Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier: I7Bf0GcAPQaNgq4ACgUbKHGNPGQOzsUuGnciM60LxGg=
Subject key identifier: 2E:B9:AE:1D:D3:A2:CF:99:64:2E:3D:58:3C:5D:C1:37:57:C6:5A:D0
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 019D25F1909B52E94D149D0D2EA7AC469E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number: 12B7
Signing time: Wed 25 Mar 2026 17:01:21 +0000
Manifest this update: Wed 25 Mar 2026 17:01:21 +0000
Manifest next update: Thu 26 Mar 2026 17:01:21 +0000
Files and hashes: 1: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: s/fbiNLIhgOzXzWUNw/cbizmNPrA7k0HphauPC+qrrY=)
2: gLcTJvZ-bTiZKez7VJlhXddzj5I.roa (hash: njLU3hmp1ice1mv35YuU3QwtIJDPeTW7I2pUB3WU76k=)
3: iGV0CoyrITzjkKDaw4INbKqkpdE.roa (hash: S/9miWwjqyjrqWzqhVaykBqXwqlsa3o7EOP2wtoRCcU=)
4: t8eIgMClHX3oL8Kz7kDeYL0J8-I.roa (hash: jcUfNtNFO2Y7xEuTx/9w6iJn9BhR83TnoBAGY+TGric=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:90:9b:52:e9:4d:14:9d:0d:2e:a7:ac:46:9e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Mar 25 17:01:21 2026 GMT
Not After : Mar 26 17:01:21 2026 GMT
Subject: CN=2eb9ae1dd3a2cf99642e3d583c5dc13757c65ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:59:f2:6c:9c:a8:d7:1e:3f:ff:0d:cb:0c:
63:d6:71:61:4c:98:b8:14:a3:3b:4f:43:40:43:cd:
d4:d1:95:77:ca:1a:43:49:7a:26:bd:4b:68:be:ab:
c0:82:34:10:d5:e9:dd:cd:fc:58:e4:2e:c7:df:f8:
c7:82:47:a5:89:fb:00:b4:98:51:7f:ce:f8:f1:e7:
0c:6e:6c:b8:f9:2b:0f:17:9f:43:8b:0e:9d:80:98:
f9:49:3e:e1:d7:2c:80:52:c8:dc:46:dd:f4:ff:82:
93:c8:7c:f7:36:cd:c4:7e:78:8c:90:6d:9b:c9:66:
b0:88:be:82:ae:fa:91:d7:1e:fd:cb:c8:c8:ee:87:
e3:f5:9e:95:13:f9:00:14:c9:1c:fb:c3:c2:c5:2f:
28:67:de:08:46:77:b1:58:d9:9f:2d:28:28:30:99:
a5:e0:47:5c:0c:e1:2d:83:31:d0:a7:1f:22:53:9b:
c4:0d:6e:b3:3c:a1:08:e4:ee:3c:8f:7f:56:31:fb:
75:c3:fb:09:52:2d:83:55:80:e8:7a:ac:f8:4d:e5:
0c:14:8d:bb:f1:ba:b7:e8:9b:8d:4c:4c:4e:74:6f:
63:91:13:28:d5:03:5c:db:2c:82:1a:f6:ed:88:f2:
57:42:38:86:0b:eb:3b:e1:4a:78:e2:77:4a:d4:39:
54:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B9:AE:1D:D3:A2:CF:99:64:2E:3D:58:3C:5D:C1:37:57:C6:5A:D0
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5a:f2:50:db:50:68:0e:b6:ca:34:fb:bd:65:eb:5a:6d:d1:
52:e0:ab:d3:00:b3:64:c0:24:a8:ab:e0:02:24:51:a6:88:ae:
f8:09:1d:cf:71:c6:60:81:9f:ae:8b:c7:dd:fa:7a:5a:67:1e:
d5:75:df:53:7b:97:63:27:80:7a:72:92:8f:7b:48:c7:ef:69:
b2:01:c6:32:65:05:4f:26:da:bb:63:60:0e:04:c0:db:19:93:
3e:7a:6d:52:ee:91:52:01:62:e7:69:09:e9:3e:65:5f:2e:e6:
a4:a3:5c:93:d4:7c:28:17:d4:88:b0:ef:ee:26:fa:ae:d6:6e:
c6:eb:81:1e:12:f3:0d:48:01:a3:f4:4b:12:97:4b:0d:71:dc:
3e:28:31:db:87:c1:33:7a:66:a9:96:9a:47:8f:7e:d4:a0:39:
fc:7f:59:fe:e8:fb:d4:44:81:6b:02:a0:d4:68:c6:8e:c9:01:
00:78:69:1c:0b:1c:9c:93:1e:c8:76:13:59:19:73:1e:d2:d5:
3b:19:9e:43:f8:0d:e3:e1:8b:ea:55:6e:d2:eb:78:09:ba:a0:
c4:8d:ec:06:32:d7:7e:91:72:9f:e6:83:fd:c9:9c:dd:55:79:
fd:8c:df:86:05:23:91:d6:a1:6a:87:46:07:52:8b:94:7b:20:
e8:5c:98:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8ZCbUulNFJ0NLqesRp4mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMWQ5YWQ0MDRlY2RhZmE3MGVhOWE0YzlkMTBiOTgwMTgy
OWVhMWYwHhcNMjYwMzI1MTcwMTIxWhcNMjYwMzI2MTcwMTIxWjAzMTEwLwYDVQQD
EygyZWI5YWUxZGQzYTJjZjk5NjQyZTNkNTgzYzVkYzEzNzU3YzY1YWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2hZ8mycqNceP/8Nywxj1nFhTJi4
FKM7T0NAQ83U0ZV3yhpDSXomvUtovqvAgjQQ1endzfxY5C7H3/jHgkelifsAtJhR
f8748ecMbmy4+SsPF59Diw6dgJj5ST7h1yyAUsjcRt30/4KTyHz3Ns3EfniMkG2b
yWawiL6CrvqR1x79y8jI7ofj9Z6VE/kAFMkc+8PCxS8oZ94IRnexWNmfLSgoMJml
4EdcDOEtgzHQpx8iU5vEDW6zPKEI5O48j39WMft1w/sJUi2DVYDoeqz4TeUMFI27
8bq36JuNTExOdG9jkRMo1QNc2yyCGvbtiPJXQjiGC+s74Up44ndK1DlUzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC65rh3Tos+ZZC49WDxdwTdXxlrQMB8GA1UdIwQY
MBaAFHMdmtQE7Nr6cOqaTJ0QuYAYKeofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYt
ZTIwYTY1NGZjYTk1LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYtZTIwYTY1NGZjYTk1
LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVryUNtQ
aA62yjT7vWXrWm3RUuCr0wCzZMAkqKvgAiRRpoiu+Akdz3HGYIGfrovH3fp6Wmce
1XXfU3uXYyeAenKSj3tIx+9psgHGMmUFTybau2NgDgTA2xmTPnptUu6RUgFi52kJ
6T5lXy7mpKNck9R8KBfUiLDv7ib6rtZuxuuBHhLzDUgBo/RLEpdLDXHcPigx24fB
M3pmqZaaR49+1KA5/H9Z/uj71ESBawKg1GjGjskBAHhpHAscnJMeyHYTWRlzHtLV
OxmeQ/gN4+GL6lVu0ut4CbqgxI3sBjLXfpFyn+aD/cmc3VV5/YzfhgUjkdahaodG
B1KLlHsg6FyYPQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:57 2026 by rpki-client