Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
File: CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft (raw, json)
Hash identifier: FLaQ7IJq0D+oeb3FoH+xPo2z+efbAW+1ukWHuHdb7TA=
Subject key identifier: 19:99:88:FA:1D:D7:C4:9C:2B:78:F4:15:98:7D:62:10:ED:87:75:AB
Authority key identifier: 09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90
Certificate issuer: /CN=097b5d1490b385a2f80c2a0324fe98e351091490
Certificate serial: 019E1CB4C90A9DDC560616442B0F135D2B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
Manifest number: 0AC9
Signing time: Tue 12 May 2026 15:01:10 +0000
Manifest this update: Tue 12 May 2026 15:01:10 +0000
Manifest next update: Wed 13 May 2026 15:01:10 +0000
Files and hashes: 1: CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl (hash: 9APUqaR4Asz4qQCtMdgP5LB0mGAVh3WZ8GqY+xWxgvE=)
2: bLCakBk74vA_pvVpNhXg4pCbVXw.roa (hash: GBhXQa+nuToOfYjhvINVNifJDhn+gqtN3QAytiiva2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:c9:0a:9d:dc:56:06:16:44:2b:0f:13:5d:2b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097b5d1490b385a2f80c2a0324fe98e351091490
Validity
Not Before: May 12 15:01:10 2026 GMT
Not After : May 13 15:01:10 2026 GMT
Subject: CN=199988fa1dd7c49c2b78f415987d6210ed8775ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:97:ad:4a:cc:07:c5:ed:b9:d4:6e:08:ac:ca:
1f:0b:ad:83:f4:11:b3:03:74:7c:ce:3c:4d:ef:60:
e5:43:61:25:a4:8a:18:f7:a2:b7:6d:e6:35:6d:d0:
7f:6e:92:88:76:6d:f3:25:9e:a5:7a:a5:20:d3:e8:
04:c0:3f:10:55:66:32:0f:88:e4:a7:fb:52:f7:26:
ae:5f:d5:fc:43:05:df:32:b6:0c:59:94:e8:c0:6b:
9f:87:7f:ff:7c:67:96:60:6b:7b:99:7c:8a:71:37:
56:cd:09:a2:31:b9:e5:b7:89:ed:3d:97:9a:48:6b:
92:42:74:c8:62:82:11:8d:8c:82:0f:be:ef:ee:86:
e8:ca:54:e4:a0:77:46:4c:b8:74:72:a8:1c:9b:04:
44:be:d5:28:ea:59:e1:8b:b8:31:3a:b1:9b:53:e7:
98:1a:c0:97:3b:27:95:bd:bf:32:ca:ec:7c:92:55:
aa:b1:f1:6c:c1:f2:fe:44:4a:e7:b9:67:7e:49:ad:
8f:04:57:4f:f3:38:f8:9a:d3:83:3c:4b:d2:78:c8:
f5:6d:37:a4:8f:03:87:77:67:7d:04:4d:dd:5e:f8:
e1:dd:5d:ea:64:b5:a0:92:32:ac:87:04:bb:e3:8f:
6d:dc:f7:1d:d7:ee:2a:0e:49:56:45:0d:5c:60:e2:
53:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:99:88:FA:1D:D7:C4:9C:2B:78:F4:15:98:7D:62:10:ED:87:75:AB
X509v3 Authority Key Identifier:
keyid:09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:45:03:0d:ab:da:70:59:53:4a:cb:0e:4f:a1:cf:9f:b2:ad:
49:f7:43:b6:d8:8b:f6:bd:1a:93:d7:e3:c2:1d:3f:76:13:e8:
f2:f1:c7:8f:08:6e:aa:8f:9b:25:58:08:8c:f6:1f:78:80:72:
c8:bf:1a:46:f6:e6:5d:dd:cd:1e:e2:6e:86:ab:ec:5a:01:d4:
ef:90:f0:12:d6:bf:3e:90:52:7d:f6:b2:53:cc:fd:b3:e1:71:
2b:0e:62:76:f1:49:ff:58:75:67:fc:2e:d7:9e:e1:74:92:db:
ea:8b:a0:dd:d4:22:a0:46:d1:5a:1b:63:6f:a2:e5:b0:81:a1:
29:d7:b4:69:5b:e5:6d:af:bd:16:dd:12:8d:20:c6:90:5d:2d:
fd:54:0e:48:56:d9:a8:04:b2:30:4b:c1:d8:54:06:94:45:ff:
77:d2:98:21:26:04:ad:95:38:d2:29:80:f3:43:b9:b7:68:0e:
6b:ec:62:3a:a1:4c:90:c8:61:a6:ba:2b:9f:1c:c6:8c:c7:1a:
46:a5:c4:dc:38:dd:3a:65:f4:ee:8b:ce:ce:05:30:cc:33:ec:
e3:53:25:e3:34:7e:d4:9f:5a:ec:07:5b:11:2b:af:19:29:b5:
4d:20:e1:0a:1d:1d:a7:b9:85:13:d3:bd:92:47:ad:57:70:a3:
31:0e:53:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:34:00 2026 by rpki-client