Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
File: cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft (raw, json)
Hash identifier: RIy37zz7kH4daMB/7O322R+NowG4fAa+lBP+ff6vcWc=
Subject key identifier: 7B:D1:20:2D:04:E3:FF:01:51:53:91:DF:39:FC:EF:26:9F:8A:B0:82
Authority key identifier: 73:19:77:0F:FB:48:7E:39:10:DD:44:D9:DB:0A:53:4D:8D:EF:78:FA
Certificate issuer: /CN=7319770ffb487e3910dd44d9db0a534d8def78fa
Certificate serial: 019EB8EA5801EC0575345396D13CFF9D6FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
Manifest number: 19
Signing time: Thu 11 Jun 2026 23:00:26 +0000
Manifest this update: Thu 11 Jun 2026 23:00:26 +0000
Manifest next update: Fri 12 Jun 2026 23:00:26 +0000
Files and hashes: 1: 4VECAtiWqje_60X7y9lsdprg2oI.roa (hash: +zMygkYKU5ImT2bqbHmd0qv5emwVpKIl+ThnFqmu454=)
2: cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl (hash: 8dgKwEFJg4kbVN1Mxv2XnXUSFE8w7EdlKKatzmAUGqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:58:01:ec:05:75:34:53:96:d1:3c:ff:9d:6f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319770ffb487e3910dd44d9db0a534d8def78fa
Validity
Not Before: Jun 11 23:00:26 2026 GMT
Not After : Jun 12 23:00:26 2026 GMT
Subject: CN=7bd1202d04e3ff01515391df39fcef269f8ab082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:60:b9:94:a7:5a:88:5e:12:a2:8c:35:c3:
e5:ba:c9:65:7e:c6:60:10:50:4f:c7:c7:22:98:a4:
cf:52:f2:c7:6c:7f:89:2b:c3:5d:64:c7:f9:a9:be:
93:53:da:c1:53:48:b4:5e:73:81:b2:56:3f:12:2c:
1e:6c:24:49:a5:e9:1b:6f:7d:7b:5c:9c:3b:dd:62:
cb:66:82:c1:4f:f2:30:79:ad:14:9e:5d:d3:d9:ec:
ce:3d:0a:58:4d:ba:ea:12:17:1a:dd:ef:4a:77:bf:
4f:9d:42:ad:02:07:e0:e7:a5:a7:be:43:11:ef:11:
d3:c7:9f:23:90:65:a0:90:88:c6:02:90:78:49:b2:
fa:4b:46:2e:91:46:b5:c0:d8:f5:c0:ff:e6:56:7b:
17:90:1c:73:41:0a:7a:b9:d8:02:d4:0d:ae:52:69:
b1:bd:55:7c:56:fc:b6:f2:54:58:9d:c3:2f:d3:d3:
0d:62:15:bb:ce:79:c7:ed:f5:55:0b:07:a3:bf:dc:
1e:6f:1a:13:11:8a:5e:3a:ca:34:9d:98:7b:1a:0f:
cc:e0:b1:9b:81:78:c9:a2:3b:e5:61:8c:d0:23:93:
4c:43:8e:76:94:2b:67:a2:6a:fd:20:14:ee:65:ca:
2a:65:56:71:cf:a6:67:57:ed:44:af:1c:4a:64:d5:
d2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D1:20:2D:04:E3:FF:01:51:53:91:DF:39:FC:EF:26:9F:8A:B0:82
X509v3 Authority Key Identifier:
keyid:73:19:77:0F:FB:48:7E:39:10:DD:44:D9:DB:0A:53:4D:8D:EF:78:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ea:89:2e:a3:7d:a7:69:1a:c0:5b:97:70:6f:fd:c1:24:02:
4f:d4:fc:44:88:cc:da:14:9d:53:2c:5e:a2:9e:58:6c:a6:c8:
dc:df:fd:c0:e8:be:3b:2c:3c:65:77:86:f4:12:06:bf:3e:9e:
65:4e:bb:3f:47:f1:0f:4e:a8:11:c4:bf:a7:92:ad:1b:57:7e:
fb:3c:5a:08:e2:b3:f0:97:ef:95:49:6a:87:09:30:4d:e9:91:
71:9f:0a:e1:6b:18:9b:8b:77:78:b9:14:d9:6c:10:7a:53:8a:
e5:cf:53:7e:5f:6b:cd:9e:ab:f6:bb:60:0d:b1:82:39:e0:0b:
35:94:b2:92:d5:e7:5f:67:7a:41:13:19:4a:9d:98:1e:10:f8:
a7:af:7b:fd:4c:3e:bc:cc:45:9e:05:72:db:0b:b8:66:27:f1:
cf:78:f4:3c:fd:e1:3b:57:a9:45:c8:a8:7f:9f:69:d6:82:9a:
0b:d1:b6:a1:90:8b:32:dd:81:87:4f:bc:45:2b:ca:da:c5:b6:
40:ef:8e:c6:50:47:0f:af:4d:57:cf:fe:0c:42:43:8b:b8:f6:
c6:a7:c0:0f:73:42:f0:ba:b1:86:68:2d:01:da:b7:a7:ae:69:
42:46:f1:30:8a:8e:4b:08:41:c7:ec:86:c7:0d:86:7b:7c:68:
19:bc:59:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:13:54 2026 by rpki-client