Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
File: cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft (raw, json)
Hash identifier: DZdZbLX0ix8MST3BKHp6upEJQlZgbAq9onUtCyZjq0g=
Subject key identifier: 24:46:6E:AC:4F:13:31:24:A0:74:75:A4:58:4A:7E:C7:B5:CD:BC:E5
Authority key identifier: 73:19:77:0F:FB:48:7E:39:10:DD:44:D9:DB:0A:53:4D:8D:EF:78:FA
Certificate issuer: /CN=7319770ffb487e3910dd44d9db0a534d8def78fa
Certificate serial: 01A08AFAE56D41CEC8A8AF935DE7A9AD4983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
Manifest number: 010B
Signing time: Thu 10 Sep 2026 11:01:33 +0000
Manifest this update: Thu 10 Sep 2026 11:01:33 +0000
Manifest next update: Fri 11 Sep 2026 11:01:33 +0000
Files and hashes: 1: J-ZrGngsinzzxKhty_0eOSBvSyE.roa (hash: yEjmBQt7jbBwQjbfz6E3LLZh+zLBv/2IV7cQ/+10/as=)
2: cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl (hash: kU8VLpW0Q2x1PyBczKzF9GmYrl/8aUuNWslqcQ82CUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:e5:6d:41:ce:c8:a8:af:93:5d:e7:a9:ad:49:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319770ffb487e3910dd44d9db0a534d8def78fa
Validity
Not Before: Sep 10 11:01:33 2026 GMT
Not After : Sep 11 11:01:33 2026 GMT
Subject: CN=24466eac4f133124a07475a4584a7ec7b5cdbce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cf:c8:cc:4c:e5:bc:11:3d:f6:5e:e3:86:8c:
d9:61:a2:79:67:1a:29:e4:34:04:93:b8:cc:43:cf:
9f:8e:5b:4d:e2:ee:10:40:05:53:cf:6b:51:5f:63:
8a:4b:16:ff:b8:96:14:9e:f5:91:9b:66:2c:4b:e7:
f6:62:7c:d0:52:cf:c5:43:1e:dd:19:35:bc:84:5e:
33:20:2b:66:34:bc:91:22:04:36:af:cb:43:55:7f:
79:08:ee:44:ab:13:fb:03:ce:c8:76:8c:25:df:45:
34:5a:79:2b:d4:38:85:c9:41:4c:6b:d4:de:c2:99:
9d:da:fe:71:82:bb:54:73:a6:2b:d4:f5:33:e5:16:
67:c1:db:85:a2:d5:ef:b6:14:c9:68:5f:00:3a:65:
a6:c9:de:be:b7:9c:27:ea:54:47:04:f9:5c:43:30:
a4:46:43:ed:cb:b0:b9:23:99:51:e6:3d:57:65:01:
04:82:81:b1:30:f9:78:91:ac:4f:da:1a:04:88:1b:
e7:bc:20:a0:1e:12:c4:91:3a:d1:d6:a9:da:23:d1:
aa:f2:bd:f3:bf:6c:82:33:1e:ca:44:e0:ed:d2:52:
77:49:ef:d1:f2:7a:0d:19:bb:a5:e9:bc:a5:7a:ea:
76:d6:8a:dd:cf:01:2a:ab:75:77:3e:45:e6:4d:6e:
53:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:46:6E:AC:4F:13:31:24:A0:74:75:A4:58:4A:7E:C7:B5:CD:BC:E5
X509v3 Authority Key Identifier:
keyid:73:19:77:0F:FB:48:7E:39:10:DD:44:D9:DB:0A:53:4D:8D:EF:78:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:48:fa:f7:2f:d9:22:99:86:e2:39:5a:97:c1:31:77:5a:ec:
