Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
File: cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft (raw, json)
Hash identifier: /Un7llrAZzd1nZSrgZ4PWcMPlVPSQKwinrcwJ200Z9o=
Subject key identifier: F1:26:EF:42:B6:E6:5F:76:4C:09:AF:B4:43:EC:3C:B7:7D:98:06:47
Authority key identifier: 73:19:77:0F:FB:48:7E:39:10:DD:44:D9:DB:0A:53:4D:8D:EF:78:FA
Certificate issuer: /CN=7319770ffb487e3910dd44d9db0a534d8def78fa
Certificate serial: 01A0D45D668C9791592432C83BE7E907B961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
Manifest number: 0131
Signing time: Thu 24 Sep 2026 17:01:25 +0000
Manifest this update: Thu 24 Sep 2026 17:01:25 +0000
Manifest next update: Fri 25 Sep 2026 17:01:25 +0000
Files and hashes: 1: J-ZrGngsinzzxKhty_0eOSBvSyE.roa (hash: yEjmBQt7jbBwQjbfz6E3LLZh+zLBv/2IV7cQ/+10/as=)
2: cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl (hash: e2b/CiVC7WQQ4kDtPJtAgIAT688Dk5RFr0PqKbbk9XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:66:8c:97:91:59:24:32:c8:3b:e7:e9:07:b9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319770ffb487e3910dd44d9db0a534d8def78fa
Validity
Not Before: Sep 24 17:01:25 2026 GMT
Not After : Sep 25 17:01:25 2026 GMT
Subject: CN=f126ef42b6e65f764c09afb443ec3cb77d980647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:09:90:d2:23:3d:eb:95:b2:c1:4a:48:c4:
f6:73:a7:18:5e:50:db:69:81:1d:03:60:1f:9e:f9:
b7:bc:ac:b5:01:ce:ef:36:71:81:c9:17:2a:cd:7f:
54:4e:78:ad:82:7b:8c:ec:2b:b7:65:b2:b8:74:97:
db:ab:84:83:ce:a0:48:0c:ed:2e:46:8f:f5:a2:29:
b9:49:9d:f1:a3:17:a1:92:47:b2:e5:c8:b5:cb:f5:
06:6e:6b:cb:a8:90:a1:9c:e3:50:9f:f8:f6:08:e7:
b5:95:bf:0a:10:08:3f:45:54:b1:42:0a:d0:9f:45:
69:f2:7f:cf:d5:e4:e1:9b:6b:e3:de:e0:14:d1:17:
03:8b:88:0a:43:44:6b:79:d9:66:40:8d:bf:5e:77:
f2:32:d3:d6:35:58:9e:11:83:e6:ad:85:00:cc:71:
6d:28:b9:e7:53:5a:e0:26:5d:00:57:3d:bf:2f:2e:
c5:ab:c0:5c:9c:87:b1:f7:30:65:d8:ec:09:bf:b4:
7a:41:2a:70:d8:af:29:fd:b7:7c:fd:a1:51:bb:6d:
c7:75:72:7a:40:b8:ce:00:72:70:83:cc:05:7c:c3:
41:00:8e:57:50:65:ad:52:36:99:63:72:25:78:13:
3f:79:4b:41:3b:0b:c3:4e:33:5c:70:49:4a:0f:7d:
e5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:26:EF:42:B6:E6:5F:76:4C:09:AF:B4:43:EC:3C:B7:7D:98:06:47
X509v3 Authority Key Identifier:
keyid:73:19:77:0F:FB:48:7E:39:10:DD:44:D9:DB:0A:53:4D:8D:EF:78:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:49:4b:d0:fc:a7:34:a6:25:71:6f:b7:7c:62:7b:55:54:75:
