Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
File: CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft (raw, json)
Hash identifier: wXL//I6EM5J/a0cAyRS9qq9H+GHrgjdISxJvT0C8WCA=
Subject key identifier: 2B:0F:39:74:6A:EF:88:A8:A7:5A:F9:63:99:A1:A7:64:27:01:11:3D
Authority key identifier: 09:7B:B4:8E:21:4B:B4:D8:DB:42:30:3E:9D:92:A6:C7:09:48:CC:1D
Certificate issuer: /CN=097bb48e214bb4d8db42303e9d92a6c70948cc1d
Certificate serial: 019E1CEB68C3C2B7054C77CB57111B7F200E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
Manifest number: 77
Signing time: Tue 12 May 2026 16:00:50 +0000
Manifest this update: Tue 12 May 2026 16:00:50 +0000
Manifest next update: Wed 13 May 2026 16:00:50 +0000
Files and hashes: 1: 3UrLjHCB4pwcHVB3zBFHrMVrSsw.roa (hash: FmQXFHkHNyNXx7/DlR8LyUj511QpfY6zuQXRoYOyGLo=)
2: 3vZIFgD88S-GCNxDnP1LiF3y1Mc.roa (hash: IojT01yCuekhR3J8NVJlRfRwjrsV8AmZFTiDSTjzBYk=)
3: CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl (hash: ZpxkZU5kuG+xJ53snk2CRHPCePG388Rfmq8uQIHFFfA=)
4: XK1u2OpOHfPFyWFSpStjjFR21eM.roa (hash: zmHubFupuS74yLzF6KkoHbfyUplOIcN6d9GoVLzuZOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:68:c3:c2:b7:05:4c:77:cb:57:11:1b:7f:20:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097bb48e214bb4d8db42303e9d92a6c70948cc1d
Validity
Not Before: May 12 16:00:50 2026 GMT
Not After : May 13 16:00:50 2026 GMT
Subject: CN=2b0f39746aef88a8a75af96399a1a7642701113d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:c5:16:41:f7:7d:7f:26:04:8b:9c:c8:52:
9c:a0:98:38:55:7a:68:b2:95:86:34:7b:da:84:55:
e7:ce:ac:35:19:34:3e:6a:ad:e7:0e:ed:11:e9:bf:
c0:e0:78:39:ff:ea:59:a4:92:dc:f0:26:c2:4d:28:
37:d1:dc:6b:7c:c4:76:c7:59:c5:f3:f5:20:ef:71:
97:7b:c0:b9:11:22:2f:e8:21:72:35:ab:7d:32:25:
a9:eb:f7:6b:98:58:1b:9d:11:3b:ee:98:b0:f3:a0:
b8:0b:89:6e:ff:5e:10:8d:51:19:23:ea:fb:8f:6d:
4e:cf:ef:ce:dc:04:0b:67:7b:a2:ec:7a:b4:f5:44:
23:2e:e2:5d:9c:d7:20:3a:8b:b1:47:1d:06:67:d7:
b9:f6:86:3e:a3:08:65:a5:c9:74:05:04:ce:72:8f:
ef:5c:17:26:35:5c:bf:82:11:fa:ea:e1:b4:59:b7:
85:02:eb:99:02:9f:7a:f2:30:e5:cf:b9:c1:22:58:
1c:c5:28:79:a9:38:57:e0:fb:79:4d:1c:9b:a0:8c:
3d:8d:7d:b2:45:48:a1:54:cf:b9:74:24:ba:5f:b7:
e0:a8:64:c5:e4:22:aa:68:f5:0c:b9:54:90:2b:0a:
07:eb:89:73:ae:b7:6f:4b:4e:24:5a:0f:bd:6c:d2:
41:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0F:39:74:6A:EF:88:A8:A7:5A:F9:63:99:A1:A7:64:27:01:11:3D
X509v3 Authority Key Identifier:
keyid:09:7B:B4:8E:21:4B:B4:D8:DB:42:30:3E:9D:92:A6:C7:09:48:CC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f0:e9:e5:91:62:7a:c9:fd:70:5b:3f:f7:e1:b7:53:01:a3:
f4:6f:ce:19:be:5d:39:8b:b3:56:75:ae:d4:35:23:a9:9f:d0:
0a:ae:7a:4e:43:b1:bd:0b:4f:17:6b:67:08:48:48:b9:89:7d:
0e:c7:bb:8c:31:ba:94:de:e4:4b:b9:d4:cc:50:74:5e:ca:5e:
e8:5f:44:a7:3b:5a:f0:24:d8:84:31:58:64:ce:32:8b:61:1e:
d6:36:a5:cb:ee:67:90:87:3a:d0:72:da:3a:51:7c:63:d7:0d:
7c:d1:53:e3:ea:5a:d6:80:66:09:0e:54:ca:15:13:71:eb:36:
3d:9f:7d:96:b2:9c:ef:3c:5c:68:78:93:6c:ab:fd:c9:f9:c2:
a0:c8:44:3b:2e:1d:1a:e9:f0:15:9b:df:dc:29:fb:99:d6:7d:
d1:48:ea:3d:13:9e:e7:dd:23:55:4b:e3:70:75:63:8b:e6:37:
fa:7f:22:c2:52:dd:6f:41:cb:b0:50:cf:ee:cf:0d:23:3d:90:
3c:46:9d:bd:50:f4:c4:8e:60:c7:4c:1c:f6:bd:56:69:a5:58:
ad:fc:0d:81:dd:43:87:1f:df:1b:d0:d9:a7:e2:18:54:a7:02:
4b:41:09:2c:0b:1c:88:c2:26:8d:7d:ac:27:2a:bb:55:2b:10:
ce:2d:ce:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:08:17 2026 by rpki-client