75:92:3a:51:e8:ae:6d:3b:c2:c8:e9:e0:47:53:77:84:b9:77:
3c:c0:41:6a:80:db:4d:8c:85:a4:4b:fb:02:3c:08:b8:0c:c0:
62:dc:e2:e2:34:0e:23:d6:ee:8e:ab:f3:48:bf:a4:aa:8a:56:
6e:93:2d:5d:cd:87:0f:66:dc:b5:c5:7e:dd:49:c0:1c:dd:40:
9e:32:1e:c7:97:9e:25:a9:bd:e7:d1:d5:19:f1:6c:9e:8e:1c:
31:bb:1b:42:e3:16:50:d7:82:1f:f1:bf:fd:a0:57:af:9e:06:
21:90:51:89:da:e2:a4:ac:23:f1:73:2e:e1:cf:b4:b9:7f:d1:
d2:24:f7:82:55:3c:e0:41:fa:f1:32:ea:1d:4c:7b:96:4e:7d:
3d:a1:92:d5:23:23:5e:79:79:2e:38:e3:eb:0c:22:7f:fe:63:
a2:5b:20:40:ee:f4:6c:04:4a:cc:22:88:2e:46:19:77:62:bb:
f2:69:7c:53:5a:c5:62:b0:d8:ba:44:c3:c3:80:10:5b:c6:ec:
fe:36:dd:f9:09:a1:2e:a0:a0:9e:41:72:ba:f4:c9:e8:a7:ad:
84:12:1f:44:74:82:ad:42:15:8d:64:04:29:00:20:f7:6e:85:
df:c6:9c:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCK+uVtQc7IqK+TXeeprUmDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMTk3NzBmZmI0ODdlMzkxMGRkNDRkOWRiMGE1MzRkOGRl
Zjc4ZmEwHhcNMjYwOTEwMTEwMTMzWhcNMjYwOTExMTEwMTMzWjAzMTEwLwYDVQQD
EygyNDQ2NmVhYzRmMTMzMTI0YTA3NDc1YTQ1ODRhN2VjN2I1Y2RiY2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8/IzEzlvBE99l7jhozZYaJ5Zxop
5DQEk7jMQ8+fjltN4u4QQAVTz2tRX2OKSxb/uJYUnvWRm2YsS+f2YnzQUs/FQx7d
GTW8hF4zICtmNLyRIgQ2r8tDVX95CO5EqxP7A87Idowl30U0Wnkr1DiFyUFMa9Te
wpmd2v5xgrtUc6Yr1PUz5RZnwduFotXvthTJaF8AOmWmyd6+t5wn6lRHBPlcQzCk
RkPty7C5I5lR5j1XZQEEgoGxMPl4kaxP2hoEiBvnvCCgHhLEkTrR1qnaI9Gq8r3z
v2yCMx7KRODt0lJ3Se/R8noNGbul6byleup21ordzwEqq3V3PkXmTW5TVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRGbqxPEzEkoHR1pFhKfse1zbzlMB8GA1UdIwQY
MBaAFHMZdw/7SH45EN1E2dsKU02N73j6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3hsM0RfdElmamtRM1VUWjJ3cFRUWTN2ZVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81OGM5YTAtZmZjZi00MGI4LTk3YmMt
ZWYwYTdjMTUwNzE2LzEvY3hsM0RfdElmamtRM1VUWjJ3cFRUWTN2ZVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi81OGM5YTAtZmZjZi00MGI4LTk3YmMtZWYwYTdjMTUwNzE2
LzEvY3hsM0RfdElmamtRM1VUWjJ3cFRUWTN2ZVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo0j69y/Z
IpmG4jlal8Exd1rsdZI6UeiubTvCyOngR1N3hLl3PMBBaoDbTYyFpEv7AjwIuAzA
Ytzi4jQOI9bujqvzSL+kqopWbpMtXc2HD2bctcV+3UnAHN1AnjIex5eeJam959HV
GfFsno4cMbsbQuMWUNeCH/G//aBXr54GIZBRidripKwj8XMu4c+0uX/R0iT3glU8
4EH68TLqHUx7lk59PaGS1SMjXnl5Ljjj6wwif/5jolsgQO70bARKzCKILkYZd2K7
8ml8U1rFYrDYukTDw4AQW8bs/jbd+QmhLqCgnkFyuvTJ6KethBIfRHSCrUIVjWQE
KQAg926F38acuQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:26:10 2026 by rpki-client