Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
File: cxU1ourrxowWV6r89aeIyHUdm2I.mft (raw, json)
Hash identifier: u0pY17+GXlaFe4oRs65KKZX7s6xVd/c1m6E1Q4NXO2c=
Subject key identifier: A5:FA:2D:C1:08:89:E1:0E:73:F7:AC:EF:5B:26:80:39:7F:D0:26:D9
Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Certificate serial: 019D284D9D610A1E6857BD3B0FBF1D120F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
Manifest number: 1763
Signing time: Thu 26 Mar 2026 04:01:08 +0000
Manifest this update: Thu 26 Mar 2026 04:01:08 +0000
Manifest next update: Fri 27 Mar 2026 04:01:08 +0000
Files and hashes: 1: KFAbKKe7jo2XjrWvMFjbhME-DXc.roa (hash: 4OtvIQVEiPvcGG7i9r46Rvs1hJ/uhdVoDzjyfUfIYZk=)
2: TMosgBiabWiuRyi5Ssatcr00sSE.roa (hash: F+7FnUFFY40UIl2jFbgxyGZqPlinYg7PSVeRNWNABjs=)
3: cxU1ourrxowWV6r89aeIyHUdm2I.crl (hash: bTAzgh7IIIQk/XaBw3qY5g+AzYmQdXeTUBmB2V8sZYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:9d:61:0a:1e:68:57:bd:3b:0f:bf:1d:12:0f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Validity
Not Before: Mar 26 04:01:08 2026 GMT
Not After : Mar 27 04:01:08 2026 GMT
Subject: CN=a5fa2dc10889e10e73f7acef5b2680397fd026d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:03:fb:c7:b1:cd:98:34:04:96:80:c1:ba:
42:ca:28:e0:25:c2:a4:33:b5:a1:b9:ca:67:a0:8e:
d6:98:8f:5c:6b:1e:47:08:6d:fa:c0:40:09:35:2f:
d6:95:b4:10:3c:3e:ee:94:76:30:dc:b6:99:6a:b5:
62:97:59:93:d6:b7:7b:21:36:07:b2:0e:74:de:a8:
aa:03:8f:0c:3c:fd:17:20:cb:e6:b8:d5:30:81:f9:
4f:f4:bb:02:03:28:5f:75:09:8a:8d:37:96:e0:7e:
0a:53:f0:f2:2d:4e:21:0c:7a:72:4e:47:42:ce:5d:
be:ab:3b:70:3f:04:92:9d:f6:e8:21:a6:16:c6:97:
31:9e:1d:f4:3f:6c:eb:32:0a:ea:87:1a:3b:13:9d:
94:d3:d2:9a:d4:db:22:86:8d:2e:4e:1f:e0:ee:e7:
1a:de:af:0d:28:8d:0f:5f:3c:e4:05:0d:ea:c9:45:
ba:60:71:2a:4c:3c:71:07:c7:27:8c:af:e9:07:36:
8b:12:33:f2:b3:92:29:cc:51:fe:89:5a:af:43:75:
f7:50:40:9e:64:eb:61:57:37:c5:f6:9b:d3:f1:a3:
92:ef:4e:43:8f:ec:3c:c7:20:69:83:3c:47:2a:ac:
b0:33:56:18:95:f4:77:9e:09:4e:81:ca:aa:85:97:
03:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FA:2D:C1:08:89:E1:0E:73:F7:AC:EF:5B:26:80:39:7F:D0:26:D9
X509v3 Authority Key Identifier:
keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:92:92:2e:b1:47:9e:79:b9:da:d0:3e:31:50:fe:55:81:e0:
