Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.mft
File: Cx_IbXySo01haTZCvs_-mgnkq5M.mft (raw, json)
Hash identifier: Mo7m7TRfwS5rYkxnPhamXx1dbM/PnOla8ZnHnNkGj20=
Subject key identifier: 75:6D:58:B4:0A:45:83:2C:EE:1B:07:D4:DA:72:F8:48:18:24:D1:76
Authority key identifier: 0B:1F:C8:6D:7C:92:A3:4D:61:69:36:42:BE:CF:FE:9A:09:E4:AB:93
Certificate issuer: /CN=0b1fc86d7c92a34d61693642becffe9a09e4ab93
Certificate serial: 019F85D6E6B9A5EED46F90F1755F8EF00B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx_IbXySo01haTZCvs_-mgnkq5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:01:21 +0000
Manifest this update: Tue 21 Jul 2026 18:01:21 +0000
Manifest next update: Wed 22 Jul 2026 18:01:21 +0000
Files and hashes: 1: Cx_IbXySo01haTZCvs_-mgnkq5M.crl (hash: BSWOdM4n2M8yGvV/Rz84zZPd+RhQwIkcSkdePrUjZsU=)
2: Sh2PEP2-MbPB0IM3ViP0tnARGnw.roa (hash: aLTyx16ru8CGVowWY4gCMQ3X+iZjRgCKx74BRuePAjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx_IbXySo01haTZCvs_-mgnkq5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:e6:b9:a5:ee:d4:6f:90:f1:75:5f:8e:f0:0b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1fc86d7c92a34d61693642becffe9a09e4ab93
Validity
Not Before: Jul 21 18:01:21 2026 GMT
Not After : Jul 22 18:01:21 2026 GMT
Subject: CN=756d58b40a45832cee1b07d4da72f8481824d176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fb:12:bb:00:5c:5d:38:24:94:a5:fb:f7:0c:
f3:87:6b:44:df:41:ea:bc:c8:a7:ec:31:01:d0:5e:
c1:7d:d9:a4:57:e9:60:b6:14:bc:c8:f5:12:12:97:
e3:ff:dc:39:18:26:4b:22:40:1b:1f:34:18:d4:18:
1c:83:1d:23:10:d0:d6:fb:de:8c:cc:68:d2:fd:cb:
ca:19:52:e6:f4:88:c2:5f:54:35:57:54:90:42:78:
72:e6:a4:15:63:b1:61:44:67:e4:d0:5a:2f:de:dc:
ad:bc:47:64:63:98:7d:9f:45:d5:5a:9c:78:83:a0:
ba:a7:75:26:7d:2b:dc:ec:2d:88:fc:1f:97:67:0d:
e4:83:79:9b:ab:1f:b1:39:36:ae:92:ae:ee:57:b9:
1b:5f:e6:27:ba:29:cf:77:e8:86:0b:2a:e5:8b:a1:
05:a5:4c:40:77:a4:bc:e9:85:2a:02:44:95:d8:6f:
71:b4:0b:f1:c1:28:05:2d:0d:00:21:4d:40:3b:42:
4a:0b:28:ac:52:d7:26:c8:b7:bf:a7:27:07:34:a7:
ea:44:fa:20:ea:5a:a2:ae:b5:52:c4:d9:2f:8e:43:
6f:a3:1e:1b:45:16:fa:13:4a:b1:0e:6d:46:d9:30:
ab:43:6d:a5:dd:b5:a1:1b:18:bd:b9:c6:3b:39:5b:
97:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6D:58:B4:0A:45:83:2C:EE:1B:07:D4:DA:72:F8:48:18:24:D1:76
X509v3 Authority Key Identifier:
keyid:0B:1F:C8:6D:7C:92:A3:4D:61:69:36:42:BE:CF:FE:9A:09:E4:AB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx_IbXySo01haTZCvs_-mgnkq5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2e:76:42:48:e8:28:8e:46:aa:52:27:67:8b:d7:9f:93:24:
f1:2d:34:2c:06:a5:05:bc:30:e7:46:18:72:0c:9d:07:b1:67:
fe:35:ec:b9:c9:fd:9b:10:d0:09:24:9f:4c:44:28:b4:10:dd:
2d:56:12:3f:b9:11:19:35:a1:fb:97:5c:11:eb:7d:38:e9:3d:
8e:7c:a9:e5:fc:cd:ec:ee:1c:b4:fd:56:de:84:fd:f3:5a:4d:
66:e2:58:f7:41:b6:74:82:28:c2:89:6d:9e:c0:42:96:5a:29:
db:f7:78:1e:50:e1:6b:12:3d:c1:41:d5:4f:44:d2:c1:af:e1:
ae:fd:b3:b2:ed:9f:bb:19:ab:4c:23:48:3d:27:20:65:24:42:
24:c2:f6:6d:4d:d0:c5:d9:0e:f4:7e:ba:ba:27:c3:1b:90:ac:
85:25:1a:d2:9a:25:b8:3d:4a:21:28:7a:d6:96:4a:4c:52:01:
0f:68:63:96:11:a2:0d:08:cd:59:a0:1b:c9:83:77:73:79:cd:
e2:ee:61:9c:c9:4a:f6:6c:f9:4d:75:fc:d5:77:b7:9e:b6:62:
9e:e3:a5:42:3b:8f:17:d2:35:60:08:92:81:3f:38:80:33:cc:
78:39:a8:2a:52:9e:2e:c2:c8:59:be:17:a0:24:6e:08:b5:b7:
a9:07:b5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:34:06 2026 by rpki-client