Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
File: CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft (raw, json)
Hash identifier: S9cW3VEbLW/EPUf97MSF3wd3XACYIW8ltnG48NMma8M=
Subject key identifier: 14:7A:31:E7:69:F1:FB:00:54:3F:DC:0A:97:9B:E6:18:12:0E:B3:1A
Authority key identifier: 09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90
Certificate issuer: /CN=097b5d1490b385a2f80c2a0324fe98e351091490
Certificate serial: 019D2771DD25A281043EE33A3CE9D2279BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
Manifest number: 0A4A
Signing time: Thu 26 Mar 2026 00:01:06 +0000
Manifest this update: Thu 26 Mar 2026 00:01:06 +0000
Manifest next update: Fri 27 Mar 2026 00:01:06 +0000
Files and hashes: 1: CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl (hash: 5+YtCejMkDgORTqaLSpLpl3ABi0Lsdg3Fcbv+4PZQdA=)
2: bLCakBk74vA_pvVpNhXg4pCbVXw.roa (hash: GBhXQa+nuToOfYjhvINVNifJDhn+gqtN3QAytiiva2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:dd:25:a2:81:04:3e:e3:3a:3c:e9:d2:27:9b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097b5d1490b385a2f80c2a0324fe98e351091490
Validity
Not Before: Mar 26 00:01:06 2026 GMT
Not After : Mar 27 00:01:06 2026 GMT
Subject: CN=147a31e769f1fb00543fdc0a979be618120eb31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:26:42:5b:9e:6d:bd:53:b1:13:e6:97:99:0d:
d7:c7:dc:54:4f:8f:b8:0b:ca:46:7f:55:d7:63:fc:
98:32:02:35:70:f3:54:b7:4f:75:f7:9b:bb:a9:56:
49:d5:67:0f:d4:d1:90:67:be:5b:38:a2:c3:75:9d:
f3:eb:c2:6a:91:cf:9b:a7:5d:24:38:99:08:ce:65:
be:9e:af:13:34:db:ad:b4:e9:35:ee:77:8f:6b:66:
b4:3a:77:31:e2:f5:49:e0:73:ce:b1:96:83:58:5f:
2d:5d:e8:3f:ce:13:dc:0d:e3:f1:b1:7c:13:2a:54:
c2:73:2f:a6:31:14:86:e5:e4:d3:44:c9:8d:92:fa:
5c:63:d1:86:ac:03:35:bb:59:1a:08:21:92:d9:ce:
3a:ca:36:ec:a2:d6:12:30:48:26:86:40:c1:e9:dc:
ff:27:e1:71:39:d6:c9:37:17:3d:fe:2f:66:91:1b:
c2:76:e7:ad:82:45:d0:b4:32:6d:1b:bc:c8:f1:47:
65:f0:fe:4d:51:78:15:58:9d:7b:7f:7e:83:1a:fe:
da:00:32:61:e8:04:bb:3e:87:0f:a6:99:f0:0c:e7:
88:cd:25:89:7b:51:0c:32:07:5a:53:63:69:0e:66:
0d:99:db:4c:ba:84:22:70:b5:56:95:85:16:39:5a:
a1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7A:31:E7:69:F1:FB:00:54:3F:DC:0A:97:9B:E6:18:12:0E:B3:1A
X509v3 Authority Key Identifier:
keyid:09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c6:1b:da:b9:01:5e:22:e6:d1:e5:5a:b4:dc:99:e9:6f:4a:
48:89:b2:95:50:b4:62:25:72:f1:4e:a1:eb:1c:7e:1e:2c:99:
5f:47:e8:6f:9c:40:97:bf:05:d9:7e:db:61:00:e3:4f:da:b6:
da:93:d3:af:9d:01:68:a1:5b:2d:b7:77:69:7c:e0:ab:98:ec:
80:30:0d:c2:dd:9e:1c:ac:d8:1e:a3:f2:b0:38:da:76:b5:62:
fd:ca:88:1e:39:6f:17:c1:2a:d5:1e:ca:93:ea:b9:09:c9:26:
28:b4:5e:2e:71:c8:1e:65:fc:c9:bd:78:d0:85:19:df:2f:28:
5e:91:63:96:12:58:26:07:28:48:4d:08:31:fa:22:4c:53:fa:
3d:50:d0:c1:32:2b:2e:c7:64:33:3c:35:47:0d:11:d5:72:2d:
c3:64:55:a6:6c:5d:b2:d3:a7:49:b4:1c:82:36:f4:1c:d0:7c:
69:a4:a5:28:5b:13:6f:7d:e6:e6:af:8d:35:61:69:dc:fc:6f:
64:16:2a:47:6e:6a:e6:b7:fd:5d:ec:d9:68:af:51:50:e6:e1:
a9:12:48:41:49:f1:ee:0c:a1:3f:de:41:c9:0d:96:85:b6:92:
b7:dd:4b:e2:b6:f5:f4:29:fc:38:48:54:a8:cf:5a:fc:d2:99:
6f:08:65:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:23 2026 by rpki-client