Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
File: Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json)
Hash identifier: lxyqICE2i7xixYHXE1Lxfnqxym2FAFsKVrs0k1h/7XM=
Subject key identifier: 63:2C:D0:8B:22:39:0D:A4:05:7A:67:CE:67:05:B9:EE:A7:DF:FF:F2
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 019D2583E52E035A8C6C5A364BE8FE9F4CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
Manifest number: 189B
Signing time: Wed 25 Mar 2026 15:01:34 +0000
Manifest this update: Wed 25 Mar 2026 15:01:34 +0000
Manifest next update: Thu 26 Mar 2026 15:01:34 +0000
Files and hashes: 1: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: tCpy0kdvgZAivHNnZNzpXaMmrOfQQ2J3XXp6GeUVO6E=)
2: GPIsYlil8kPkRS6gEM2NHsqbCFY.roa (hash: kvkFMQZNWkoCHYm6i5KcWUr0FuuwyQMeHon9wF+Il04=)
3: hsTKNuFtecu81R43BCP7v63FtKE.roa (hash: Jfq06SGiKWbDyYONhWT4ALN3kqL199bV3kH8pBzjomI=)
4: sJSAOEoKH3yqMibmQkkicbcwvd4.roa (hash: 3WriKsxAWFbvJqa+g1N1RIzhXWZvpso2ZA3Pg5F32hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:e5:2e:03:5a:8c:6c:5a:36:4b:e8:fe:9f:4c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Mar 25 15:01:34 2026 GMT
Not After : Mar 26 15:01:34 2026 GMT
Subject: CN=632cd08b22390da4057a67ce6705b9eea7dffff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:07:b7:d1:5f:90:b5:25:6a:a1:39:11:51:c7:
e0:df:45:dd:ec:0c:84:23:72:63:e5:b6:c0:7b:ba:
46:f4:10:60:04:43:03:f4:ec:66:6b:d7:27:eb:19:
a1:17:ef:6e:d9:60:37:ea:10:ec:db:64:71:79:da:
e9:6a:97:a8:42:80:64:9f:09:d1:22:2b:47:2c:ee:
bd:58:cb:cd:f5:32:9e:16:7e:73:78:9c:96:33:8e:
dc:57:36:4f:96:62:c1:56:55:c5:bd:8e:9e:2b:46:
44:7d:5f:12:c7:90:34:0f:55:b3:78:25:fd:c6:6b:
19:32:43:56:f5:13:3d:e8:13:50:ed:9f:9c:ed:cf:
87:f8:71:d1:08:ff:b0:e0:6b:26:9b:30:27:a7:69:
03:05:53:16:de:f4:f0:89:75:ec:00:ad:f5:f2:d9:
ec:51:53:90:80:5e:f6:35:39:60:57:a2:a6:64:62:
c1:1e:f2:3a:0e:a3:4f:04:76:ed:49:db:6d:ed:78:
bc:2c:69:ec:52:36:07:03:ec:a7:ee:3d:74:e2:63:
bf:7b:ac:f5:25:1f:80:2f:14:ff:f1:18:02:51:9a:
a8:8b:cf:d6:4d:f0:b7:c5:27:c6:2d:51:bc:97:15:
f3:d2:4a:b6:e7:b1:3d:7e:18:55:00:a0:7c:54:bc:
0b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2C:D0:8B:22:39:0D:A4:05:7A:67:CE:67:05:B9:EE:A7:DF:FF:F2
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:39:11:32:93:23:9d:56:0d:1a:35:ad:0d:c2:c1:fa:a1:e3:
c3:16:fe:aa:23:05:8c:3f:22:ae:cb:1f:b5:64:e0:03:ba:03:
a8:21:69:f4:81:10:6f:3a:d6:35:01:0a:4a:c1:67:ce:9d:26:
92:53:25:98:63:f0:91:05:86:72:81:bd:ce:7a:db:03:c7:05:
7d:8b:04:0e:5a:c6:d6:89:e7:6d:1b:36:d6:a6:23:ff:d6:3e:
3f:34:76:5f:e7:6d:86:fa:f3:bc:ef:48:b4:40:ae:e1:92:0e:
ab:16:a7:61:ef:eb:90:3c:3c:97:b6:67:19:68:e9:b4:0e:63:
87:4d:73:c2:37:61:3b:7a:a7:77:69:8f:80:5a:05:c3:09:bb:
c1:21:0e:d9:43:50:e6:60:45:ad:4b:42:af:20:24:cb:ed:fd:
26:8b:38:20:c0:19:06:be:b3:ba:a5:e6:e4:c5:02:e8:4b:aa:
f1:69:2b:2f:c9:22:ed:85:4d:b9:be:77:5a:81:f5:6e:c7:53:
d7:e2:24:8b:3b:3d:d2:92:19:d1:0e:fb:d8:99:d1:6a:14:db:
6c:c7:d3:c1:ca:9a:cd:4e:74:e1:ff:bf:71:29:db:ac:a1:a0:
9f:82:1f:c3:71:55:e3:38:1b:f4:9f:82:c9:aa:57:5e:3a:bf:
b0:ab:77:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg+UuA1qMbFo2S+j+n0zwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMWU3MmYzZDA5NTdmNWE2ZTNiZDFiODQ0YTEyYTYxNDc0
NDkwMjcwHhcNMjYwMzI1MTUwMTM0WhcNMjYwMzI2MTUwMTM0WjAzMTEwLwYDVQQD
Eyg2MzJjZDA4YjIyMzkwZGE0MDU3YTY3Y2U2NzA1YjllZWE3ZGZmZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2we30V+QtSVqoTkRUcfg30Xd7AyE
I3Jj5bbAe7pG9BBgBEMD9Oxma9cn6xmhF+9u2WA36hDs22RxedrpapeoQoBknwnR
IitHLO69WMvN9TKeFn5zeJyWM47cVzZPlmLBVlXFvY6eK0ZEfV8Sx5A0D1WzeCX9
xmsZMkNW9RM96BNQ7Z+c7c+H+HHRCP+w4GsmmzAnp2kDBVMW3vTwiXXsAK318tns
UVOQgF72NTlgV6KmZGLBHvI6DqNPBHbtSdtt7Xi8LGnsUjYHA+yn7j104mO/e6z1
JR+ALxT/8RgCUZqoi8/WTfC3xSfGLVG8lxXz0kq257E9fhhVAKB8VLwLrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMs0IsiOQ2kBXpnzmcFue6n3//yMB8GA1UdIwQY
MBaAFAsecvPQlX9abjvRuEShKmFHRJAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQt
MDU0OGQzODk1YTU1LzEvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQtMDU0OGQzODk1YTU1
LzEvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtjkRMpMj
nVYNGjWtDcLB+qHjwxb+qiMFjD8irssftWTgA7oDqCFp9IEQbzrWNQEKSsFnzp0m
klMlmGPwkQWGcoG9znrbA8cFfYsEDlrG1onnbRs21qYj/9Y+PzR2X+dthvrzvO9I
tECu4ZIOqxanYe/rkDw8l7ZnGWjptA5jh01zwjdhO3qnd2mPgFoFwwm7wSEO2UNQ
5mBFrUtCryAky+39Jos4IMAZBr6zuqXm5MUC6Euq8WkrL8ki7YVNub53WoH1bsdT
1+Ikizs90pIZ0Q772JnRahTbbMfTwcqazU504f+/cSnbrKGgn4Ifw3FV4zgb9J+C
yapXXjq/sKt3Eg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:08 2026 by rpki-client