Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier: oSUxqxKgG9zujLzcbUJDSKBQV15LgTk0xLvCq9T36H0=
Subject key identifier: AE:09:33:4E:91:4D:DE:5E:0B:48:4F:04:CA:6E:50:54:24:BF:7A:A5
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 01A0D07F641A4F1CB0DD2F198F2DC5406705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number: 149D
Signing time: Wed 23 Sep 2026 23:00:04 +0000
Manifest this update: Wed 23 Sep 2026 23:00:04 +0000
Manifest next update: Thu 24 Sep 2026 23:00:04 +0000
Files and hashes: 1: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: OD3W93MWgSo3Kgxd2XJW+HaTcv+TACaV4x0QRPwILFk=)
2: gLcTJvZ-bTiZKez7VJlhXddzj5I.roa (hash: njLU3hmp1ice1mv35YuU3QwtIJDPeTW7I2pUB3WU76k=)
3: iGV0CoyrITzjkKDaw4INbKqkpdE.roa (hash: S/9miWwjqyjrqWzqhVaykBqXwqlsa3o7EOP2wtoRCcU=)
4: t8eIgMClHX3oL8Kz7kDeYL0J8-I.roa (hash: jcUfNtNFO2Y7xEuTx/9w6iJn9BhR83TnoBAGY+TGric=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:64:1a:4f:1c:b0:dd:2f:19:8f:2d:c5:40:67:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Sep 23 23:00:04 2026 GMT
Not After : Sep 24 23:00:04 2026 GMT
Subject: CN=ae09334e914dde5e0b484f04ca6e505424bf7aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2f:83:06:13:f5:bd:25:f6:7d:7f:3f:ec:a1:
40:85:ba:c3:01:16:99:54:50:7d:87:40:6a:0d:ac:
fb:3b:9d:3f:2c:1c:0f:50:d4:bb:bc:bc:e6:47:5e:
dd:ff:e3:fb:f1:42:a8:86:22:40:8f:f0:e7:ed:4e:
77:83:77:c3:8a:8d:78:0e:1d:97:c9:8b:46:5a:d0:
ff:11:b3:0c:d3:fb:7e:cc:2b:83:bd:99:e6:2c:a5:
9b:f0:65:be:0c:13:0a:91:0a:53:28:2f:1e:43:97:
42:de:fa:7f:30:9e:cc:f0:bf:99:98:e2:49:25:b2:
c1:d4:8c:26:2d:ad:36:49:7f:f3:ba:20:07:de:91:
dd:ca:a3:b5:08:18:9b:0c:26:fc:33:78:5b:37:e3:
08:29:9b:16:1f:e2:ea:63:2d:01:4d:59:85:ba:4a:
d2:70:6e:4d:fa:98:19:4c:3e:2a:6a:83:5b:df:f7:
20:02:4e:89:d6:36:97:28:02:c7:d1:ad:bb:8f:1c:
20:00:8f:cc:5f:72:cb:0e:52:c1:22:79:2c:a3:e5:
0b:7f:23:9d:b7:fe:e6:64:61:1e:44:74:59:27:01:
98:9d:64:89:6a:9c:76:31:1a:a4:34:be:1f:77:11:
25:e8:09:49:de:b7:48:de:c9:34:08:41:8f:ec:9f:
d0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:09:33:4E:91:4D:DE:5E:0B:48:4F:04:CA:6E:50:54:24:BF:7A:A5
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:38:dc:ce:c1:d4:47:59:99:b3:65:89:df:0e:c3:ef:28:1d:
51:21:48:e5:93:f6:1a:52:e9:ec:bd:be:c9:c7:52:61:9b:18:
b1:1a:96:e1:2b:80:41:fc:ff:0c:fc:51:19:a1:ab:a5:59:72:
d8:0b:b3:d4:2f:d6:f9:2a:bb:b0:84:58:c8:22:f4:eb:ba:d1:
d2:49:97:89:2b:85:8f:6f:0b:6f:e9:05:15:88:8c:15:31:a2:
27:12:21:70:db:cf:03:5c:86:2c:ae:d1:f5:01:8a:4f:df:e1:
3b:6e:3d:b4:ad:b0:4a:41:01:08:80:44:48:be:46:45:f6:f4:
28:80:49:18:cd:46:d5:84:f9:56:3a:1c:d5:65:92:8f:61:6e:
df:a6:f6:76:26:42:d9:e9:3d:61:80:98:a4:d3:38:11:27:fd:
f2:5a:ac:ac:d9:64:1e:22:f7:3d:5a:13:72:e2:4d:30:21:bb:
4c:8f:e8:50:ca:ce:7b:4b:9f:54:a9:5a:f5:24:fe:82:09:6f:
8d:ce:98:19:76:d3:98:7d:77:d3:92:26:30:ec:07:8d:98:75:
92:68:70:eb:5b:4f:04:d1:06:89:3e:e2:b9:a2:e2:cd:e4:46:
c4:c5:52:a3:01:e9:a4:76:2d:59:df:63:e3:c8:70:dc:bc:f8:
e9:d1:65:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:09:53 2026 by rpki-client