Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/Cx9B-WxYsltjTex9KqX1FtLYVZQ.mft
File: Cx9B-WxYsltjTex9KqX1FtLYVZQ.mft (raw, json)
Hash identifier: infVRRnq8v1UIP9C09VWsRDpZjECsNPpqgJvr1t3N6k=
Subject key identifier: 2E:A1:44:3D:43:3A:24:02:AF:FB:4C:FB:F6:F5:9E:95:EC:7A:74:D8
Authority key identifier: 0B:1F:41:F9:6C:58:B2:5B:63:4D:EC:7D:2A:A5:F5:16:D2:D8:55:94
Certificate issuer: /CN=0b1f41f96c58b25b634dec7d2aa5f516d2d85594
Certificate serial: 01A0D3F068E9A99FD0AD8E03D7C34FADEF99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx9B-WxYsltjTex9KqX1FtLYVZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/Cx9B-WxYsltjTex9KqX1FtLYVZQ.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:02:23 +0000
Manifest this update: Thu 24 Sep 2026 15:02:23 +0000
Manifest next update: Fri 25 Sep 2026 15:02:23 +0000
Files and hashes: 1: 0Il0hGQus6JFrI28dhOelMSkxAo.roa (hash: 229pizDgAWKKq44Ig1yRqRrjbGCQ9KdVQEjYQSFdDNw=)
2: Cx9B-WxYsltjTex9KqX1FtLYVZQ.crl (hash: jhGGFqzGWQyaLUb2ldyAKvfyLY3PUVXJQrUMYB7KnkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/Cx9B-WxYsltjTex9KqX1FtLYVZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/Cx9B-WxYsltjTex9KqX1FtLYVZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx9B-WxYsltjTex9KqX1FtLYVZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:68:e9:a9:9f:d0:ad:8e:03:d7:c3:4f:ad:ef:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1f41f96c58b25b634dec7d2aa5f516d2d85594
Validity
Not Before: Sep 24 15:02:23 2026 GMT
Not After : Sep 25 15:02:23 2026 GMT
Subject: CN=2ea1443d433a2402affb4cfbf6f59e95ec7a74d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:75:a4:8c:be:38:f5:5c:8f:40:8c:b8:03:
26:11:7a:e8:26:f2:90:e3:77:ad:41:43:c4:14:9e:
6b:db:cd:80:b1:90:8d:ec:fc:a0:2a:32:39:c3:bc:
3e:1d:91:df:53:c5:cb:b9:88:b1:f2:84:72:8e:ce:
94:e1:a9:6f:ed:87:31:68:03:58:30:a0:ce:36:5e:
10:6d:f0:1b:fe:e4:6b:1a:04:d4:d2:ea:f7:d0:f5:
ff:1a:03:d4:62:4a:dd:65:ea:cd:a8:d1:be:b0:98:
e4:48:ae:a4:14:50:20:4d:7b:8d:ef:97:22:30:7e:
f8:0b:30:2d:84:53:a7:fa:bf:c6:ea:d8:85:8b:01:
f6:c8:a2:9f:d0:09:7e:f7:c6:ce:57:ec:5e:0f:4e:
fb:c0:9a:9c:8e:f8:9d:5f:d1:d2:4c:69:16:b8:da:
97:a1:9b:4b:b8:a1:00:5a:8f:8c:76:dd:15:48:ff:
e5:de:42:e4:34:88:68:b3:5d:7c:ae:cd:f8:96:3d:
e9:d4:8b:7b:cf:6f:33:60:91:aa:14:f5:d2:fa:70:
ee:c5:60:63:06:2a:b0:3f:4d:f8:34:3a:d7:bd:a1:
11:86:52:f9:73:ed:af:5a:d7:43:86:f5:5e:3a:d3:
31:fd:da:ac:ed:03:df:0e:7f:1c:e4:f6:96:fd:29:
19:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A1:44:3D:43:3A:24:02:AF:FB:4C:FB:F6:F5:9E:95:EC:7A:74:D8
X509v3 Authority Key Identifier:
keyid:0B:1F:41:F9:6C:58:B2:5B:63:4D:EC:7D:2A:A5:F5:16:D2:D8:55:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx9B-WxYsltjTex9KqX1FtLYVZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/Cx9B-WxYsltjTex9KqX1FtLYVZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/Cx9B-WxYsltjTex9KqX1FtLYVZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:93:8f:ab:9c:ea:87:8f:49:34:a5:5d:c7:b5:0a:f7:e8:e4:
b4:40:fe:66:d3:70:6f:3a:1b:a5:fe:08:1f:55:6b:83:b9:97:
15:07:cd:5f:ce:a4:12:90:f5:64:51:33:64:5c:cb:78:78:f9:
51:74:f7:a0:53:ea:5f:d2:dc:db:43:18:b9:69:e6:11:73:00:
f8:b2:dd:f0:20:6f:11:bf:7d:64:f5:54:21:e4:84:79:bb:a5:
a5:1f:e8:f0:4e:9e:37:3e:45:1f:ea:1e:b6:bb:b7:2d:77:3b:
94:9d:7a:88:29:1f:ce:8e:e0:fd:1a:6d:e9:c4:b6:b7:ef:f8:
55:d4:a6:f3:0e:92:e2:95:3d:74:7b:57:51:21:c1:ee:d7:b6:
49:7f:9c:75:f8:5d:63:20:f6:53:79:74:13:01:09:67:a3:13:
77:7a:bb:de:fa:21:ec:d3:f2:8f:c9:c3:7b:b4:04:1d:8c:27:
4f:1d:b8:3b:4f:ec:08:a8:f2:33:6b:94:8e:4d:15:74:87:e9:
67:74:9e:42:1c:f1:87:8c:92:a9:ec:bf:3d:52:9f:9b:4a:d8:
74:cc:44:21:94:78:d4:f3:01:b3:10:df:c3:64:d4:46:7a:b7:
74:d1:66:3e:40:f2:ff:f6:bb:7d:f2:70:55:57:f2:40:fb:e8:
5b:69:1f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:01:13 2026 by rpki-client