Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
File: Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json)
Hash identifier: W4m2jhD4wNxf4kOx6k6fUtbl5X09pfkdlgIn3GYhZLA=
Subject key identifier: 95:FA:58:96:89:F4:F9:0F:13:98:2E:AE:36:31:91:78:2F:D8:1B:E4
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 01A0C47C123832924E46CA177203C63D5277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
Manifest number: 1A7B
Signing time: Mon 21 Sep 2026 15:01:00 +0000
Manifest this update: Mon 21 Sep 2026 15:01:00 +0000
Manifest next update: Tue 22 Sep 2026 15:01:00 +0000
Files and hashes: 1: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: EBpcIkYfpEgtsGQ7HLlr+s8Bb0zCrc/e4A44klnpFk8=)
2: GPIsYlil8kPkRS6gEM2NHsqbCFY.roa (hash: kvkFMQZNWkoCHYm6i5KcWUr0FuuwyQMeHon9wF+Il04=)
3: hsTKNuFtecu81R43BCP7v63FtKE.roa (hash: Jfq06SGiKWbDyYONhWT4ALN3kqL199bV3kH8pBzjomI=)
4: sJSAOEoKH3yqMibmQkkicbcwvd4.roa (hash: 3WriKsxAWFbvJqa+g1N1RIzhXWZvpso2ZA3Pg5F32hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:12:38:32:92:4e:46:ca:17:72:03:c6:3d:52:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Sep 21 15:01:00 2026 GMT
Not After : Sep 22 15:01:00 2026 GMT
Subject: CN=95fa589689f4f90f13982eae363191782fd81be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8f:c3:3d:ab:a7:45:b5:55:16:b7:c7:34:ac:
35:6a:52:89:f8:85:32:ef:f0:d5:fb:98:a6:4c:4c:
68:cf:b9:ab:85:36:fc:25:68:d2:66:76:3f:ff:1f:
a5:1a:62:9e:05:ed:45:f1:2e:d7:bd:1a:85:ad:01:
17:85:2d:0e:a0:11:8c:34:c9:7a:9a:22:92:d4:47:
dc:9b:c6:72:3a:3f:0a:14:98:59:6e:ab:3e:1f:b8:
8e:b7:4a:1b:33:63:80:12:8a:02:b8:b4:8c:d9:6c:
ac:23:f0:7a:78:51:2d:e1:62:8e:b1:9a:25:17:72:
60:34:c6:8f:cb:aa:aa:16:36:13:00:bb:1b:fc:2c:
0d:15:57:62:e4:cb:bc:33:05:ab:8f:70:b6:44:94:
ba:b1:47:3a:c9:b8:2e:1e:76:10:22:de:5d:9f:a0:
04:17:c0:7d:86:3d:92:5f:84:2d:6d:9e:c1:e8:5a:
23:c8:2c:04:a4:3e:6a:66:89:4d:5e:4d:a4:9b:27:
83:6d:0a:6f:b6:42:3e:63:57:95:63:b4:ff:89:4a:
88:df:3e:28:b7:3e:d2:b6:56:9a:b1:26:ff:49:f0:
45:81:5e:ce:98:1d:e9:19:18:92:fc:43:5a:68:1d:
4a:84:1d:ac:19:bb:7f:ee:66:20:5e:4c:44:3e:5d:
71:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FA:58:96:89:F4:F9:0F:13:98:2E:AE:36:31:91:78:2F:D8:1B:E4
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:69:33:7d:81:a1:54:6f:07:90:51:70:80:34:d9:29:f0:17:
ce:8d:19:28:da:fb:17:55:c6:8c:61:5a:ce:bd:d1:f2:8b:dd:
e1:fe:fb:04:2f:cd:d4:5f:86:f8:d7:84:e2:c5:83:90:c6:ac:
14:b0:de:f8:96:c9:27:dc:27:ce:6d:84:46:4f:03:08:84:45:
30:2a:80:41:c5:11:bd:d9:61:3f:14:ca:61:d9:7e:5e:3d:6b:
c4:3c:bd:e2:b6:72:a0:a8:21:83:e7:42:75:b9:26:e0:9a:c1:
9d:f9:cf:9a:e8:99:6b:02:8f:7d:00:33:2d:2b:5f:7e:a0:e7:
fd:fe:93:db:52:77:ff:8f:1b:96:cf:9e:02:e2:9a:db:8b:54:
3f:b7:86:d9:eb:20:43:17:82:8d:78:86:0b:3e:a9:ac:2b:7b:
22:de:2a:9b:df:5a:1c:ff:2a:48:fb:be:d4:35:70:82:c4:47:
e5:9b:96:d3:61:09:57:db:96:f7:2d:cb:cf:b6:e2:6d:4d:6a:
2d:fa:d9:0a:55:56:99:64:59:9c:cf:cb:9a:e3:2a:24:80:42:
5c:dd:f5:63:ec:cb:93:fb:d6:e8:92:36:ce:8c:95:2d:b1:2e:
5e:29:5f:23:18:54:00:04:ef:51:c6:fd:f7:63:f0:7c:38:f3:
20:c4:9d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:11:07 2026 by rpki-client