7e:c5:7b:23:4f:c8:37:85:0d:13:bf:38:21:9a:a4:fc:90:43:
53:8d:57:8d:a4:83:51:4b:f8:cf:d5:ae:17:16:9b:9f:bb:a1:
69:42:c7:f8:d4:e4:f5:19:38:55:b8:11:61:2a:62:6f:c5:01:
4d:00:ad:40:8f:48:de:63:5f:3f:21:ce:e9:82:d8:93:13:10:
b2:82:02:46:a7:e9:e5:b6:40:e5:fb:fb:2f:19:ab:72:f1:0d:
d7:b9:b3:59:35:1a:69:5e:40:5d:37:48:a1:b6:26:0e:3f:69:
93:3c:84:52:af:35:eb:d3:98:b0:c9:ba:d5:ae:c5:77:ea:88:
76:b0:9c:69:d4:0d:4d:77:c3:9c:63:1e:cc:26:99:a7:3f:49:
82:d4:b0:96:60:f6:7c:71:27:2c:f0:53:04:26:27:6a:09:6c:
ee:8d:ed:f8:74:01:32:dc:44:4a:4a:15:b9:98:9b:33:7d:8f:
50:aa:d0:9d:90:ec:49:66:46:f3:7b:aa:ea:40:ae:3e:7f:84:
f3:8d:68:7c:0e:2e:fd:d1:e5:7f:b1:e9:65:eb:dd:49:e4:eb:
29:3e:3d:d2:97:ab:4c:63:f2:66:d0:60:73:d6:55:1f:68:4e:
7b:1f:c9:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUXWaMl5FZJDLIO+fpB7lhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMTk3NzBmZmI0ODdlMzkxMGRkNDRkOWRiMGE1MzRkOGRl
Zjc4ZmEwHhcNMjYwOTI0MTcwMTI1WhcNMjYwOTI1MTcwMTI1WjAzMTEwLwYDVQQD
EyhmMTI2ZWY0MmI2ZTY1Zjc2NGMwOWFmYjQ0M2VjM2NiNzdkOTgwNjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWQJkNIjPeuVssFKSMT2c6cYXlDb
aYEdA2Afnvm3vKy1Ac7vNnGByRcqzX9UTnitgnuM7Cu3ZbK4dJfbq4SDzqBIDO0u
Ro/1oim5SZ3xoxehkkey5ci1y/UGbmvLqJChnONQn/j2COe1lb8KEAg/RVSxQgrQ
n0Vp8n/P1eThm2vj3uAU0RcDi4gKQ0RredlmQI2/XnfyMtPWNVieEYPmrYUAzHFt
KLnnU1rgJl0AVz2/Ly7Fq8BcnIex9zBl2OwJv7R6QSpw2K8p/bd8/aFRu23HdXJ6
QLjOAHJwg8wFfMNBAI5XUGWtUjaZY3IleBM/eUtBOwvDTjNccElKD33lnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEm70K25l92TAmvtEPsPLd9mAZHMB8GA1UdIwQY
MBaAFHMZdw/7SH45EN1E2dsKU02N73j6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3hsM0RfdElmamtRM1VUWjJ3cFRUWTN2ZVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81OGM5YTAtZmZjZi00MGI4LTk3YmMt
ZWYwYTdjMTUwNzE2LzEvY3hsM0RfdElmamtRM1VUWjJ3cFRUWTN2ZVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi81OGM5YTAtZmZjZi00MGI4LTk3YmMtZWYwYTdjMTUwNzE2
LzEvY3hsM0RfdElmamtRM1VUWjJ3cFRUWTN2ZVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv0lL0Pyn
NKYlcW+3fGJ7VVR1fsV7I0/IN4UNE784IZqk/JBDU41XjaSDUUv4z9WuFxabn7uh
aULH+NTk9Rk4VbgRYSpib8UBTQCtQI9I3mNfPyHO6YLYkxMQsoICRqfp5bZA5fv7
LxmrcvEN17mzWTUaaV5AXTdIobYmDj9pkzyEUq8169OYsMm61a7Fd+qIdrCcadQN
TXfDnGMezCaZpz9JgtSwlmD2fHEnLPBTBCYnagls7o3t+HQBMtxESkoVuZibM32P
UKrQnZDsSWZG83uq6kCuPn+E841ofA4u/dHlf7HpZevdSeTrKT490perTGPyZtBg
c9ZVH2hOex/Jwg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:04:34 2026 by rpki-client