jun 16 14:01:23 2026 GMT
Not After : Jun 17 14:01:23 2026 GMT
Subject: CN=a042a558d2fa6f8422b4e39557bb46fa38e79e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:70:a0:50:33:1e:f9:72:e4:81:a1:87:84:c7:
5a:e2:30:94:10:96:6b:13:26:da:a6:77:18:cc:37:
48:ab:58:bf:a3:91:ed:c4:45:7a:52:a6:cf:fb:f5:
93:17:21:ec:f2:a3:a2:07:1c:94:03:40:69:2a:1c:
33:60:28:18:70:e6:a8:e3:a0:31:c3:1a:f8:7e:24:
59:e8:37:19:e3:54:18:37:32:8d:9f:42:91:f9:cd:
cc:ad:ba:2b:8e:a3:d2:22:dc:b9:f6:94:c0:1b:16:
9a:42:cc:cb:2d:65:7b:35:d0:ed:3c:52:5b:92:77:
75:30:c7:bb:5c:fb:de:49:91:8c:c4:a7:0f:85:4c:
31:3f:45:45:ce:8d:74:18:7e:75:50:05:91:6a:10:
8f:21:4f:e9:fa:e1:e9:97:60:6e:75:53:8e:c0:74:
95:6d:cb:f4:bc:ae:41:55:3e:ed:67:97:40:55:83:
d4:5e:d1:b5:b1:4a:d3:6c:aa:9f:61:9b:49:fe:5d:
d8:85:7a:70:a0:78:53:b3:99:7d:fb:f7:9c:d4:7b:
0e:e8:37:77:00:86:e5:f0:fd:bc:b8:43:71:5f:e0:
83:c7:bb:73:81:48:f4:fc:b3:95:06:63:66:39:c5:
e0:2b:9b:3d:01:2f:d8:c4:4d:d7:71:00:f6:a5:aa:
31:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:42:A5:58:D2:FA:6F:84:22:B4:E3:95:57:BB:46:FA:38:E7:9E:5F
X509v3 Authority Key Identifier:
keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2e:52:e1:55:28:fd:f5:a2:b0:b8:49:a3:6e:14:1b:20:22:
fe:d8:28:e8:7c:8a:d1:84:ea:4f:c0:6d:fb:a3:80:9f:ec:68:
63:79:bc:a4:1a:a4:b6:6e:fd:47:6b:cc:41:39:bf:fb:f6:c9:
53:b8:2f:9a:e3:e3:ba:b2:0d:26:32:9b:ec:e4:48:b2:8b:b6:
5f:5f:74:36:cd:f0:0f:bc:06:9d:9c:05:2d:ff:6c:17:03:83:
48:29:2c:1e:6d:04:e3:68:fe:da:ba:3e:be:ee:bb:1b:e3:8f:
0f:3b:87:f1:d5:f1:97:27:c7:d2:ad:d1:71:b1:85:43:60:24:
31:a5:56:f7:f4:f8:9e:2e:ed:d3:82:30:40:52:66:83:90:fd:
ca:ca:db:93:33:b1:2f:60:b0:e2:ef:bb:91:78:a1:79:91:3e:
0a:4d:b2:5a:9d:43:c6:36:61:6b:86:55:4a:0f:e0:00:5e:39:
18:0e:ac:26:f1:e5:b0:cd:97:72:7a:11:54:3b:73:8f:25:bf:
a1:d3:e3:8c:e9:32:e8:c0:45:b8:db:db:db:fc:f9:3c:61:8e:
ed:f8:f0:53:02:ba:fc:db:68:8d:46:4c:e9:c2:0e:d8:cd:15:
17:87:98:a4:9b:9a:b5:45:9e:ca:16:95:75:bc:22:b6:88:22:
06:a0:73:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 19:19:34 2026 by rpki-client