Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
File: cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft (raw, json)
Hash identifier: Qm5zAER+ZTLCVX5L3R6Qlq7Zaf5GQzxIzZ8lwi8MRMA=
Subject key identifier: 8E:51:C0:C0:23:36:B0:44:A3:6B:32:8D:7C:A3:13:A4:48:D4:F1:18
Authority key identifier: 73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
Certificate issuer: /CN=7316772efce2a133fb7f8720929d0560cef1db46
Certificate serial: 019D394167A19586E99B879994E05D0F36E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
Manifest number: 069A
Signing time: Sun 29 Mar 2026 11:01:20 +0000
Manifest this update: Sun 29 Mar 2026 11:01:20 +0000
Manifest next update: Mon 30 Mar 2026 11:01:20 +0000
Files and hashes: 1: W00kh9cFoXYEts6Z_wNoICvROmI.roa (hash: 6F92izfRGMl8gegm30l362lw0oFK4K1whATYCIM0f9A=)
2: cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl (hash: VYfaTCBmOG/ERnH9VMXFh5E7Mj8ecF69yrFTIuuP6Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:67:a1:95:86:e9:9b:87:99:94:e0:5d:0f:36:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7316772efce2a133fb7f8720929d0560cef1db46
Validity
Not Before: Mar 29 11:01:20 2026 GMT
Not After : Mar 30 11:01:20 2026 GMT
Subject: CN=8e51c0c02336b044a36b328d7ca313a448d4f118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f6:69:8a:1a:2b:e6:3a:7b:93:ad:e2:0c:48:
58:03:67:bb:9b:6b:58:3b:f4:81:89:26:ca:9c:56:
16:ef:90:84:ff:db:75:cb:9a:b2:51:41:45:69:3b:
78:05:23:25:18:fb:68:b1:a8:ea:ec:4f:36:df:13:
7d:bd:d4:9c:55:1b:26:61:cf:20:94:31:4d:cc:ce:
bb:c1:39:20:8a:0d:85:aa:a5:b3:36:ef:05:3f:92:
88:0d:ab:14:cf:7d:49:70:55:fe:de:36:94:27:0c:
67:3a:b3:8e:92:f3:93:7e:01:f8:da:62:b5:1e:38:
20:f8:b2:6e:9b:43:c0:68:ca:a7:2b:00:14:ea:4d:
e7:6d:6b:47:ef:ed:2b:29:b5:64:11:5c:a3:f0:86:
3b:f1:86:26:cc:cc:46:30:e7:1d:b7:69:3e:1e:d3:
46:0f:24:40:2d:f5:a8:1d:56:d2:e7:38:9b:58:c2:
ba:c1:ce:95:ac:21:4d:98:80:d0:dc:ed:96:87:3a:
3a:92:37:63:0e:ca:90:53:a8:c9:5f:09:74:37:3e:
79:14:42:07:3d:f4:4d:65:02:35:67:17:2c:3b:ba:
25:b0:6c:05:38:fd:65:99:fd:d8:67:c3:4b:b0:5b:
99:6b:a7:c6:ef:af:5f:78:57:21:ba:a8:67:f0:9c:
99:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:51:C0:C0:23:36:B0:44:A3:6B:32:8D:7C:A3:13:A4:48:D4:F1:18
X509v3 Authority Key Identifier:
keyid:73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ed:a3:06:2f:f2:80:5c:6e:c2:29:8c:15:c3:cc:ad:94:8f:
cd:b0:33:53:4f:4a:ff:e5:c9:25:03:ee:59:b9:3e:10:93:bb:
34:9a:81:58:34:75:8c:8d:0d:18:00:1c:08:3c:a2:28:e8:dc:
ce:43:e9:b6:87:c7:dc:b0:b6:9f:4f:bb:4e:8e:82:1f:d0:d8:
bb:33:96:0f:e7:49:a0:58:bb:3b:5e:ab:4f:62:6a:e8:f3:29:
b1:64:26:b6:73:05:80:a3:bd:26:82:ec:1e:23:de:7d:5c:64:
45:11:2b:c8:c8:c1:1b:a4:7a:27:68:fe:50:5a:16:06:cf:aa:
30:41:98:8f:35:96:67:e7:e7:fc:60:81:66:6e:81:18:21:6e:
dc:3b:78:1a:bc:83:33:bd:af:94:7f:47:b3:aa:02:12:9e:aa:
e4:4d:ac:84:ed:d8:c4:c1:29:74:f6:ae:9f:0f:24:5a:e5:77:
6c:2e:9e:78:09:7f:ab:b4:87:f5:d4:40:a4:e6:00:04:46:30:
61:99:a0:28:3a:0f:1c:27:2a:40:1a:a0:3d:81:a8:11:99:06:
41:52:dc:6e:b8:6f:e4:76:3b:e2:cd:64:50:37:aa:05:9c:1b:
b0:30:20:51:07:73:95:93:3b:48:13:4a:90:18:65:14:76:5d:
5c:f4:c1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:37 2026 by rpki-client