Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
File: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft (raw, json)
Hash identifier: xZsBQw7UwIkbeU6r7gZtD6UekB0kUUgd/+z+lAgkZBY=
Subject key identifier: 74:B6:B5:01:AE:C7:D5:0E:95:F5:F2:92:FD:95:0D:BD:A3:E8:34:F5
Authority key identifier: 71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
Certificate issuer: /CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Certificate serial: 019D27DFF8E8964A7CC210F9DEFC6EE48AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:22 +0000
Manifest this update: Thu 26 Mar 2026 02:01:22 +0000
Manifest next update: Fri 27 Mar 2026 02:01:22 +0000
Files and hashes: 1: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl (hash: YLA6i5xNEFAWm4PJcA1ujQIAb3nT2bPyUQiGjpWx4g8=)
2: fQazRsuQA7KoggBdQ3lwX4Pk9DE.roa (hash: gfbrsTU/I0e+W/MQFr0NClUgyaIVv/jWpNgk1NCWi8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:f8:e8:96:4a:7c:c2:10:f9:de:fc:6e:e4:8a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Validity
Not Before: Mar 26 02:01:22 2026 GMT
Not After : Mar 27 02:01:22 2026 GMT
Subject: CN=74b6b501aec7d50e95f5f292fd950dbda3e834f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2e:b7:3a:06:5b:41:50:19:9d:b3:18:55:f0:
b3:d0:6e:d3:23:08:5f:36:60:73:46:de:fe:98:d4:
f1:1d:49:3f:9b:7e:f2:38:58:8a:b5:68:fa:b7:bf:
8c:c2:72:48:39:5a:b9:bc:9b:e1:21:1e:4e:1f:eb:
42:95:f3:86:74:38:55:24:cb:84:50:3f:54:4c:5f:
2f:be:4b:46:b8:43:75:e1:67:22:ec:7b:d2:29:03:
df:fd:fb:be:77:ac:8b:3e:f5:2a:d8:85:48:43:3e:
98:78:58:eb:d2:57:e5:cb:36:20:64:15:cb:04:d9:
4a:84:2b:d8:6a:43:99:45:00:7b:00:38:d7:87:a1:
b6:18:4f:1b:c0:81:94:e1:6e:df:ef:91:3c:2e:6c:
92:d0:ab:6c:19:3c:23:76:3b:0b:a8:87:12:98:e0:
a3:fc:10:83:e0:db:d5:cb:ab:28:f6:70:90:ad:6f:
59:ee:d6:ec:55:d4:30:65:80:b2:f4:37:5a:9a:ed:
78:bd:6f:f3:83:ef:de:5f:e0:3b:7e:73:8e:50:da:
48:a1:fc:33:d1:dc:b6:e5:e6:b5:2f:3c:64:6f:75:
81:b6:f2:1d:13:aa:f6:10:8c:65:e8:9b:56:b4:b8:
c3:72:61:f4:8d:a1:cb:a9:0b:f6:1b:18:2a:d7:8f:
c5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B6:B5:01:AE:C7:D5:0E:95:F5:F2:92:FD:95:0D:BD:A3:E8:34:F5
X509v3 Authority Key Identifier:
keyid:71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:62:ec:b2:87:8e:bb:cc:7d:f4:42:45:9a:32:ee:5f:61:1b:
c1:5a:9f:38:63:e1:2a:09:99:cf:ad:cc:4e:85:93:4c:e3:39:
03:17:18:bd:ae:3a:bf:44:25:aa:21:9f:2f:46:11:1f:8d:69:
ec:f6:f1:80:38:95:d9:d8:9e:bc:c9:47:92:52:cf:68:d2:bc:
d6:17:04:bb:95:89:d1:13:6b:12:4c:96:54:0f:26:8d:8d:0d:
8b:e3:5e:11:5f:3f:5e:69:dd:a4:6c:71:4d:eb:0d:8a:9a:6e:
d0:a5:24:85:27:f3:bc:8a:93:6e:b7:44:55:12:c7:eb:a4:f5:
b0:ab:82:6e:77:48:6a:88:27:e5:d0:4f:cb:cb:c9:e8:4d:81:
7c:b9:b6:c6:e3:79:b3:2a:58:00:54:a4:e9:79:0c:72:ce:d1:
3a:b0:c3:b3:3e:65:a0:13:53:4d:1c:71:57:33:b2:47:85:00:
40:31:62:ef:97:0a:14:96:f7:06:f4:0f:6b:56:47:77:a9:32:
f1:24:e4:84:7e:8a:e7:93:53:38:42:fd:0a:56:f9:41:c9:0f:
e0:e9:52:3f:d1:bb:e2:f6:3d:a3:45:7e:65:6a:59:df:e9:8f:
0e:cf:90:cd:4a:54:8d:83:bc:46:95:17:6b:8f:0e:d1:ea:f0:
fa:03:6f:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n3/jolkp8whD53vxu5IrvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNzg3MDBmMTYxOWVjMWNkMzRkOTcwMDM5MjE1M2VjNGI2
MjMxZmMwHhcNMjYwMzI2MDIwMTIyWhcNMjYwMzI3MDIwMTIyWjAzMTEwLwYDVQQD
Eyg3NGI2YjUwMWFlYzdkNTBlOTVmNWYyOTJmZDk1MGRiZGEzZTgzNGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky63OgZbQVAZnbMYVfCz0G7TIwhf
NmBzRt7+mNTxHUk/m37yOFiKtWj6t7+MwnJIOVq5vJvhIR5OH+tClfOGdDhVJMuE
UD9UTF8vvktGuEN14Wci7HvSKQPf/fu+d6yLPvUq2IVIQz6YeFjr0lflyzYgZBXL
BNlKhCvYakOZRQB7ADjXh6G2GE8bwIGU4W7f75E8LmyS0KtsGTwjdjsLqIcSmOCj
/BCD4NvVy6so9nCQrW9Z7tbsVdQwZYCy9Ddamu14vW/zg+/eX+A7fnOOUNpIofwz
0dy25ea1Lzxkb3WBtvIdE6r2EIxl6JtWtLjDcmH0jaHLqQv2Gxgq14/FbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHS2tQGux9UOlfXykv2VDb2j6DT1MB8GA1UdIwQY
MBaAFHF4cA8WGewc002XADkhU+xLYjH8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iNTg1YWMtODYxOC00MTVhLTg3ZWMt
ZDFkOGRiMTQ4ZWMyLzEvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iNTg1YWMtODYxOC00MTVhLTg3ZWMtZDFkOGRiMTQ4ZWMy
LzEvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWLssoeO
u8x99EJFmjLuX2EbwVqfOGPhKgmZz63MToWTTOM5AxcYva46v0QlqiGfL0YRH41p
7PbxgDiV2dievMlHklLPaNK81hcEu5WJ0RNrEkyWVA8mjY0Ni+NeEV8/XmndpGxx
TesNippu0KUkhSfzvIqTbrdEVRLH66T1sKuCbndIaogn5dBPy8vJ6E2BfLm2xuN5
sypYAFSk6XkMcs7ROrDDsz5loBNTTRxxVzOyR4UAQDFi75cKFJb3BvQPa1ZHd6ky
8STkhH6K55NTOEL9Clb5QckP4OlSP9G74vY9o0V+ZWpZ3+mPDs+QzUpUjYO8RpUX
a48O0erw+gNvYA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:40 2026 by rpki-client