Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json)
Hash identifier: LeOf0LVX9pCV/7VttcYxljsN8OD+s03M/em7m/x/AMU=
Subject key identifier: E0:DD:2E:E1:37:86:9D:D0:A5:C5:72:0A:96:D9:CD:E4:64:BA:6B:E4
Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48
Certificate serial: 019F8FB54795F1C4FED0C461B8CA7A593AA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
Manifest number: 12D7
Signing time: Thu 23 Jul 2026 16:00:49 +0000
Manifest this update: Thu 23 Jul 2026 16:00:49 +0000
Manifest next update: Fri 24 Jul 2026 16:00:49 +0000
Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: XQsu0OicK840QPtwjHV5nXirtXwDuqWiIMwIMCyEmGg=)
2: Rzs2HXQzTLrDqDj9LP1oWAbKMGw.roa (hash: OG2fkvNtGY/HMomh9VL9hQ1Vbd5noSl5aNza/Xw2mXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:47:95:f1:c4:fe:d0:c4:61:b8:ca:7a:59:3a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48
Validity
Not Before: Jul 23 16:00:49 2026 GMT
Not After : Jul 24 16:00:49 2026 GMT
Subject: CN=e0dd2ee137869dd0a5c5720a96d9cde464ba6be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:3d:7a:b2:a8:79:79:9f:5b:58:0d:8d:73:
ea:e0:28:c4:19:d5:0a:0e:6f:ba:ba:de:29:8d:57:
fc:86:31:3b:40:6f:23:20:6e:62:22:5d:3a:0e:ba:
4e:c9:2b:b9:ac:47:d0:72:1d:bc:2e:a9:f4:43:d2:
cc:ea:9f:a7:5f:92:8d:80:71:57:14:c7:39:75:14:
a9:8d:90:65:24:4d:ce:37:5b:51:57:60:62:09:2f:
56:bb:45:6f:0b:3b:ef:10:ac:35:f3:fd:45:d0:da:
06:a1:27:c8:29:ee:a2:b5:81:3c:a4:bf:8e:33:eb:
37:0f:a2:d5:67:ee:9e:0b:48:5e:71:3a:f0:37:73:
12:cc:d1:f4:18:44:3c:87:b5:b0:48:0e:9f:ee:77:
80:ba:c8:6b:39:0a:80:dc:d0:47:c7:d0:04:ce:3a:
09:72:7f:52:88:68:69:6c:bd:d1:71:8d:f3:6d:da:
71:c1:f6:51:03:41:e6:d2:89:26:fe:e1:a1:67:48:
1e:3a:71:a6:bc:ed:6d:42:04:95:09:54:f7:e0:c2:
01:47:7a:6e:ee:a9:97:b7:38:11:a9:48:c4:f4:94:
53:65:66:f8:ae:f8:4e:84:35:c8:c4:95:2b:37:38:
90:81:d4:32:5a:1b:9f:43:02:00:c9:82:91:95:1d:
ff:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DD:2E:E1:37:86:9D:D0:A5:C5:72:0A:96:D9:CD:E4:64:BA:6B:E4
X509v3 Authority Key Identifier:
keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:37:e1:d4:c2:54:6a:e5:4b:53:4f:af:3e:e0:e0:72:14:67:
51:6b:08:8d:54:d5:45:00:56:f6:00:f6:0a:fe:a8:80:b0:05:
d4:01:9e:e9:1b:79:9b:b6:a2:4a:3d:10:4f:87:66:4c:a9:ab:
86:d6:91:e8:97:bc:2a:92:1f:af:43:dc:e2:1a:bc:ef:1c:0e:
cf:87:99:4f:7e:3f:0a:df:e3:54:47:8b:36:0b:41:d4:41:13:
e6:93:37:79:31:7f:a6:f9:71:8a:d9:bc:24:c3:ca:be:09:b2:
45:f3:7f:9f:ee:1d:42:f3:15:be:96:dd:82:c6:80:d2:d6:2b:
b3:8c:0d:d0:78:02:b3:61:1d:00:50:1f:0b:da:d6:7a:43:90:
ba:e2:57:87:97:df:20:a9:3e:97:47:30:b1:0f:8d:d6:8e:9d:
a0:a7:d8:16:15:61:2f:35:51:d1:99:b5:f1:aa:91:0a:7e:56:
9c:76:df:07:72:a8:f1:5d:31:c5:4a:30:22:6d:af:8b:f4:ea:
7d:4d:75:e6:8a:bd:dc:b5:62:78:a9:d9:0c:43:70:21:6d:d1:
02:a6:38:2a:01:9b:0c:5f:f6:ff:02:00:49:c9:08:13:82:ee:
93:95:e7:04:69:9e:6c:5e:24:d3:b6:e5:64:89:12:b0:32:64:
93:20:65:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:15:05 2026 by rpki-client