Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
File: cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft (raw, json)
Hash identifier: dmbrdpsCfkfG0Zshp/bJaCcQuXmrD/1bsqc3h0/dYM8=
Subject key identifier: EC:F4:3A:24:50:5E:D2:5E:B2:1E:AE:C2:D1:10:4C:E9:17:14:22:C7
Authority key identifier: 73:19:77:0F:FB:48:7E:39:10:DD:44:D9:DB:0A:53:4D:8D:EF:78:FA
Certificate issuer: /CN=7319770ffb487e3910dd44d9db0a534d8def78fa
Certificate serial: 019F9135983AE86E2A34EE209FBBE6B8CDCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
Manifest number: 89
Signing time: Thu 23 Jul 2026 23:00:36 +0000
Manifest this update: Thu 23 Jul 2026 23:00:36 +0000
Manifest next update: Fri 24 Jul 2026 23:00:36 +0000
Files and hashes: 1: 4VECAtiWqje_60X7y9lsdprg2oI.roa (hash: +zMygkYKU5ImT2bqbHmd0qv5emwVpKIl+ThnFqmu454=)
2: cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl (hash: dTkd2KkCiOqKLjaEbfzNBcZ9+oJaOmXEP2BscTHlw0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:98:3a:e8:6e:2a:34:ee:20:9f:bb:e6:b8:cd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319770ffb487e3910dd44d9db0a534d8def78fa
Validity
Not Before: Jul 23 23:00:36 2026 GMT
Not After : Jul 24 23:00:36 2026 GMT
Subject: CN=ecf43a24505ed25eb21eaec2d1104ce9171422c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:a3:40:ab:9d:63:57:3d:37:bd:e9:05:8f:
86:21:5c:ef:59:15:ff:24:54:49:5a:df:a1:e9:d2:
6e:d7:49:0b:c7:cc:45:53:05:93:62:e8:a1:59:97:
c5:bf:e9:b4:2d:d1:75:e2:91:af:eb:ab:15:c4:d6:
7d:b0:72:2e:02:81:f6:bf:67:50:83:06:ce:2a:73:
12:e9:9b:5b:0d:48:8c:c9:b5:db:24:f2:2e:98:74:
0c:e9:2a:47:8c:4a:f5:96:49:cf:45:32:f9:4e:ce:
03:50:8a:57:50:53:52:f4:15:db:07:3a:12:14:61:
35:0f:86:61:55:ae:e7:9d:44:15:fc:68:ac:a5:85:
bf:bc:26:1e:cc:eb:52:dd:35:e4:52:c2:c2:27:e7:
21:69:9f:5a:12:ca:05:a0:b1:65:4b:fc:d4:8f:24:
3d:92:e2:3a:87:65:6d:22:27:3b:bd:cf:51:13:97:
97:4c:87:a8:b0:1e:17:f0:14:9a:6d:d6:17:30:87:
86:c2:ce:17:d6:01:12:98:af:3c:85:c8:14:b3:a5:
e6:44:22:08:e2:9f:49:97:d3:19:0a:f8:d2:e7:45:
e8:ef:4d:6b:13:0c:58:40:a6:5d:2a:ec:e4:a1:4a:
c8:ad:b4:14:2b:94:8f:0d:78:aa:4b:3f:0b:4e:73:
c6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F4:3A:24:50:5E:D2:5E:B2:1E:AE:C2:D1:10:4C:E9:17:14:22:C7
X509v3 Authority Key Identifier:
keyid:73:19:77:0F:FB:48:7E:39:10:DD:44:D9:DB:0A:53:4D:8D:EF:78:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7f:4c:24:0a:10:e5:6e:6f:c2:67:2e:11:52:66:8c:2d:8e:
