Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
File: cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft (raw, json)
Hash identifier: Oy1he5HxH4CZi/5CaUMypXM2BOyGXLjWNi5lv/FqGFg=
Subject key identifier: 2E:C6:2A:34:56:09:3A:57:A6:93:DC:75:5F:52:3C:60:39:B1:9D:98
Authority key identifier: 73:18:9D:26:BA:E7:F8:5C:B4:E0:6A:B5:AB:53:6D:E5:A8:0C:16:A1
Certificate issuer: /CN=73189d26bae7f85cb4e06ab5ab536de5a80c16a1
Certificate serial: 019D273AA837DF2152FEDC922FDB61D62E45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 23:00:48 +0000
Manifest this update: Wed 25 Mar 2026 23:00:48 +0000
Manifest next update: Thu 26 Mar 2026 23:00:48 +0000
Files and hashes: 1: StxoWp_RJ1797k0oHsjoVvZHf10.roa (hash: nD5a2Jb4fZiufTRyTRxdHS8BCxtbGh40rJHL37nPIac=)
2: cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl (hash: TG6cCYrXEiEhe8kiBf7tItWXOt/4i3FnQgdAq/eunkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:a8:37:df:21:52:fe:dc:92:2f:db:61:d6:2e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73189d26bae7f85cb4e06ab5ab536de5a80c16a1
Validity
Not Before: Mar 25 23:00:48 2026 GMT
Not After : Mar 26 23:00:48 2026 GMT
Subject: CN=2ec62a3456093a57a693dc755f523c6039b19d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0d:d4:11:31:5f:38:c0:6a:f6:94:ed:e6:77:
0a:2f:6d:a2:0c:c0:08:bd:37:aa:0d:50:04:84:e8:
34:aa:d4:71:35:59:16:ea:d8:4f:2b:17:a2:fa:76:
e8:ff:eb:b8:be:1f:bc:29:b1:31:cd:7b:e0:68:d9:
ae:c7:f3:a9:0d:29:b6:ac:64:51:76:1b:b0:ae:0a:
d2:fb:a4:2a:6b:53:33:e0:ff:e3:34:3b:fc:ed:09:
e1:af:91:e5:a0:38:8b:32:6a:ee:ea:4a:c3:16:f8:
1d:fd:1b:b8:98:e0:13:ed:64:b3:62:34:d0:f0:89:
c2:7a:97:2e:72:4c:d3:d6:82:81:18:ba:c8:a5:f3:
01:47:6b:28:1e:90:1c:9b:57:21:36:1c:e6:12:38:
a1:42:4e:b1:81:a1:d6:0a:aa:38:1d:ed:41:64:a3:
a3:d7:62:d7:5f:f4:96:8d:32:64:9d:02:90:7e:76:
f4:ff:c7:e6:38:81:03:23:e4:dd:33:62:00:46:a7:
34:82:b3:b2:22:3a:30:61:b3:c1:89:31:41:b7:42:
e6:3e:29:2e:25:da:9d:1e:51:0c:e0:b4:3b:62:5f:
b7:48:94:d2:26:00:8e:aa:23:5b:89:2a:68:43:eb:
3f:1f:63:8e:7f:fe:cf:a4:fd:6f:d8:24:0f:21:20:
ca:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C6:2A:34:56:09:3A:57:A6:93:DC:75:5F:52:3C:60:39:B1:9D:98
X509v3 Authority Key Identifier:
keyid:73:18:9D:26:BA:E7:F8:5C:B4:E0:6A:B5:AB:53:6D:E5:A8:0C:16:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:02:19:32:4b:69:44:67:9c:59:e4:dc:b2:7b:ab:c8:22:e0:
48:d1:71:5f:a8:89:d7:51:01:96:dc:1b:19:11:55:ce:86:23:
2d:b8:95:a8:23:53:54:ed:c5:83:cd:35:25:22:9f:cb:e3:82:
bd:d7:66:3f:ec:e9:b9:28:b4:b3:37:70:17:23:97:4f:38:6f:
f8:72:9f:cf:5b:d2:07:6a:67:80:dd:76:0b:20:74:32:ed:e2:
c4:9d:5c:a3:36:41:aa:c3:94:b7:53:54:6d:9e:31:fd:c9:c5:
78:f9:c0:96:a1:57:e1:4a:04:3c:5a:c9:3e:20:be:ef:23:4e:
00:4b:d6:b2:78:91:bd:9d:42:01:5c:f7:b6:d5:21:af:d7:bb:
24:f5:50:70:40:46:ec:d5:cd:c7:84:75:da:e8:31:87:0f:db:
24:b6:a7:3c:59:a3:18:48:09:8f:7a:2f:af:32:7d:df:7f:83:
08:1b:bd:1b:75:1a:c5:ed:45:a7:af:63:46:6f:68:bd:dd:b4:
de:90:33:a4:af:e3:d3:26:cd:19:fb:a4:bf:36:54:93:8c:e4:
43:17:3a:2c:e1:f6:fd:9d:5a:02:b5:73:2d:07:e2:bf:bc:41:
6f:a6:98:e9:e4:fb:72:e5:35:55:77:82:89:79:63:f6:11:f3:
0c:9d:61:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:45 2026 by rpki-client