Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
File: cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft (raw, json)
Hash identifier: ZFD59GGbd9PsEooAH1WRCMSiZMP6OIFKIYVhXJshSfY=
Subject key identifier: 73:7E:05:6B:D7:ED:72:C5:B8:30:24:3E:29:BE:E1:B6:56:99:E3:F7
Authority key identifier: 73:19:77:0F:FB:48:7E:39:10:DD:44:D9:DB:0A:53:4D:8D:EF:78:FA
Certificate issuer: /CN=7319770ffb487e3910dd44d9db0a534d8def78fa
Certificate serial: 01A17C609B550E9BF765AD042FF57515294A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
Manifest number: 0188
Signing time: Tue 27 Oct 2026 08:01:08 +0000
Manifest this update: Tue 27 Oct 2026 08:01:08 +0000
Manifest next update: Wed 28 Oct 2026 08:01:08 +0000
Files and hashes: 1: J-ZrGngsinzzxKhty_0eOSBvSyE.roa (hash: yEjmBQt7jbBwQjbfz6E3LLZh+zLBv/2IV7cQ/+10/as=)
2: cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl (hash: xykIE76FgS/9ZRaGkZr/b9ZW+W/HnmUFHLuOPKB70YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:9b:55:0e:9b:f7:65:ad:04:2f:f5:75:15:29:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319770ffb487e3910dd44d9db0a534d8def78fa
Validity
Not Before: Oct 27 08:01:08 2026 GMT
Not After : Oct 28 08:01:08 2026 GMT
Subject: CN=737e056bd7ed72c5b830243e29bee1b65699e3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a1:c3:be:0f:f1:b6:cf:57:04:9b:46:4f:fc:
3d:d9:11:ca:ca:5a:87:7c:be:6c:43:59:67:65:26:
43:6e:4e:c5:88:2f:72:e0:96:97:12:ed:83:5d:3c:
96:db:ff:75:d3:76:f0:01:fa:d1:08:60:cf:3d:d7:
ed:dc:51:b2:ef:b3:80:cb:a0:c2:1d:79:b5:ac:ae:
b7:fb:14:ef:d2:23:14:2a:24:ec:21:78:e8:02:75:
c1:dd:6d:75:78:59:59:e5:19:c9:39:ba:a7:eb:d8:
95:47:48:15:6b:d7:96:b5:a8:c7:45:b1:90:09:07:
f1:2c:56:e2:26:76:09:72:69:52:7c:d0:d5:3d:36:
f3:e4:a5:7c:3c:f2:62:3b:b2:7b:9a:3a:0e:42:ac:
31:94:31:e9:24:8b:81:aa:e1:17:4d:15:74:58:ab:
21:de:e5:6c:6d:73:c9:2f:c6:57:b7:d1:48:e6:b8:
d1:1a:2a:0d:65:87:ee:07:bc:25:5d:3c:d9:2d:05:
b6:f1:24:7a:e7:ca:11:61:3d:f3:0c:84:d2:03:4c:
5b:65:33:cd:69:9d:13:a3:6b:14:39:01:33:28:43:
a1:12:4e:3e:9d:06:c0:93:f4:97:66:0a:43:c3:3f:
85:2a:c7:52:ca:26:e3:0f:52:4e:21:b2:ab:54:93:
29:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7E:05:6B:D7:ED:72:C5:B8:30:24:3E:29:BE:E1:B6:56:99:E3:F7
X509v3 Authority Key Identifier:
keyid:73:19:77:0F:FB:48:7E:39:10:DD:44:D9:DB:0A:53:4D:8D:EF:78:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:07:04:55:10:b3:5d:be:9c:ec:f1:dd:e0:3f:df:e1:22:80:
37:ae:44:0c:e5:51:7b:de:8a:eb:b3:bd:be:eb:b7:17:f9:76:
b7:b3:05:99:a3:81:14:e5:68:12:43:3a:e2:23:92:96:17:51:
b8:98:f5:7a:c2:44:9e:54:9c:d2:35:be:19:6a:a7:97:90:1c:
90:e8:8b:38:0f:65:22:db:bb:ef:58:ea:56:2d:c1:67:d3:34:
b8:66:a0:5b:c7:dc:08:7b:ff:77:e3:74:2c:01:e4:27:7c:89:
5a:e6:cf:90:66:fa:c7:2d:24:a0:39:f9:a4:81:01:b0:a2:3f:
dd:12:cb:22:c5:fe:f6:22:c2:f3:c4:a8:75:f6:58:d1:e1:1f:
52:b1:2b:ea:43:d7:69:3f:f0:69:17:27:02:64:cf:8a:86:c3:
21:29:e9:ec:09:0a:07:b0:05:81:21:8a:3d:bf:2a:0e:8f:34:
c8:30:19:8b:cc:21:e2:a3:40:d1:ec:46:47:3f:98:c8:4a:47:
f4:b1:71:b3:e4:f9:ad:e1:d8:fd:95:7d:a7:f1:16:52:ec:43:
70:ef:c2:e2:b1:dd:68:61:01:68:12:cf:07:94:53:da:32:f6:
de:77:a6:c6:e4:bc:85:fe:5c:8d:5a:a7:c5:82:fd:e5:be:e6:
8f:42:6b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:24:28 2026 by rpki-client