Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
File: cxU1ourrxowWV6r89aeIyHUdm2I.mft (raw, json)
Hash identifier: e815YGud7vOJyYroTGplXH2YnOObBbnNazcvNhaICoQ=
Subject key identifier: 66:83:E5:21:7C:EE:C5:F7:3D:A0:96:C1:A8:0D:A6:55:D2:61:5B:D2
Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Certificate serial: 019E1F7E9B3D7F764A4A069EFB2918CE4041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
Manifest number: 17E3
Signing time: Wed 13 May 2026 04:00:51 +0000
Manifest this update: Wed 13 May 2026 04:00:51 +0000
Manifest next update: Thu 14 May 2026 04:00:51 +0000
Files and hashes: 1: KFAbKKe7jo2XjrWvMFjbhME-DXc.roa (hash: 4OtvIQVEiPvcGG7i9r46Rvs1hJ/uhdVoDzjyfUfIYZk=)
2: TMosgBiabWiuRyi5Ssatcr00sSE.roa (hash: F+7FnUFFY40UIl2jFbgxyGZqPlinYg7PSVeRNWNABjs=)
3: cxU1ourrxowWV6r89aeIyHUdm2I.crl (hash: EjVfTVg7yjjH3bW9WsyVnZS6jKtIf5W5pqLZaACl24Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:9b:3d:7f:76:4a:4a:06:9e:fb:29:18:ce:40:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Validity
Not Before: May 13 04:00:51 2026 GMT
Not After : May 14 04:00:51 2026 GMT
Subject: CN=6683e5217ceec5f73da096c1a80da655d2615bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:fa:d4:0f:73:69:a2:67:79:b0:fb:e8:84:
02:0a:b4:d0:39:3b:c2:e5:36:83:44:7f:12:3e:23:
be:06:2e:53:ee:86:cf:33:c7:d5:d2:1c:5a:39:06:
27:4c:41:15:6c:bd:cf:78:9f:14:d7:74:8c:90:fd:
f8:48:c7:9e:0c:de:6b:7c:b8:12:13:be:d7:ad:e0:
63:44:45:2e:42:1a:a2:e8:9b:14:8c:df:9e:d9:a1:
9e:da:9f:7d:01:b1:9a:42:63:99:3f:ff:83:49:30:
dc:86:ed:a9:44:27:c3:0d:10:c3:59:a2:8d:aa:d3:
34:2f:6b:8c:15:60:da:e4:6c:cd:d9:f8:07:6e:e8:
d0:5a:61:cf:dd:57:6d:cc:7d:6b:eb:d3:58:7b:ce:
5a:fc:3f:bc:e7:66:fc:e5:f2:4e:0e:db:52:2d:3e:
44:e5:a7:ff:ba:e0:7e:95:04:c7:b2:72:57:8c:b3:
04:04:8c:45:36:66:4d:7b:f6:d4:88:45:f4:19:72:
58:94:65:05:6e:27:17:07:e4:86:8c:18:d2:c9:4e:
2a:2d:9d:6f:51:94:ab:2e:bd:ee:55:12:20:db:54:
69:fb:3f:06:dc:49:90:b7:83:66:1d:80:fd:58:54:
2a:83:44:24:33:d5:eb:ca:0b:96:d2:05:4c:16:a5:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:83:E5:21:7C:EE:C5:F7:3D:A0:96:C1:A8:0D:A6:55:D2:61:5B:D2
X509v3 Authority Key Identifier:
keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:50:a7:e2:32:5e:f3:05:fe:d2:6a:e4:71:85:2d:49:80:a9:
1d:a4:6a:23:b7:d9:fb:7d:f4:92:c5:de:0c:b5:68:09:b1:42:
a2:a2:ff:be:92:d2:2c:8e:e8:30:0a:73:ed:85:b2:1c:90:ee:
74:29:3f:5a:82:7a:20:b6:a0:93:2e:0e:92:9a:18:7e:fa:54:
77:64:30:f7:8a:91:62:06:22:3c:23:f1:72:72:f8:b7:e6:e7:
60:09:81:28:4b:26:5a:c6:a8:3e:d6:ac:54:c1:06:d1:25:9e:
1c:aa:85:0a:d8:99:1b:b8:8e:65:89:f5:7e:dc:7a:2e:70:7e:
6b:b8:a6:9c:45:09:6b:b4:eb:1a:0a:81:50:1d:5d:49:bd:a3:
b6:82:6a:bd:29:4a:4c:df:83:a8:87:0b:21:c9:78:89:d3:13:
ca:00:38:17:c9:98:04:a4:ca:71:49:98:e5:99:15:d4:dc:73:
b2:ef:5c:70:f0:1e:e7:98:bc:ab:08:e8:e1:65:b5:51:bc:0c:
e4:b0:a9:12:83:30:d0:28:f6:49:49:ef:0d:32:8b:a1:63:15:
26:a1:5e:2c:f3:3e:80:1d:d5:d2:b7:96:e3:72:56:ae:16:3b:
f1:ac:8a:80:0f:82:ba:06:e9:42:8e:21:a0:7f:8a:7d:69:6d:
09:61:28:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:28:53 2026 by rpki-client