Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json)
Hash identifier: eRZ1j6V6CLFBr9I5VD43ca4ui3CZVArwArU1IRI4mOs=
Subject key identifier: A8:F1:21:C3:D8:AA:CF:1C:8D:6D:03:00:80:F2:82:84:35:7E:D5:40
Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48
Certificate serial: 019E1CEBB2E5F8C523A446EB6CD73112AD43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
Manifest number: 1217
Signing time: Tue 12 May 2026 16:01:09 +0000
Manifest this update: Tue 12 May 2026 16:01:09 +0000
Manifest next update: Wed 13 May 2026 16:01:09 +0000
Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: DhFL2RHE05Axr/gOJXEctZmnJJvjEBCKeY2KuzO+WXw=)
2: Rzs2HXQzTLrDqDj9LP1oWAbKMGw.roa (hash: OG2fkvNtGY/HMomh9VL9hQ1Vbd5noSl5aNza/Xw2mXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:b2:e5:f8:c5:23:a4:46:eb:6c:d7:31:12:ad:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48
Validity
Not Before: May 12 16:01:09 2026 GMT
Not After : May 13 16:01:09 2026 GMT
Subject: CN=a8f121c3d8aacf1c8d6d030080f28284357ed540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:70:4d:bc:61:e0:2c:ef:72:82:8b:d0:27:
ff:d0:52:9e:38:6f:1e:cd:c7:46:1a:ac:12:bc:d5:
b1:e5:7c:af:88:2a:a0:9c:6a:d3:fc:76:04:bd:30:
cd:f1:42:d7:2a:98:63:33:34:6d:d0:b7:22:2a:5b:
82:33:b6:4c:a0:cd:57:d8:c6:cc:3e:5e:32:e9:c9:
35:83:84:3a:6f:3a:6a:94:ec:4e:7b:f4:23:c2:48:
e3:f9:28:58:98:88:b5:6f:85:80:25:7f:81:6d:13:
88:8d:93:a1:ca:c8:c6:82:fe:22:a2:11:59:28:3e:
82:e0:3a:26:b4:a3:96:a8:b4:1f:9d:d9:f9:de:d7:
26:d4:f0:49:0f:cc:0c:0d:1a:52:05:66:ea:c9:ea:
1b:9f:43:6e:3f:dd:34:a2:41:93:d5:90:81:e7:e9:
a6:54:01:bc:0c:b2:5b:97:1c:30:17:81:8a:fa:63:
4f:2f:ce:ea:2b:21:4d:ba:84:f8:10:62:fd:78:85:
76:a6:3c:28:17:5a:18:13:f5:69:3a:d4:7b:d1:e1:
67:71:65:c7:e1:5b:c2:04:28:6e:0c:be:0c:f4:7b:
b6:56:96:8c:7f:f5:10:ea:3d:4f:ab:93:0b:44:7f:
3d:8e:ca:f3:f4:a3:b6:06:88:d3:18:0f:5e:b5:6b:
99:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F1:21:C3:D8:AA:CF:1C:8D:6D:03:00:80:F2:82:84:35:7E:D5:40
X509v3 Authority Key Identifier:
keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:69:ca:e6:bc:c1:ac:82:e5:0a:04:00:da:e7:55:62:dd:c2:
5a:f9:dd:49:fa:69:14:17:e5:7c:1f:df:60:37:bd:ef:8d:29:
4d:25:d2:dc:e5:d6:57:a3:8f:cf:5e:a3:e3:e7:5a:69:54:09:
88:98:32:a2:15:18:3c:d1:cb:06:73:6c:90:9e:50:07:7d:06:
cf:9f:87:74:6a:d4:6c:ed:f7:e3:cf:ef:13:ce:5e:d0:5d:57:
85:0d:7e:84:93:e0:51:4f:e6:03:9f:05:3e:0d:04:23:6c:82:
82:bf:7d:47:d4:aa:f7:62:d6:ef:81:d9:a3:8d:25:4d:05:ff:
3f:25:96:a2:5d:3e:81:6f:64:44:bf:fb:3e:f5:aa:1b:04:e3:
29:06:b9:b7:a2:cf:5a:cc:e6:f2:a4:6b:31:17:fd:d3:4b:06:
d0:4f:fd:f9:18:5b:0a:48:32:e6:3d:b3:21:c7:ca:70:21:da:
8b:a7:bb:9f:4f:16:36:e7:57:39:bb:f3:d3:51:95:ee:37:df:
a0:38:48:76:72:b0:27:e0:f3:c9:a5:44:f5:a1:90:02:a3:1c:
7c:4c:05:20:6d:16:cb:d8:91:ae:10:89:1e:20:31:b1:93:27:
65:5d:c6:7f:cc:14:52:d5:aa:2c:8e:87:59:7c:b9:39:b1:e9:
32:2f:40:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:37 2026 by rpki-client