Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier: QfzcKc0L0WsPRuJwjV9onhxCKDP2puupkTKLB1+idaE=
Subject key identifier: 4A:29:FF:03:E8:E9:B8:9E:30:6E:79:2E:1C:13:58:20:D4:C5:71:D3
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 019F93C8D6BC5BC4FF13EC843F43554D150F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number: 13F9
Signing time: Fri 24 Jul 2026 11:00:40 +0000
Manifest this update: Fri 24 Jul 2026 11:00:40 +0000
Manifest next update: Sat 25 Jul 2026 11:00:40 +0000
Files and hashes: 1: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: BwhFkpsPDYwCVhgtoOjsDHQ9IyReljppKJ0EA407QjM=)
2: gLcTJvZ-bTiZKez7VJlhXddzj5I.roa (hash: njLU3hmp1ice1mv35YuU3QwtIJDPeTW7I2pUB3WU76k=)
3: iGV0CoyrITzjkKDaw4INbKqkpdE.roa (hash: S/9miWwjqyjrqWzqhVaykBqXwqlsa3o7EOP2wtoRCcU=)
4: t8eIgMClHX3oL8Kz7kDeYL0J8-I.roa (hash: jcUfNtNFO2Y7xEuTx/9w6iJn9BhR83TnoBAGY+TGric=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:d6:bc:5b:c4:ff:13:ec:84:3f:43:55:4d:15:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Jul 24 11:00:40 2026 GMT
Not After : Jul 25 11:00:40 2026 GMT
Subject: CN=4a29ff03e8e9b89e306e792e1c135820d4c571d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b4:0a:37:84:4b:30:02:08:0f:61:ba:4b:6e:
bd:a5:8b:5d:ba:6f:22:49:44:91:14:e3:54:1a:58:
72:c9:79:d4:0a:c2:d6:38:fd:e5:a6:04:2d:54:10:
f2:4a:bc:4e:77:03:05:75:97:6d:26:15:15:34:46:
0b:ab:55:37:ad:b7:b1:d4:74:d1:17:dd:94:3d:d6:
41:e7:32:e3:25:c0:2f:70:c3:36:43:2a:36:df:15:
13:1d:1a:85:bc:6b:cb:4b:51:22:dd:0f:fa:f9:db:
89:ca:d7:60:af:38:01:24:18:eb:80:27:db:95:84:
eb:0d:9c:6f:0f:22:d2:71:2a:2f:91:d4:c7:7a:72:
dc:1a:6c:bf:90:98:1a:f1:4a:84:92:69:6b:c6:0b:
32:7c:16:50:59:ed:3c:73:ee:d4:0b:9e:f3:cc:4c:
cd:63:fb:33:bc:52:68:4f:48:e3:bd:ca:5b:09:52:
3c:5f:4c:04:be:e5:00:32:55:4d:b0:51:3e:38:a0:
38:df:ab:7f:3a:32:2a:c1:60:c7:d4:2f:64:b0:3f:
07:ed:46:61:68:66:83:e4:79:0c:fa:4d:e3:fe:fd:
3a:0d:e6:20:2c:81:6e:8d:2c:30:d5:16:f8:3c:3e:
3e:b2:60:70:17:14:66:2b:8a:dc:8c:89:59:df:d8:
13:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:29:FF:03:E8:E9:B8:9E:30:6E:79:2E:1C:13:58:20:D4:C5:71:D3
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:86:00:06:2b:8d:76:bb:2b:b0:1d:9c:fe:f9:38:f8:f0:60:
19:8c:48:ad:7c:33:f9:5c:a2:fd:b2:7a:96:0e:fe:ad:e8:11:
44:ce:ef:94:21:3a:7a:27:c1:8b:f7:ca:b9:e0:b8:44:97:30:
67:84:7e:9c:97:1b:87:7b:d6:7e:d0:7b:60:6e:a2:07:ef:f4:
b9:51:ec:cf:8e:94:d0:61:78:36:51:42:e7:20:b4:74:01:ff:
a1:3a:58:51:af:9e:0d:eb:3b:86:ac:35:2e:1c:f6:69:be:cc:
be:d5:ff:51:f8:4c:10:90:16:1f:ae:5d:94:86:3a:8b:9e:91:
25:a9:22:78:5f:8a:9a:8e:40:28:bc:fb:70:1f:1f:00:ae:27:
08:9c:82:4f:cd:6b:f9:f6:41:b0:48:c9:d9:bb:d9:85:6b:e2:
2b:4b:2a:6c:24:8c:54:af:35:97:50:92:ba:8e:5f:8d:a3:69:
ec:3c:3c:88:1b:a9:33:44:5f:c3:2c:b9:d5:d7:15:ff:c7:7a:
9d:57:1c:9c:d5:14:2d:8f:64:f4:53:60:3f:f6:3b:af:d5:3b:
2b:4f:47:80:66:6a:b8:d5:6c:9a:b0:62:4f:15:7c:ed:c7:a6:
29:28:b0:a8:9f:cb:5a:7b:45:c2:dc:77:14:fb:5b:2d:3b:c6:
c6:50:42:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:37:42 2026 by rpki-client