Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
File: cxwTgoWLDclamtvqRyizH54iwNg.mft (raw, json)
Hash identifier: Pn5F9+oLX/DoyE4vHvwWB0H4VnSj/ov0TvUDiKKO0fs=
Subject key identifier: 5C:DA:F7:61:29:81:EA:76:D7:BE:D4:66:C7:D5:CB:84:A9:43:8E:01
Authority key identifier: 73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
Certificate issuer: /CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Certificate serial: 019D273A8DAE0C4CEB5584FF0D4D594253C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
Manifest number: 09E4
Signing time: Wed 25 Mar 2026 23:00:41 +0000
Manifest this update: Wed 25 Mar 2026 23:00:41 +0000
Manifest next update: Thu 26 Mar 2026 23:00:41 +0000
Files and hashes: 1: cxwTgoWLDclamtvqRyizH54iwNg.crl (hash: nODr3yn/YyQc5LaFtSM0O1FP3y5B2unAMN5qdG1ZvlI=)
2: eCfciMd8WvfOpLwSmZnFxhRFtP8.roa (hash: mnu1L5F4WUL4nlzWuT0asBSz38ZR2rhi6ZOxZOIl63c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:8d:ae:0c:4c:eb:55:84:ff:0d:4d:59:42:53:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Validity
Not Before: Mar 25 23:00:41 2026 GMT
Not After : Mar 26 23:00:41 2026 GMT
Subject: CN=5cdaf7612981ea76d7bed466c7d5cb84a9438e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:91:76:6e:9a:91:e0:6a:d1:3d:63:77:a8:
70:a0:99:82:05:1c:b9:88:f1:9e:0c:75:de:35:3f:
19:24:16:93:77:0a:34:c1:2f:e3:eb:29:0e:44:65:
03:34:98:48:f2:23:76:c4:81:a3:62:3c:7b:ad:49:
88:98:c8:0a:59:16:0d:4a:df:85:7b:5c:04:fb:e1:
1d:82:06:9c:40:54:22:7b:52:2f:79:97:cf:e7:9f:
8d:ab:75:8e:7b:5d:8d:d0:33:8d:ac:75:a2:80:92:
d6:5f:a6:dc:4b:ab:a3:d8:ac:15:56:13:f8:a4:68:
c5:55:5c:fd:5d:3e:7f:29:35:f8:53:7b:06:e6:de:
e6:3c:2a:37:6d:bf:c6:ae:cc:35:67:b4:08:8b:3f:
52:e9:bd:37:5f:6a:e7:d4:91:1b:ae:f5:01:50:f0:
2b:25:9c:e6:8f:d9:b3:61:c7:ae:5b:ad:10:31:ef:
1e:09:99:65:f5:b9:08:de:52:c5:0f:5b:59:c0:86:
40:ed:71:f7:3c:d9:7d:bb:9a:92:29:36:b5:bd:56:
6c:10:b1:74:07:0a:e1:a0:9f:c4:fe:cf:b1:1c:86:
6f:9e:9b:e8:86:22:34:2b:9d:df:a5:aa:06:f7:44:
10:23:4f:05:64:06:81:5a:27:4d:40:f4:34:96:35:
e0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DA:F7:61:29:81:EA:76:D7:BE:D4:66:C7:D5:CB:84:A9:43:8E:01
X509v3 Authority Key Identifier:
keyid:73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ac:37:b8:3a:84:9e:70:98:ce:e9:51:10:ed:8f:47:8a:8f:
c7:2e:fa:93:fa:3f:a3:99:ce:da:6c:77:92:fb:dd:54:1e:22:
