Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
File: CxsxjlBXocEDQWB83d2ttG1xq_U.mft (raw, json)
Hash identifier: vxfr+mWl2YAn6+o+pN5fTm1tlreGXwvC0krAU5lGvq8=
Subject key identifier: 47:15:48:75:CC:EA:E9:7C:A7:F3:8B:A8:7A:7D:38:1A:74:D8:56:E1
Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
Certificate issuer: /CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Certificate serial: 019D2627E350B334EF7A9EF348E2FFBFDFC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 18:00:41 +0000
Manifest this update: Wed 25 Mar 2026 18:00:41 +0000
Manifest next update: Thu 26 Mar 2026 18:00:41 +0000
Files and hashes: 1: AyjB4EHPCDq9p7LZ4QxN-ryxrkM.roa (hash: TjTKp2DaLx4thRMtFk13G01LVFaqUeVARGlNcCmXfhM=)
2: CxsxjlBXocEDQWB83d2ttG1xq_U.crl (hash: Zn+MQ55C2N9bw92t0Tcjf+iAlENtKjsaKnTU+psZGyg=)
3: NjX_-QFT-KYIQb8IhhsWdmtYmIs.roa (hash: alZ0M56XHk3ZVrQNYJTxZZ2onR/AK2JyEOwbu/Z8qYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:e3:50:b3:34:ef:7a:9e:f3:48:e2:ff:bf:df:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Validity
Not Before: Mar 25 18:00:41 2026 GMT
Not After : Mar 26 18:00:41 2026 GMT
Subject: CN=47154875cceae97ca7f38ba87a7d381a74d856e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:5b:c8:d4:02:12:16:af:6e:67:58:45:99:
1a:c3:ec:f0:90:4c:71:19:84:76:dc:55:2e:ad:d8:
85:72:94:ec:5a:c0:29:08:46:f4:28:19:46:ec:b7:
f3:35:b0:27:c9:ee:ea:88:f6:23:70:5a:7a:dc:3b:
58:75:2d:ec:92:5a:c2:3d:1f:ef:ab:70:60:f5:44:
42:e3:67:df:99:70:37:cb:12:db:25:c6:cd:c9:97:
ab:d8:5e:65:82:47:10:16:2c:74:f5:70:8a:01:2b:
f3:81:0a:d8:3a:d7:ec:e7:a0:6d:c6:bc:ad:4c:87:
aa:37:a7:73:25:bc:e0:1a:a9:f7:48:d6:d8:d6:4f:
27:82:6a:a2:db:66:0f:a7:a5:e3:fa:c3:28:0f:70:
15:d8:0a:8a:1d:e7:d7:bf:50:c3:e9:8c:ba:aa:25:
ee:ce:0c:0c:cb:39:02:4f:f7:51:22:75:30:8a:fb:
b6:ae:e6:a5:0b:b7:c8:e0:85:f8:03:4c:5c:c7:ea:
19:53:a1:13:38:ca:3d:4c:07:46:9a:15:8f:b4:b7:
bd:07:d8:d5:45:02:f0:ae:71:01:74:e9:5c:de:eb:
f8:73:93:68:9f:f9:52:b2:62:b9:b7:c4:1b:ba:02:
b6:b9:4c:14:ab:c8:7e:29:71:a5:ae:9d:42:19:9e:
bf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:15:48:75:CC:EA:E9:7C:A7:F3:8B:A8:7A:7D:38:1A:74:D8:56:E1
X509v3 Authority Key Identifier:
keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:35:1a:91:54:20:fa:ed:d3:5d:df:73:61:26:a6:bd:b0:a5:
42:01:14:41:e5:2e:20:dc:55:82:e8:44:ba:fb:7a:5a:7b:75:
