Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.mft
File: Cx_IbXySo01haTZCvs_-mgnkq5M.mft (raw, json)
Hash identifier: H99hanFGfMR+xvnOX0mStZ77QW5VZo+LsfR0O9TIlDM=
Subject key identifier: 4B:FD:D0:9F:DC:60:05:2E:28:F4:5D:74:58:F7:34:43:1A:0F:9E:22
Authority key identifier: 0B:1F:C8:6D:7C:92:A3:4D:61:69:36:42:BE:CF:FE:9A:09:E4:AB:93
Certificate issuer: /CN=0b1fc86d7c92a34d61693642becffe9a09e4ab93
Certificate serial: 019F8F7F5C5F96C81819057A7541025D6D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx_IbXySo01haTZCvs_-mgnkq5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:56 +0000
Manifest this update: Thu 23 Jul 2026 15:01:56 +0000
Manifest next update: Fri 24 Jul 2026 15:01:56 +0000
Files and hashes: 1: Cx_IbXySo01haTZCvs_-mgnkq5M.crl (hash: hXv7nrX6EdBgPro4gOITOsw+Anoj3BLcWZiK+dlsRGE=)
2: Sh2PEP2-MbPB0IM3ViP0tnARGnw.roa (hash: aLTyx16ru8CGVowWY4gCMQ3X+iZjRgCKx74BRuePAjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx_IbXySo01haTZCvs_-mgnkq5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:5c:5f:96:c8:18:19:05:7a:75:41:02:5d:6d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1fc86d7c92a34d61693642becffe9a09e4ab93
Validity
Not Before: Jul 23 15:01:56 2026 GMT
Not After : Jul 24 15:01:56 2026 GMT
Subject: CN=4bfdd09fdc60052e28f45d7458f734431a0f9e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:61:72:90:7e:47:33:4f:b6:d8:87:29:40:b7:
58:dd:d6:6c:e6:84:79:36:87:2b:22:f1:8a:42:7c:
8e:43:92:01:f1:e5:40:6a:ff:7a:4c:e7:86:63:49:
84:ed:83:7f:21:5d:86:56:70:e3:60:b2:5f:09:0f:
1c:d0:c0:d6:bf:9f:67:2c:a8:b6:a5:82:da:1d:c1:
f3:cb:90:73:94:96:12:9f:d9:f4:d1:5a:9d:45:50:
b1:c6:02:d4:c8:08:40:93:d7:0d:c5:a9:9f:90:ff:
09:66:32:3b:f7:b7:55:c9:8f:6d:d6:52:75:e7:53:
84:e0:5a:39:11:53:35:66:42:7f:57:e7:47:83:9a:
c3:ce:6b:9d:21:bd:20:33:59:e7:c4:70:c5:79:0f:
d1:95:de:1a:71:84:d4:06:36:f2:d4:37:b7:bf:5c:
ac:12:9e:37:98:7d:ef:22:7a:3d:3e:01:2c:1e:86:
04:49:df:32:50:38:7c:7c:24:10:f5:0b:71:28:2d:
c3:1e:1b:96:b6:31:a7:c9:26:a6:60:72:ad:22:03:
c7:04:70:88:f4:01:cc:d7:49:ce:59:3c:c2:47:8e:
0a:3b:d9:e8:2d:83:57:81:ce:21:47:2f:00:90:f5:
2b:8c:8a:3d:94:4c:23:76:67:f6:77:b6:65:16:5f:
56:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FD:D0:9F:DC:60:05:2E:28:F4:5D:74:58:F7:34:43:1A:0F:9E:22
X509v3 Authority Key Identifier:
keyid:0B:1F:C8:6D:7C:92:A3:4D:61:69:36:42:BE:CF:FE:9A:09:E4:AB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx_IbXySo01haTZCvs_-mgnkq5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:90:b2:1c:12:20:5d:65:24:de:c6:73:d4:5e:02:e6:50:d8:
25:20:91:bc:ad:f4:e8:65:4a:5b:13:9d:c9:51:82:16:ea:bd:
e9:90:13:a4:14:c0:ae:15:46:7a:af:77:c6:ae:6d:78:01:be:
79:fb:27:66:80:67:54:9e:70:bf:e6:76:b6:97:fc:fa:ef:87:
e1:31:32:73:39:ab:0a:71:43:66:82:02:9b:fc:56:57:a2:97:
c7:b5:ad:9f:9d:4d:0b:41:59:00:c5:8a:b6:db:a4:3c:10:fd:
71:f1:63:72:e1:f0:30:e9:b5:7b:33:e8:e7:69:40:b4:98:d5:
04:e7:a5:d7:4c:2f:5b:df:e5:8b:a6:65:7b:47:80:e3:fa:17:
e4:a7:92:a6:fc:9a:6f:ca:14:37:57:f4:48:dc:0e:10:a7:8f:
83:dd:a8:63:47:e3:d5:92:e7:79:e0:bf:1f:55:76:b2:c9:d8:
8e:ed:2d:25:91:a9:67:1f:81:f2:0d:f3:f1:03:c3:9a:42:4e:
57:22:c7:8e:b3:49:05:1a:a4:32:af:df:d2:fe:3a:82:5a:e5:
43:53:42:8d:b1:7d:be:42:69:04:4b:b1:8d:fc:ab:43:9f:e5:
41:4a:f9:80:93:66:19:4b:09:96:59:a5:18:e2:ec:43:92:99:
d2:b2:11:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:30 2026 by rpki-client