86:63:b4:1e:e0:94:04:6c:1a:fe:c8:84:da:6f:30:c9:d2:8c:
c9:09:64:45:55:11:70:40:87:de:aa:0b:ae:4b:b4:2b:5a:0f:
b2:09:b8:31:32:28:3b:24:83:a3:ce:8f:21:99:41:08:d8:0f:
94:7c:44:79:6c:65:eb:e7:0e:ef:2e:ad:3b:47:09:69:66:ff:
ba:4c:21:1e:ed:67:65:e3:5d:45:20:51:06:0a:f4:57:fc:27:
ba:d8:31:97:ea:8c:20:d7:47:60:b0:9a:d4:de:25:cc:1e:5e:
5e:33:1f:08:21:06:a6:93:29:38:92:1f:ad:aa:5b:f1:47:96:
23:b4:ec:3f:8b:a8:45:49:56:42:ab:63:b1:4a:c1:ca:e7:fa:
b1:e3:23:39:b8:69:1c:22:4e:a0:33:68:26:ac:3a:0c:36:7f:
8d:13:4a:da:2b:f1:0f:91:b2:92:81:ce:74:2c:fd:e6:ec:f1:
87:5c:90:7e:8e:45:47:54:a6:49:a9:5e:ba:06:14:f8:ca:ed:
eb:0f:4b:ed:79:ed:0a:08:db:36:bc:68:d8:77:22:cc:28:c1:
74:1e:42:1a:dd:7b:32:eb:3f:a7:ea:b7:d7:3b:3e:63:ce:5f:
f4:e4:b6:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNZg66G4qNO4gn7vmuM3OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMTk3NzBmZmI0ODdlMzkxMGRkNDRkOWRiMGE1MzRkOGRl
Zjc4ZmEwHhcNMjYwNzIzMjMwMDM2WhcNMjYwNzI0MjMwMDM2WjAzMTEwLwYDVQQD
EyhlY2Y0M2EyNDUwNWVkMjVlYjIxZWFlYzJkMTEwNGNlOTE3MTQyMmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXSjQKudY1c9N73pBY+GIVzvWRX/
JFRJWt+h6dJu10kLx8xFUwWTYuihWZfFv+m0LdF14pGv66sVxNZ9sHIuAoH2v2dQ
gwbOKnMS6ZtbDUiMybXbJPIumHQM6SpHjEr1lknPRTL5Ts4DUIpXUFNS9BXbBzoS
FGE1D4ZhVa7nnUQV/GispYW/vCYezOtS3TXkUsLCJ+chaZ9aEsoFoLFlS/zUjyQ9
kuI6h2VtIic7vc9RE5eXTIeosB4X8BSabdYXMIeGws4X1gESmK88hcgUs6XmRCII
4p9Jl9MZCvjS50Xo701rEwxYQKZdKuzkoUrIrbQUK5SPDXiqSz8LTnPGEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOz0OiRQXtJesh6uwtEQTOkXFCLHMB8GA1UdIwQY
MBaAFHMZdw/7SH45EN1E2dsKU02N73j6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3hsM0RfdElmamtRM1VUWjJ3cFRUWTN2ZVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81OGM5YTAtZmZjZi00MGI4LTk3YmMt
ZWYwYTdjMTUwNzE2LzEvY3hsM0RfdElmamtRM1VUWjJ3cFRUWTN2ZVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi81OGM5YTAtZmZjZi00MGI4LTk3YmMtZWYwYTdjMTUwNzE2
LzEvY3hsM0RfdElmamtRM1VUWjJ3cFRUWTN2ZVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADX9MJAoQ
5W5vwmcuEVJmjC2OhmO0HuCUBGwa/siE2m8wydKMyQlkRVURcECH3qoLrku0K1oP
sgm4MTIoOySDo86PIZlBCNgPlHxEeWxl6+cO7y6tO0cJaWb/ukwhHu1nZeNdRSBR
Bgr0V/wnutgxl+qMINdHYLCa1N4lzB5eXjMfCCEGppMpOJIfrapb8UeWI7TsP4uo
RUlWQqtjsUrByuf6seMjObhpHCJOoDNoJqw6DDZ/jRNK2ivxD5GykoHOdCz95uzx
h1yQfo5FR1SmSaleugYU+Mrt6w9L7XntCgjbNrxo2HcizCjBdB5CGt17Mus/p+q3
1zs+Y85f9OS2SA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:29 2026 by rpki-client