36:59:18:44:1d:4f:50:f9:76:a1:db:0a:ca:e0:58:37:86:b2:
0b:d2:68:13:bd:9a:e8:7f:23:df:22:f5:3a:65:d7:ee:a4:15:
a5:ef:22:4b:15:4c:b0:7b:3d:0e:22:44:8f:86:bc:4f:53:f6:
d7:cf:d2:f2:fd:66:ea:6f:ec:9b:81:22:c1:2b:3f:6c:0d:06:
55:4e:c3:82:1a:60:6e:e3:44:1a:67:d0:1e:b2:34:a9:bc:da:
3c:21:5f:08:97:b9:4e:fb:df:50:1f:45:9a:5c:7c:df:7f:55:
7c:55:7c:1b:13:ce:5b:be:ce:3a:7a:bd:b8:f0:12:34:e4:4b:
9c:61:9f:d7:45:c6:b7:c5:ea:f0:96:c8:20:64:85:8f:09:63:
4f:8f:c3:0c:ed:9c:07:19:d8:a1:e1:2a:ac:73:83:d1:70:8d:
87:9e:2a:ae:3c:20:5e:dc:b2:d7:ab:e1:0d:ec:5d:0a:8b:e2:
e5:02:b3:6b:79:bd:a9:74:98:29:1f:74:9d:61:91:6e:b0:b9:
07:a3:90:44:9d:d4:8a:be:4f:82:8b:7d:a5:64:13:2e:36:fb:
47:49:45:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOo2uDEzrVYT/DU1ZQlPCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMWMxMzgyODU4YjBkYzk1YTlhZGJlYTQ3MjhiMzFmOWUy
MmMwZDgwHhcNMjYwMzI1MjMwMDQxWhcNMjYwMzI2MjMwMDQxWjAzMTEwLwYDVQQD
Eyg1Y2RhZjc2MTI5ODFlYTc2ZDdiZWQ0NjZjN2Q1Y2I4NGE5NDM4ZTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt6Rdm6akeBq0T1jd6hwoJmCBRy5
iPGeDHXeNT8ZJBaTdwo0wS/j6ykORGUDNJhI8iN2xIGjYjx7rUmImMgKWRYNSt+F
e1wE++EdggacQFQie1IveZfP55+Nq3WOe12N0DONrHWigJLWX6bcS6uj2KwVVhP4
pGjFVVz9XT5/KTX4U3sG5t7mPCo3bb/Grsw1Z7QIiz9S6b03X2rn1JEbrvUBUPAr
JZzmj9mzYceuW60QMe8eCZll9bkI3lLFD1tZwIZA7XH3PNl9u5qSKTa1vVZsELF0
BwrhoJ/E/s+xHIZvnpvohiI0K53fpaoG90QQI08FZAaBWidNQPQ0ljXgRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFza92Epgep2177UZsfVy4SpQ44BMB8GA1UdIwQY
MBaAFHMcE4KFiw3JWprb6kcosx+eIsDYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3h3VGdvV0xEY2xhbXR2cVJ5aXpINTRpd05nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xNzJlMGItOGNiYi00MDJlLThmMmMt
ODU5NWI0NTAwODg0LzEvY3h3VGdvV0xEY2xhbXR2cVJ5aXpINTRpd05nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8xNzJlMGItOGNiYi00MDJlLThmMmMtODU5NWI0NTAwODg0
LzEvY3h3VGdvV0xEY2xhbXR2cVJ5aXpINTRpd05nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV6w3uDqE
nnCYzulREO2PR4qPxy76k/o/o5nO2mx3kvvdVB4iNlkYRB1PUPl2odsKyuBYN4ay
C9JoE72a6H8j3yL1OmXX7qQVpe8iSxVMsHs9DiJEj4a8T1P218/S8v1m6m/sm4Ei
wSs/bA0GVU7DghpgbuNEGmfQHrI0qbzaPCFfCJe5TvvfUB9Fmlx8339VfFV8GxPO
W77OOnq9uPASNORLnGGf10XGt8Xq8JbIIGSFjwljT4/DDO2cBxnYoeEqrHOD0XCN
h54qrjwgXtyy16vhDexdCovi5QKza3m9qXSYKR90nWGRbrC5B6OQRJ3Uir5Pgot9
pWQTLjb7R0lFDw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:11 2026 by rpki-client