e8:63:6f:dd:2c:a6:50:5b:01:9b:4b:0e:e3:b6:d5:95:52:4b:
0f:5b:f8:86:94:2d:66:66:b0:70:2f:91:57:9f:f0:2c:65:b8:
28:b2:e5:7c:6b:3a:0d:93:75:5f:e5:d3:80:02:f3:f8:24:61:
0e:a7:b7:40:da:05:f9:6d:77:26:7b:34:3c:72:b5:a0:c5:4f:
32:f1:23:01:09:35:a6:37:d1:1a:0e:4a:ca:0b:34:be:74:72:
37:2a:a5:e7:ce:b3:f5:91:2c:94:a5:19:0b:b6:55:a2:3e:80:
d7:3c:d8:8f:59:54:7d:b7:95:1d:c8:25:eb:08:89:83:35:fd:
1f:80:39:aa:54:5a:b2:06:69:e1:b8:8c:02:62:3e:9c:80:98:
d9:81:f3:79:2e:91:de:43:25:f8:d1:38:a4:81:22:c4:20:57:
d8:6e:07:7c:1a:99:83:ab:f1:47:09:eb:c1:23:8b:65:5e:5e:
26:ec:d6:63:cd:d7:a3:5b:cd:05:f6:22:6c:dc:25:7c:e9:5f:
fe:88:b9:66:17:d2:37:cb:b2:bb:3e:52:23:e4:99:79:d9:ec:
15:9d:ea:4c:1b:52:ed:4e:f4:0c:f7:46:bd:43:39:5f:76:3a:
be:5e:e7:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTZ1hCh5oV707D78dEg8hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMTUzNWEyZWFlYmM2OGMxNjU3YWFmY2Y1YTc4OGM4NzUx
ZDliNjIwHhcNMjYwMzI2MDQwMTA4WhcNMjYwMzI3MDQwMTA4WjAzMTEwLwYDVQQD
EyhhNWZhMmRjMTA4ODllMTBlNzNmN2FjZWY1YjI2ODAzOTdmZDAyNmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXUD+8exzZg0BJaAwbpCyijgJcKk
M7WhucpnoI7WmI9cax5HCG36wEAJNS/WlbQQPD7ulHYw3LaZarVil1mT1rd7ITYH
sg503qiqA48MPP0XIMvmuNUwgflP9LsCAyhfdQmKjTeW4H4KU/DyLU4hDHpyTkdC
zl2+qztwPwSSnfboIaYWxpcxnh30P2zrMgrqhxo7E52U09Ka1Nsiho0uTh/g7uca
3q8NKI0PXzzkBQ3qyUW6YHEqTDxxB8cnjK/pBzaLEjPys5IpzFH+iVqvQ3X3UECe
ZOthVzfF9pvT8aOS705Dj+w8xyBpgzxHKqywM1YYlfR3nglOgcqqhZcD4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKX6LcEIieEOc/es71smgDl/0CbZMB8GA1UdIwQY
MBaAFHMVNaLq68aMFleq/PWniMh1HZtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85NjIwY2UtNDNmMC00MmJjLWFmNTkt
NDM1YmRhNWJkMDQ4LzEvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85NjIwY2UtNDNmMC00MmJjLWFmNTktNDM1YmRhNWJkMDQ4
LzEvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5KSLrFH
nnm52tA+MVD+VYHg6GNv3SymUFsBm0sO47bVlVJLD1v4hpQtZmawcC+RV5/wLGW4
KLLlfGs6DZN1X+XTgALz+CRhDqe3QNoF+W13Jns0PHK1oMVPMvEjAQk1pjfRGg5K
ygs0vnRyNyql586z9ZEslKUZC7ZVoj6A1zzYj1lUfbeVHcgl6wiJgzX9H4A5qlRa
sgZp4biMAmI+nICY2YHzeS6R3kMl+NE4pIEixCBX2G4HfBqZg6vxRwnrwSOLZV5e
JuzWY83Xo1vNBfYibNwlfOlf/oi5ZhfSN8uyuz5SI+SZednsFZ3qTBtS7U70DPdG
vUM5X3Y6vl7nJQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:43:09 2026 by rpki-client