Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier: El7qGFWD4Ojey/XIhJM/hhoRi6q4pclpvavEjjSNZZI=
Subject key identifier: 83:2E:C9:F8:1E:52:9F:0F:83:65:32:DF:03:79:A5:A3:8F:7E:82:5B
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 01A1DEDE9CDD09CCF096ADBAC4C365B38A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number: 1529
Signing time: Sun 15 Nov 2026 11:01:33 +0000
Manifest this update: Sun 15 Nov 2026 11:01:33 +0000
Manifest next update: Mon 16 Nov 2026 11:01:33 +0000
Files and hashes: 1: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: YEOsSVvX2l5BAioEbVzrr9DmfsnAMufpKqmNH0JcXG0=)
2: gLcTJvZ-bTiZKez7VJlhXddzj5I.roa (hash: njLU3hmp1ice1mv35YuU3QwtIJDPeTW7I2pUB3WU76k=)
3: iGV0CoyrITzjkKDaw4INbKqkpdE.roa (hash: S/9miWwjqyjrqWzqhVaykBqXwqlsa3o7EOP2wtoRCcU=)
4: t8eIgMClHX3oL8Kz7kDeYL0J8-I.roa (hash: jcUfNtNFO2Y7xEuTx/9w6iJn9BhR83TnoBAGY+TGric=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:9c:dd:09:cc:f0:96:ad:ba:c4:c3:65:b3:8a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Nov 15 11:01:33 2026 GMT
Not After : Nov 16 11:01:33 2026 GMT
Subject: CN=832ec9f81e529f0f836532df0379a5a38f7e825b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:01:cc:42:f9:10:c2:f0:e3:eb:28:0b:d4:f9:
57:91:44:eb:a1:57:51:cb:5a:be:eb:76:a0:60:47:
68:32:c2:75:cd:a8:00:d2:49:4f:43:c6:43:3c:4f:
67:93:fa:a9:3d:7a:36:77:2e:b8:7e:df:50:61:d5:
76:35:7b:46:5c:11:2d:36:84:e2:dc:52:7d:a6:01:
28:b5:0e:d6:a5:38:79:70:e7:72:6c:54:58:4d:9b:
76:fa:ed:31:d5:01:34:b9:1d:a2:c3:b8:c5:db:d1:
63:1e:92:fb:07:d3:2b:dd:3f:a0:5e:16:9c:dd:a6:
35:20:e6:ce:98:50:56:e4:eb:ba:33:8c:d6:d0:1d:
d3:73:6a:3f:44:91:ad:65:98:2a:d2:26:af:b2:d6:
02:35:e1:d9:d7:39:11:df:72:ec:97:9f:dd:eb:55:
6b:6c:2e:0b:57:d0:f3:8a:75:e3:f5:19:15:30:68:
94:31:5b:af:a6:a6:1f:12:d1:bc:e0:bc:06:9f:bb:
d5:ee:05:a0:04:ed:d0:0f:95:8e:e8:7b:f8:c1:72:
36:52:91:e2:61:4b:47:60:21:25:66:cf:f8:b5:ca:
be:ec:68:fc:b4:47:92:90:f7:b0:a0:5e:18:2b:ea:
f1:73:05:f4:80:27:39:af:ea:13:41:fd:ea:7d:40:
6a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2E:C9:F8:1E:52:9F:0F:83:65:32:DF:03:79:A5:A3:8F:7E:82:5B
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:17:99:4e:34:5a:ac:cf:40:ca:97:f8:4f:2c:d0:b9:40:e7:
ab:42:d1:9e:9d:69:79:fc:6a:3f:1b:5e:88:e7:0c:74:8e:16:
a3:71:f5:c0:2f:a4:a8:44:29:d7:75:1f:3b:14:58:38:85:f8:
87:5c:38:aa:a1:35:af:a2:8e:a3:42:b4:75:c7:b0:77:76:99:
ce:6f:3c:09:30:7b:cd:de:10:c5:2f:d7:4b:3f:9c:69:e6:12:
26:68:b9:58:a6:44:b7:97:3c:f2:43:59:d9:bc:de:61:5a:5e:
98:3e:72:8f:0f:da:32:f1:a2:48:a7:36:a5:29:47:27:5b:32:
5a:fe:60:67:02:92:76:f7:e2:9b:e0:2e:f6:ab:98:3f:45:19:
ed:f8:24:90:0a:5d:28:c9:b1:03:4b:8f:18:90:67:a0:f7:48:
63:5d:76:f7:ed:8e:21:89:6a:16:ba:a2:81:e5:54:f3:89:2f:
37:85:85:fc:d3:fc:54:e4:8b:9c:d0:a4:f9:91:be:47:bc:44:
db:e9:a8:2d:34:40:83:4c:3e:b8:e9:5c:8d:f0:35:bc:a7:27:
6d:f3:89:ac:81:42:08:23:6e:aa:d8:d4:bb:1c:7d:f1:db:84:
ec:6c:df:56:42:d7:0f:3d:66:70:f3:4a:46:04:7e:c6:ba:20:
f2:23:56:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:16:24 2026 by rpki-client