Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
File: CxhwyW7wlyOBH7iSUO6m66ljwN8.mft (raw, json)
Hash identifier: i2MLpJU6Iux4FFuV/4hKxSmPa6TBX0JoKbEGXYpJM00=
Subject key identifier: B4:D2:C5:D7:A7:8B:FD:8F:8F:97:6C:B5:63:A5:5C:01:02:7C:0E:17
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial: 01A1095D0B7889015F47303CFC823292B3D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
Manifest number: 1A28
Signing time: Mon 05 Oct 2026 00:00:54 +0000
Manifest this update: Mon 05 Oct 2026 00:00:54 +0000
Manifest next update: Tue 06 Oct 2026 00:00:54 +0000
Files and hashes: 1: 1g5Vvv96ighDkSqXd-c3m0Fystw.roa (hash: vG+feQkpTWab4/oRvuuesxoi31NwjEJhw9SKZVjbK2M=)
2: CxhwyW7wlyOBH7iSUO6m66ljwN8.crl (hash: nwLh3VHbFQIAijs3NB4oZ7XtqMyChOYDZ+k4Nbze45E=)
3: gSEruQPSsoefkss2yCXL7050kig.roa (hash: P+q5a1NeLiWUtBFC04Wzt8w9SD2Mit1ctA7LK/VHJRo=)
4: xTeZw6t6j0kCgTpKAjZyek6V1QQ.roa (hash: 7eLkL929YGBrLf10p7Xu8H5BWgjYEKgp3pDvwQ/th+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:5d:0b:78:89:01:5f:47:30:3c:fc:82:32:92:b3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
Validity
Not Before: Oct 5 00:00:54 2026 GMT
Not After : Oct 6 00:00:54 2026 GMT
Subject: CN=b4d2c5d7a78bfd8f8f976cb563a55c01027c0e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f4:c2:73:25:3f:aa:33:c5:0a:71:46:97:c7:
0b:00:83:5f:3b:87:29:e3:be:a9:b5:7f:b8:85:34:
5c:e6:02:5e:86:af:6e:39:f3:ba:e6:db:97:c2:1b:
0a:3a:84:60:b7:e9:1d:44:39:fc:4a:c8:39:8d:3c:
57:c9:d9:a7:0b:e0:bd:f4:f8:bc:9e:b3:0c:8f:c7:
f3:ed:fb:0c:98:01:03:20:13:c5:9f:0b:2a:ee:b5:
1d:10:9a:a3:94:b6:8e:87:e4:8e:39:e0:66:a8:b7:
56:db:65:40:cc:c2:c4:65:81:20:45:cf:aa:10:27:
54:2f:ce:5d:b0:be:18:a0:fa:26:f2:7c:3f:e4:8f:
18:bd:34:4c:9c:8b:9f:fc:5d:58:9e:9d:94:1c:5c:
14:a1:fd:12:94:00:dc:f8:87:1b:63:6d:f9:01:b8:
02:39:ff:5e:e1:63:4d:46:7f:7a:b9:14:73:93:dd:
11:ab:2d:55:d2:f0:30:44:a6:af:22:ef:33:c1:6d:
08:af:39:3e:c2:c2:e0:08:23:0e:f6:0f:c3:d0:d0:
dd:43:b7:79:9a:2a:e3:8d:a8:b3:35:3b:15:bf:48:
3c:90:93:f4:91:7e:f6:af:3a:c5:51:3b:b4:ef:3e:
94:df:b2:cd:07:39:bb:eb:99:94:cf:87:0e:95:46:
37:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D2:C5:D7:A7:8B:FD:8F:8F:97:6C:B5:63:A5:5C:01:02:7C:0E:17
X509v3 Authority Key Identifier:
keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:59:14:a1:21:fc:13:ec:b1:d8:df:60:c4:99:e0:d6:45:2a:
ad:8b:3d:8a:52:61:83:7c:f0:40:3d:f5:f6:4f:a7:06:3b:9f:
39:e4:f5:93:62:6e:0d:be:8a:75:06:8c:a2:a7:51:25:f3:a8:
79:7b:3a:e3:8d:84:3b:cf:71:e8:44:48:72:eb:ea:04:c0:b4:
e2:3e:05:40:69:5e:86:c8:a5:f4:89:7b:dc:ad:c1:54:16:18:
56:8b:a4:fa:bb:f6:17:12:3c:f6:24:0d:6a:c3:ef:ba:81:ef:
3a:42:6c:19:65:da:fb:a6:98:17:69:52:2f:cf:8b:c7:12:6c:
ad:6b:cd:5a:ee:d3:c7:76:e8:6f:e8:38:1e:d0:83:ed:8a:92:
52:ec:b5:dc:a2:a3:e4:1d:f4:2e:b8:e7:83:44:34:13:08:3b:
08:7f:51:e0:9c:b7:d1:c5:c1:13:a0:81:69:c0:b4:a5:ae:ca:
f3:01:1d:dd:ab:66:0a:3e:8a:6c:3a:df:92:fd:36:ac:1d:31:
16:53:32:88:04:7b:2b:bf:dc:6e:22:92:a2:b9:4e:ce:cd:82:
72:c7:2c:09:84:87:43:16:f7:5a:9f:91:ac:60:fc:93:50:0d:
48:08:58:42:8c:f3:28:98:8e:e5:7c:91:fd:cd:cf:a6:c2:29:
99:b4:d0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 07:50:56 2026 by rpki-client