Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
File: cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft (raw, json)
Hash identifier: X7LTFWHQzGyhF08itX3SLkg/nM/l3XRmWt2/2lJyzsI=
Subject key identifier: 3B:2E:9D:8D:80:BC:55:5A:5C:8C:80:AD:84:EA:DE:35:F6:42:3E:53
Authority key identifier: 73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
Certificate issuer: /CN=7316772efce2a133fb7f8720929d0560cef1db46
Certificate serial: 019D29CEA30FCF56C0C437A7326548755B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
Manifest number: 0692
Signing time: Thu 26 Mar 2026 11:01:41 +0000
Manifest this update: Thu 26 Mar 2026 11:01:41 +0000
Manifest next update: Fri 27 Mar 2026 11:01:41 +0000
Files and hashes: 1: W00kh9cFoXYEts6Z_wNoICvROmI.roa (hash: 6F92izfRGMl8gegm30l362lw0oFK4K1whATYCIM0f9A=)
2: cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl (hash: miNW0V5PSAkPuw9GLCY7i5azB9+zN1teppC8iy3n1Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:a3:0f:cf:56:c0:c4:37:a7:32:65:48:75:5b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7316772efce2a133fb7f8720929d0560cef1db46
Validity
Not Before: Mar 26 11:01:41 2026 GMT
Not After : Mar 27 11:01:41 2026 GMT
Subject: CN=3b2e9d8d80bc555a5c8c80ad84eade35f6423e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:0a:30:c4:65:07:db:86:37:96:9d:f2:99:d4:
f9:9e:84:ad:4c:29:7c:a1:af:ab:96:af:c5:04:dd:
43:b2:0f:65:52:3f:17:b6:c0:e6:86:8b:75:ac:fd:
1b:f2:26:7b:8c:8f:67:f6:64:9d:b7:9c:86:1b:c4:
fa:a6:50:31:4f:06:3a:21:5e:31:2a:a4:60:e8:48:
57:2c:77:da:e6:73:b8:15:c2:f8:2f:b8:fa:a1:a9:
4c:22:9f:63:cf:53:8b:c3:c4:ca:f1:84:f8:8f:c1:
f2:c2:4a:a8:4c:3b:b2:c3:94:8c:d6:94:90:6d:22:
cf:5d:32:9a:68:81:5f:3e:db:e7:6b:24:d6:ff:11:
17:d9:93:4c:c3:2f:4f:d2:72:24:e9:01:32:71:a2:
b3:f7:b1:51:86:b8:79:c8:18:7b:dd:9f:98:2a:e7:
ec:ec:96:5b:5a:a0:cb:91:a3:82:56:13:30:e7:b9:
e6:d0:b9:c4:be:68:b6:18:f7:8e:e3:97:d0:6f:ed:
cb:8d:5e:07:4a:3d:eb:3d:91:5f:97:39:bf:64:70:
f2:bf:9c:2f:5f:a8:22:05:33:e2:d7:2c:e5:a9:4e:
e4:f8:de:3a:8c:3c:8c:9a:76:49:b5:f0:da:03:99:
6e:d7:25:3d:70:9d:60:17:64:6f:f1:80:a4:bd:c4:
05:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2E:9D:8D:80:BC:55:5A:5C:8C:80:AD:84:EA:DE:35:F6:42:3E:53
X509v3 Authority Key Identifier:
keyid:73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f2:a6:10:a7:49:4b:2d:f7:32:f0:68:0a:05:c0:57:9a:be:
da:83:a7:30:b3:0f:5c:7d:d6:a6:9a:40:4c:8b:6c:e3:2c:f5:
92:50:96:af:5f:98:50:f2:0f:6d:36:80:96:91:6b:1b:e4:3a:
5a:4c:48:8e:a2:e6:8c:1c:b6:3d:14:39:38:22:89:8a:1c:be:
e2:67:e7:c5:9c:7a:74:9f:90:e7:00:e8:b6:6a:6d:5e:aa:e2:
11:00:ee:a6:8a:e9:68:31:06:f5:4a:e8:80:81:7e:85:3d:d5:
4f:07:cb:3e:af:a7:57:d6:a5:d4:10:70:03:79:29:54:20:07:
89:71:07:e0:69:f1:bc:20:d7:97:9c:80:ce:f3:03:55:71:7b:
94:db:91:9b:42:f6:b3:30:79:2a:df:bb:7b:66:5f:9e:ae:01:
f8:d1:4a:b5:bc:63:3a:95:7b:32:92:95:3b:ec:dd:7a:a4:83:
80:3f:b2:c5:18:0b:86:84:77:31:cb:6c:d7:24:2c:62:51:98:
44:78:9f:f0:d7:87:bc:14:a5:9d:24:1a:94:2e:56:09:93:4a:
c6:69:20:7c:7f:05:d5:a4:07:3b:0b:c8:bb:61:79:1e:71:48:
ea:93:28:ad:b8:17:cb:0b:4e:4f:94:1d:08:e9:16:09:5a:4b:
7a:20:c2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:57:53 2026 by rpki-client