68:fb:3d:68:08:9a:86:e5:36:3c:d5:55:29:e6:f0:db:ed:90:
a3:b9:90:ff:39:01:c1:14:e8:df:44:c1:3d:e5:ce:3c:2d:78:
4f:a1:4d:d4:05:f5:1d:0d:4f:90:97:a3:2c:76:cc:e9:75:7b:
0e:e8:12:69:47:f9:30:1d:3a:db:44:05:88:6c:1e:17:34:02:
92:79:89:d6:aa:15:f6:9d:95:9a:a9:0b:77:be:6b:51:f0:08:
90:91:0a:90:b4:d4:bd:74:5a:1e:54:20:b9:43:d3:36:26:31:
31:eb:8e:75:32:1b:c8:8e:ec:cc:8b:fc:9c:91:e5:4e:ab:00:
2d:0b:90:5f:49:c8:04:04:16:74:bf:8c:29:b1:c3:b7:db:eb:
78:e5:96:bc:0e:e3:1a:43:d3:16:dd:c4:1f:47:04:4e:7d:70:
8d:b8:5d:ef:72:0b:e4:37:73:6a:48:71:83:ae:99:74:fa:fc:
21:e9:00:23:c8:9e:e7:0e:b0:4b:13:fa:2a:7d:4a:37:a3:6f:
ab:2a:23:2d:ad:e3:57:31:7e:22:7c:5b:32:47:53:b6:60:fc:
eb:66:f1:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mJ+NQszTvep7zSOL/v9/EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMWIzMThlNTA1N2ExYzEwMzQxNjA3Y2RkZGRhZGI0NmQ3
MWFiZjUwHhcNMjYwMzI1MTgwMDQxWhcNMjYwMzI2MTgwMDQxWjAzMTEwLwYDVQQD
Eyg0NzE1NDg3NWNjZWFlOTdjYTdmMzhiYTg3YTdkMzgxYTc0ZDg1NmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGVbyNQCEhavbmdYRZkaw+zwkExx
GYR23FUurdiFcpTsWsApCEb0KBlG7LfzNbAnye7qiPYjcFp63DtYdS3sklrCPR/v
q3Bg9URC42ffmXA3yxLbJcbNyZer2F5lgkcQFix09XCKASvzgQrYOtfs56Btxryt
TIeqN6dzJbzgGqn3SNbY1k8ngmqi22YPp6Xj+sMoD3AV2AqKHefXv1DD6Yy6qiXu
zgwMyzkCT/dRInUwivu2rualC7fI4IX4A0xcx+oZU6ETOMo9TAdGmhWPtLe9B9jV
RQLwrnEBdOlc3uv4c5Non/lSsmK5t8QbugK2uUwUq8h+KXGlrp1CGZ6/awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcVSHXM6ul8p/OLqHp9OBp02FbhMB8GA1UdIwQY
MBaAFAsbMY5QV6HBA0FgfN3drbRtcav1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3hzeGpsQlhvY0VEUVdCODNkMnR0RzF4cV9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YjRkZjctZDcyYi00NzRmLTk2M2Yt
NTllNmE2ZDRkNTc2LzEvQ3hzeGpsQlhvY0VEUVdCODNkMnR0RzF4cV9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YjRkZjctZDcyYi00NzRmLTk2M2YtNTllNmE2ZDRkNTc2
LzEvQ3hzeGpsQlhvY0VEUVdCODNkMnR0RzF4cV9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDUakVQg
+u3TXd9zYSamvbClQgEUQeUuINxVguhEuvt6Wnt1aPs9aAiahuU2PNVVKebw2+2Q
o7mQ/zkBwRTo30TBPeXOPC14T6FN1AX1HQ1PkJejLHbM6XV7DugSaUf5MB0620QF
iGweFzQCknmJ1qoV9p2VmqkLd75rUfAIkJEKkLTUvXRaHlQguUPTNiYxMeuOdTIb
yI7szIv8nJHlTqsALQuQX0nIBAQWdL+MKbHDt9vreOWWvA7jGkPTFt3EH0cETn1w
jbhd73IL5Ddzakhxg66ZdPr8IekAI8ie5w6wSxP6Kn1KN6NvqyojLa3jVzF+Inxb
MkdTtmD862bxOA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:47 2026 by rpki-client