Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier: vMbOp52O7yIeJAwJyPSjWEg8T9Jy/9ARF/f70mFPBjM=
Subject key identifier: 03:D9:EA:90:F7:64:A5:E0:50:87:2E:B3:10:36:F3:88:86:0D:03:5B
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 01A0D64C4E846FB056A532E654BC701C737C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number: 14A0
Signing time: Fri 25 Sep 2026 02:02:00 +0000
Manifest this update: Fri 25 Sep 2026 02:02:00 +0000
Manifest next update: Sat 26 Sep 2026 02:02:00 +0000
Files and hashes: 1: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: 77TS5rYeN9LeCZunb3Ja91/3ZmlHwSrYSNM0ueJakpM=)
2: gLcTJvZ-bTiZKez7VJlhXddzj5I.roa (hash: njLU3hmp1ice1mv35YuU3QwtIJDPeTW7I2pUB3WU76k=)
3: iGV0CoyrITzjkKDaw4INbKqkpdE.roa (hash: S/9miWwjqyjrqWzqhVaykBqXwqlsa3o7EOP2wtoRCcU=)
4: t8eIgMClHX3oL8Kz7kDeYL0J8-I.roa (hash: jcUfNtNFO2Y7xEuTx/9w6iJn9BhR83TnoBAGY+TGric=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4c:4e:84:6f:b0:56:a5:32:e6:54:bc:70:1c:73:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Sep 25 02:02:00 2026 GMT
Not After : Sep 26 02:02:00 2026 GMT
Subject: CN=03d9ea90f764a5e050872eb31036f388860d035b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:06:42:6b:08:fc:7a:d2:6d:89:23:9e:f3:e8:
82:e5:04:da:25:bb:24:f0:cb:c4:b8:6a:c6:a8:69:
a5:ce:df:4f:69:bc:75:57:73:ca:c7:16:55:ad:d2:
72:67:bc:ce:51:8c:71:66:b8:92:eb:0c:6c:e6:82:
4f:5d:f7:09:6f:66:6e:d4:e2:1b:a0:8b:7c:1d:f2:
9f:43:b4:cb:d7:fb:f7:d6:17:e2:d3:e7:37:45:c8:
58:5e:39:58:46:8d:ce:d6:f9:06:c2:e7:1b:3d:2a:
f5:22:bc:0c:34:ac:0f:07:a3:a0:9a:64:d3:c4:f4:
e1:a3:6a:24:4f:df:3f:65:3d:56:7c:bc:3f:c5:34:
90:f9:95:ba:1c:1e:60:52:33:65:ce:25:76:8c:fd:
73:76:04:e1:2e:82:65:10:aa:87:ed:3e:09:82:d9:
21:33:ef:7d:de:47:d7:c5:a8:06:3f:d3:c1:f9:36:
de:7b:e8:56:40:15:6a:d6:64:bd:68:ef:85:80:81:
59:35:42:9e:36:f4:a2:58:91:74:8a:95:cd:57:79:
d5:1c:68:56:d4:39:30:1e:67:5f:16:db:bc:1c:32:
cf:cd:95:73:42:ef:8e:34:85:07:51:98:6d:76:7a:
98:1f:d9:38:38:ab:2b:9b:f0:b2:d7:5f:fa:09:69:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D9:EA:90:F7:64:A5:E0:50:87:2E:B3:10:36:F3:88:86:0D:03:5B
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:93:01:e5:e2:3f:bc:de:89:57:30:ee:9b:de:d3:ec:f7:e6:
3d:59:40:d7:48:c3:cf:e8:15:8d:7c:d4:3a:b8:69:d1:2f:33:
27:1f:b9:7a:9a:6c:89:4e:31:dc:25:0d:64:ee:96:44:a9:4b:
8e:7b:85:dd:84:1c:c3:42:cb:4b:0c:07:bb:fa:7b:db:36:6f:
94:8e:b4:1b:03:1c:b2:bf:0b:d7:0a:de:43:ab:90:2d:24:15:
31:fd:1c:d4:9f:d7:3c:a3:44:7a:11:87:cb:3c:d6:a0:e2:5d:
1a:32:6f:4f:13:b7:ff:df:8a:d3:f7:13:39:65:2b:0b:71:9d:
ee:db:49:34:6d:18:0f:e3:9c:3f:cb:b5:8a:7e:6b:a8:7a:41:
49:6d:a1:37:64:20:85:28:d8:4e:b8:f0:43:92:1a:46:dd:43:
2a:76:02:00:9c:bc:fc:8f:11:bd:d7:97:5d:4c:a6:8d:b2:1a:
32:a2:fa:e5:ea:e1:c4:ac:95:3a:49:67:f6:e8:27:86:c4:8c:
4e:2c:0f:5b:f2:93:68:dd:72:3c:7a:8f:3c:d0:9a:fb:cc:a2:
90:3b:c6:66:0f:be:02:92:ea:ca:1c:32:de:93:fb:fd:4a:72:
a9:ff:a5:be:17:79:0b:fa:b4:54:12:4f:fa:45:15:f1:83:f3:
84:b4:ec:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:21:42 2026 by rpki-client