Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
File: cxU1ourrxowWV6r89aeIyHUdm2I.mft (raw, json)
Hash identifier: 0qS5ryRac07CDhyollnQZnu+I28chgS/7mFGTsteO2s=
Subject key identifier: 74:73:44:E8:A4:03:B8:10:E8:68:6B:D3:1F:9E:4E:65:7B:93:F8:5B
Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Certificate serial: 019F924842EBA72D638BB7B4C7BBD92C73FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
Manifest number: 18A3
Signing time: Fri 24 Jul 2026 04:00:36 +0000
Manifest this update: Fri 24 Jul 2026 04:00:36 +0000
Manifest next update: Sat 25 Jul 2026 04:00:36 +0000
Files and hashes: 1: KFAbKKe7jo2XjrWvMFjbhME-DXc.roa (hash: 4OtvIQVEiPvcGG7i9r46Rvs1hJ/uhdVoDzjyfUfIYZk=)
2: TMosgBiabWiuRyi5Ssatcr00sSE.roa (hash: F+7FnUFFY40UIl2jFbgxyGZqPlinYg7PSVeRNWNABjs=)
3: cxU1ourrxowWV6r89aeIyHUdm2I.crl (hash: q77RauY9mvnHMkPbuxp91NmXlM7U31FWKuDANLDamrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:42:eb:a7:2d:63:8b:b7:b4:c7:bb:d9:2c:73:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Validity
Not Before: Jul 24 04:00:36 2026 GMT
Not After : Jul 25 04:00:36 2026 GMT
Subject: CN=747344e8a403b810e8686bd31f9e4e657b93f85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e2:e5:c7:4d:54:71:17:6a:a0:97:f8:d0:8c:
64:38:f7:41:e6:6e:c6:4e:3f:f6:8e:8b:09:3f:5d:
ee:a5:07:77:13:c5:a0:f8:3f:ed:c6:81:ab:20:fc:
4b:ec:98:4c:7c:cf:21:69:36:af:1f:0f:4d:7b:d7:
8b:7c:38:ab:b6:a9:08:6a:3e:bf:8e:b9:35:50:a2:
fa:93:0b:0d:6e:d5:37:11:8a:7e:07:36:5e:b9:c5:
4f:03:10:78:bd:d4:37:92:fe:18:39:4d:03:d3:e5:
78:89:b9:1a:7a:84:45:fb:0e:2d:5f:7e:c4:e5:3d:
1b:b5:d0:53:6f:6c:2b:2c:6b:9f:41:29:96:22:9e:
ca:3b:52:1d:57:d0:7f:30:d7:1a:a8:c9:49:31:8e:
ad:5b:ec:d7:07:07:18:b0:dd:10:40:33:20:75:63:
ad:60:32:44:b0:cd:6a:69:6c:84:f5:29:32:d6:2e:
48:ae:c5:eb:79:f0:33:31:dd:de:2d:ed:c9:7e:10:
28:72:07:67:46:93:dc:32:d5:a8:a4:a7:20:ba:46:
6e:04:50:49:5b:68:e3:ce:77:e9:82:f1:de:c8:5c:
8d:cb:bf:f9:96:48:eb:5c:82:a7:e4:98:d8:0a:79:
7b:e6:a0:a7:05:24:5e:fa:c4:2a:c3:97:9c:9d:be:
da:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:73:44:E8:A4:03:B8:10:E8:68:6B:D3:1F:9E:4E:65:7B:93:F8:5B
X509v3 Authority Key Identifier:
keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a7:1a:d9:fb:c8:90:5f:a7:7c:39:67:ce:01:42:65:77:83:
49:bf:37:d0:d1:fb:e8:17:82:c8:6d:6a:8e:c8:46:cc:ba:2b:
7e:7d:ec:07:b2:3c:c4:c5:c9:01:89:e2:fc:30:b6:48:30:e1:
08:96:e9:cd:94:1f:2b:ce:d5:2d:67:87:8c:13:31:5c:8f:bc:
4c:68:c5:8d:71:90:f2:6e:69:7d:5f:78:78:75:99:02:a2:9d:
58:14:8e:81:3b:10:81:73:04:5d:db:d5:7f:eb:e3:0e:48:f5:
da:d5:01:53:3a:90:98:f8:96:e7:ca:51:58:f8:fe:4a:2a:db:
a7:bf:8f:01:55:a3:f9:a2:e8:5b:73:b1:69:32:5f:60:8e:3a:
2e:a1:60:1e:18:d8:a8:05:5b:ea:cb:47:df:b2:60:c5:a0:a4:
85:42:32:f3:cc:dc:dd:3d:da:59:41:9f:8a:cb:83:ac:14:bc:
49:f6:87:c6:63:c4:45:e3:69:29:13:5c:21:e0:81:e1:61:46:
28:6c:c8:15:6b:19:8c:f8:6d:3c:2f:6e:6f:1d:d1:0d:d5:ef:
8b:e3:d2:09:e0:2c:11:4f:fc:7f:69:70:4f:dc:3c:b2:ab:bf:
7d:e2:c1:12:99:1c:11:9e:7e:72:a4:4f:e4:08:ed:b5:64:6b:
ab:de:76:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:42:28 2026 by rpki-client