Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
File: cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft (raw, json)
Hash identifier: m5lpjXY9kb0jJHCHgRGPKsWAcgLx3tasiY5ECPxpx4g=
Subject key identifier: E8:7F:98:BC:6D:31:6E:D4:42:E0:F3:96:65:75:2A:1D:D1:42:7A:71
Authority key identifier: 73:19:77:0F:FB:48:7E:39:10:DD:44:D9:DB:0A:53:4D:8D:EF:78:FA
Certificate issuer: /CN=7319770ffb487e3910dd44d9db0a534d8def78fa
Certificate serial: 01A1DCEFF33BEC499819E3EEC3BA310024AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
Manifest number: 01BA
Signing time: Sun 15 Nov 2026 02:01:15 +0000
Manifest this update: Sun 15 Nov 2026 02:01:15 +0000
Manifest next update: Mon 16 Nov 2026 02:01:15 +0000
Files and hashes: 1: J-ZrGngsinzzxKhty_0eOSBvSyE.roa (hash: yEjmBQt7jbBwQjbfz6E3LLZh+zLBv/2IV7cQ/+10/as=)
2: cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl (hash: 23jvpXrUY85fpzziHYbFVsJeFZRHEqF413LlQFyU8Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:ef:f3:3b:ec:49:98:19:e3:ee:c3:ba:31:00:24:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319770ffb487e3910dd44d9db0a534d8def78fa
Validity
Not Before: Nov 15 02:01:15 2026 GMT
Not After : Nov 16 02:01:15 2026 GMT
Subject: CN=e87f98bc6d316ed442e0f39665752a1dd1427a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:05:f3:4e:49:a6:15:3d:d4:b6:ba:00:d8:
ad:51:59:de:80:f7:c2:aa:fc:5d:46:2a:87:c8:72:
89:8d:53:ee:38:d9:9d:fb:08:45:78:7e:91:43:45:
f4:8c:4c:90:af:21:89:2a:9c:76:18:ad:a4:f6:91:
5c:f8:2d:2e:6c:2a:20:6e:e7:a5:f4:e4:c5:8a:36:
27:4b:b5:d6:e8:fb:91:c7:9d:50:e2:5f:1b:ab:36:
c3:78:4e:3b:01:e3:06:ba:8a:bc:6f:2e:8b:f0:91:
14:d5:38:d2:51:5c:bd:4c:92:82:ab:7c:24:53:59:
6c:bb:72:3b:bf:0e:a5:cf:70:9e:7a:6f:75:28:51:
1c:06:4b:29:cf:a1:c1:5c:71:02:e3:f6:ba:ab:e4:
16:d8:56:fa:1a:2d:42:ab:e9:aa:c7:d2:98:db:4b:
17:66:e1:ed:0f:8f:96:46:f0:fa:67:83:42:d7:ea:
88:cd:79:0a:29:ec:7d:42:d5:1d:bc:41:5d:65:00:
ab:3b:63:14:10:53:c3:27:ff:b2:1a:25:c1:35:ca:
cf:dd:30:03:c8:68:38:5d:6e:82:3e:c5:53:b3:0f:
68:a9:94:88:7d:de:59:8a:bb:8e:dc:a6:61:b9:29:
16:7c:84:51:14:74:9b:12:95:7f:2d:07:a1:6f:99:
8d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7F:98:BC:6D:31:6E:D4:42:E0:F3:96:65:75:2A:1D:D1:42:7A:71
X509v3 Authority Key Identifier:
keyid:73:19:77:0F:FB:48:7E:39:10:DD:44:D9:DB:0A:53:4D:8D:EF:78:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:66:6e:7b:6a:d7:98:85:65:ab:c1:be:68:ca:d4:3d:e8:d4:
b4:99:91:fb:72:b6:20:f5:d2:c8:d9:52:3e:3d:97:98:91:1d:
a0:dd:60:f9:ea:9e:fc:a2:f2:d0:b0:41:f5:ca:e8:21:df:80:
65:78:1c:e8:50:67:d8:4a:8b:38:d6:e3:b1:6e:72:80:b1:e9:
2a:7c:50:85:04:d7:ab:41:b0:f7:af:08:8b:de:a7:44:b6:65:
06:5a:a3:d3:4b:78:d0:4c:77:29:5e:78:fa:5b:2b:9f:a5:c9:
32:5f:b4:ff:15:0b:db:8b:31:09:28:13:3d:12:21:47:9a:de:
ee:e1:27:92:0d:7f:f6:16:9d:55:f5:4a:30:6a:82:8c:ec:92:
c0:dc:60:e7:2f:d1:54:a6:a0:91:91:26:1e:61:32:f1:ca:84:
21:a6:79:81:c9:c6:57:55:2e:30:dc:71:2c:46:ec:9b:0a:15:
18:ed:08:cf:32:ee:e2:02:48:02:c0:8c:78:72:f8:14:50:4a:
c4:22:b8:b8:f0:d8:ae:20:97:c8:2b:4d:6f:1e:a6:e0:57:c1:
d7:de:bf:db:ca:28:0e:a6:ff:97:12:d2:69:d6:17:8b:db:b6:
71:4a:3c:07:eb:61:b5:98:cd:34:4e:92:42:d9:3d:b3:46:97:
d4:6a:cb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:54:42 2026 by rpki-client