Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
File: cxU1ourrxowWV6r89aeIyHUdm2I.mft (raw, json)
Hash identifier: lN7tFW9fo2sNQi4N2ieLuTAao4V8BCiNjL7r/r/3ies=
Subject key identifier: 2B:85:FA:BE:2B:F4:11:96:F2:27:70:60:9C:80:59:F0:15:DB:A5:B6
Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Certificate serial: 01A0EBF9D404C580A76AF13217D02D41D77F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
Manifest number: 1956
Signing time: Tue 29 Sep 2026 07:03:33 +0000
Manifest this update: Tue 29 Sep 2026 07:03:33 +0000
Manifest next update: Wed 30 Sep 2026 07:03:33 +0000
Files and hashes: 1: KFAbKKe7jo2XjrWvMFjbhME-DXc.roa (hash: 4OtvIQVEiPvcGG7i9r46Rvs1hJ/uhdVoDzjyfUfIYZk=)
2: TMosgBiabWiuRyi5Ssatcr00sSE.roa (hash: F+7FnUFFY40UIl2jFbgxyGZqPlinYg7PSVeRNWNABjs=)
3: cxU1ourrxowWV6r89aeIyHUdm2I.crl (hash: FQSYD46H4+8+mMP+VAk486n1BOZSm749Vc/EmifnFeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:d4:04:c5:80:a7:6a:f1:32:17:d0:2d:41:d7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Validity
Not Before: Sep 29 07:03:33 2026 GMT
Not After : Sep 30 07:03:33 2026 GMT
Subject: CN=2b85fabe2bf41196f22770609c8059f015dba5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:76:2c:fe:01:3b:e4:6e:40:f2:db:0a:0f:67:
d8:19:af:3c:67:9c:ac:7f:ec:92:d8:10:1d:e9:67:
cf:e9:5b:a9:aa:28:07:a9:3d:81:53:29:3c:e2:ab:
6f:10:f2:27:3b:79:46:1d:f8:1d:0a:eb:b7:4d:89:
bb:c5:14:91:76:01:64:33:56:c1:6c:90:6a:d5:87:
e8:7a:66:60:08:c0:55:7f:4d:c6:ff:90:a4:41:11:
19:77:dc:e7:df:e2:00:d2:22:b6:7a:42:b4:8a:58:
84:85:be:f0:15:5a:c1:c7:97:dc:07:8b:ca:eb:be:
85:18:59:94:32:2c:b8:9b:4e:a1:af:21:7d:7a:14:
59:40:30:29:d2:76:d7:72:38:99:26:01:4b:0d:15:
3d:23:1f:f7:57:46:23:9e:d0:7a:ff:b3:fa:cb:58:
d5:36:7b:e9:70:18:90:e2:56:03:a0:e1:87:0a:40:
30:8f:76:de:9f:82:82:e2:66:d0:b0:ac:f4:3c:ca:
92:1f:f5:12:30:68:d5:05:3b:be:4c:25:b6:ad:df:
85:45:cf:de:e6:a6:89:5e:ca:c0:6d:c7:7b:38:f5:
64:a2:c1:5e:8a:6f:b4:62:3d:2e:74:64:c6:a7:1f:
e7:44:0b:45:64:09:e5:15:c7:90:3f:62:1c:f1:16:
f2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:85:FA:BE:2B:F4:11:96:F2:27:70:60:9C:80:59:F0:15:DB:A5:B6
X509v3 Authority Key Identifier:
keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:dd:4b:8f:9e:39:7c:2e:b8:97:5b:6a:d8:ef:e8:df:55:a2:
9b:89:97:28:b7:0d:b1:4e:f5:05:12:72:3d:71:00:c9:72:71:
80:ea:a7:6b:81:51:22:45:ca:13:d0:f6:a6:3e:59:7c:9a:fa:
cd:53:e9:1e:d5:61:a6:2f:11:d0:20:3c:b1:67:42:08:a8:36:
57:72:1b:6d:43:72:60:17:d3:38:b2:59:4e:e0:15:72:93:4a:
c4:d8:96:5f:56:ab:b8:ea:30:d0:ed:2d:52:a6:d1:0e:59:63:
de:66:b7:6f:e6:0d:d6:34:94:6b:d2:00:7a:22:e2:20:87:e7:
04:df:f5:ff:46:b8:59:d4:9c:2a:16:4f:42:c6:43:a1:7f:7a:
c4:de:9a:a4:bf:36:09:4a:a9:cc:a4:c8:6b:ca:aa:ca:37:1d:
e2:9f:4d:6a:70:9c:d2:f6:74:3d:42:c3:06:22:14:e1:f2:ce:
ee:6a:37:80:f2:a4:ee:d2:cd:5d:16:73:8c:87:1a:d3:90:39:
48:d1:23:8b:ca:b5:07:76:67:f7:08:ee:80:cc:b7:51:3b:74:
09:d3:dc:f3:af:99:42:ac:85:40:7a:ee:45:0a:0b:bf:23:05:
c3:0e:0d:5e:25:1f:fb:15:65:c1:18:0f:8b:21:2e:ed:93:2d:
3c:e0:36:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 10:51:34 2026 by rpki-client