Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier: 8IUHg0TMkU6tfmR7KTz0CGTH1YgdUw4hg94mzRMtAuI=
Subject key identifier: C5:4D:C9:F2:5D:EE:BD:2C:27:A4:BF:23:04:FF:A7:86:AF:E5:A1:5D
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 019CAC4709397C9313FB1C7E3C3BAB5108A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number: 1278
Signing time: Mon 02 Mar 2026 02:01:02 +0000
Manifest this update: Mon 02 Mar 2026 02:01:02 +0000
Manifest next update: Tue 03 Mar 2026 02:01:02 +0000
Files and hashes: 1: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: UnmCRLBJDoDjvgrmgVzyBpQOnzAVmuqTuPSULd+Fc0M=)
2: gLcTJvZ-bTiZKez7VJlhXddzj5I.roa (hash: njLU3hmp1ice1mv35YuU3QwtIJDPeTW7I2pUB3WU76k=)
3: iGV0CoyrITzjkKDaw4INbKqkpdE.roa (hash: S/9miWwjqyjrqWzqhVaykBqXwqlsa3o7EOP2wtoRCcU=)
4: t8eIgMClHX3oL8Kz7kDeYL0J8-I.roa (hash: jcUfNtNFO2Y7xEuTx/9w6iJn9BhR83TnoBAGY+TGric=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:09:39:7c:93:13:fb:1c:7e:3c:3b:ab:51:08:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Mar 2 02:01:02 2026 GMT
Not After : Mar 3 02:01:02 2026 GMT
Subject: CN=c54dc9f25deebd2c27a4bf2304ffa786afe5a15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:22:7f:ec:7b:cb:51:4e:a5:29:85:8a:bd:4b:
e9:d1:9e:81:c6:f7:7d:5e:48:5f:a7:80:1d:22:a9:
e6:fc:c5:b7:6c:17:bb:81:e3:52:8a:da:5a:8b:5f:
00:43:cc:5f:c6:d6:f1:a7:88:52:40:0c:28:75:8a:
00:37:12:67:ae:36:9c:9b:d3:d7:74:04:a3:a9:51:
40:42:a6:ad:a2:d6:9b:f7:89:79:93:c3:cb:f5:0f:
43:ae:e0:27:dd:75:50:f6:78:63:4e:a2:09:43:f4:
b2:4f:6d:b3:e1:bb:25:51:02:11:f4:5a:a1:0d:83:
e9:69:e3:ca:f2:c6:d6:d0:42:58:17:07:9d:1f:b3:
b4:0d:69:e1:5c:b8:f1:0a:67:88:17:8d:4a:d1:ba:
a4:08:f1:cd:db:94:f7:84:2c:e3:a6:c2:e9:12:67:
b2:83:65:8f:b3:f9:c1:c1:ea:55:c2:18:16:fb:4b:
a0:d8:02:c4:87:13:94:7e:43:1e:91:1d:8b:2e:50:
e0:2c:a8:14:4a:35:13:8e:71:62:e3:73:22:d0:11:
67:6d:da:72:46:aa:b2:79:7e:1e:dd:1b:db:5f:8b:
90:eb:f0:fa:cb:aa:bd:e4:3b:d8:63:5a:a2:6b:47:
ab:23:46:1f:fb:7e:09:e4:ab:1b:4a:15:ba:da:89:
0b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4D:C9:F2:5D:EE:BD:2C:27:A4:BF:23:04:FF:A7:86:AF:E5:A1:5D
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:43:54:a1:42:19:d7:04:f5:d7:44:da:c0:65:d1:c8:d1:de:
09:51:a9:fe:97:e8:8d:7b:8a:3f:cd:0f:2e:fb:17:1e:e3:c9:
69:06:89:a7:31:aa:80:ee:29:c3:9d:b7:75:83:ee:58:63:c3:
0a:cf:2b:57:3d:59:d5:a5:6d:eb:c0:2d:75:65:a2:1f:97:b8:
50:0a:4e:c5:32:b7:46:97:1a:2f:0b:cd:6e:97:e3:78:b7:b8:
4f:f8:91:c3:a8:cb:c8:af:ef:70:3d:55:c1:47:26:70:a6:88:
84:bc:98:01:cd:05:bf:7f:ec:75:2a:da:f2:2d:74:1f:f2:c2:
b6:74:4f:3b:65:db:94:e2:97:f7:d6:f5:83:a3:14:4e:8c:5e:
c3:32:24:03:73:56:7d:0e:25:5b:b9:79:61:8e:a0:f5:07:32:
cf:f9:21:df:44:b7:68:25:40:eb:bb:cd:05:5a:fc:e6:36:d0:
71:ce:c2:4b:a1:e9:32:e1:c1:3f:fd:c8:1d:f0:9a:be:3b:f5:
4d:94:37:c4:15:2e:01:bc:5c:5d:5d:33:d4:27:e3:63:94:c8:
1b:ba:81:c8:4b:f6:7e:fb:be:db:8e:70:07:6e:51:b6:27:22:
fa:0e:ab:f8:a0:8a:69:2a:31:07:e4:e9:3c:f2:c6:01:35:d0:
90:2a:18:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:23:32 2026 by rpki-client