
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier: zHvYn/cKEMQKUOyOu8r3IKwZwfNEb0PvBJG5YtNlQfk=
Subject key identifier: 7E:4C:7D:B1:8D:0F:EE:48:B1:10:6F:48:3F:42:D7:6E:0F:66:01:C9
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 019FAAF53EF43F9AB19EDADDF99F22B5D621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number: 1405
Signing time: Tue 28 Jul 2026 23:00:26 +0000
Manifest this update: Tue 28 Jul 2026 23:00:26 +0000
Manifest next update: Wed 29 Jul 2026 23:00:26 +0000
Files and hashes: 1: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: FslQLNLJwyaO+YK8UY7m2pibqUbrHnDcxIgQ7rMTVIE=)
2: gLcTJvZ-bTiZKez7VJlhXddzj5I.roa (hash: njLU3hmp1ice1mv35YuU3QwtIJDPeTW7I2pUB3WU76k=)
3: iGV0CoyrITzjkKDaw4INbKqkpdE.roa (hash: S/9miWwjqyjrqWzqhVaykBqXwqlsa3o7EOP2wtoRCcU=)
4: t8eIgMClHX3oL8Kz7kDeYL0J8-I.roa (hash: jcUfNtNFO2Y7xEuTx/9w6iJn9BhR83TnoBAGY+TGric=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:3e:f4:3f:9a:b1:9e:da:dd:f9:9f:22:b5:d6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Jul 28 23:00:26 2026 GMT
Not After : Jul 29 23:00:26 2026 GMT
Subject: CN=7e4c7db18d0fee48b1106f483f42d76e0f6601c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:82:d2:41:2e:f0:57:c5:26:6c:eb:e8:41:39:
38:0e:ca:dd:b4:3d:08:31:a2:b8:67:a9:cd:64:c4:
a0:75:85:82:f4:8f:55:d3:9f:6f:02:65:1e:5b:c6:
0a:fb:09:ce:f4:fe:4d:1d:ee:ab:92:ae:b2:ff:64:
dc:4d:0c:ea:f8:e5:cd:11:9e:4a:b1:ab:a8:3b:fe:
da:1c:73:6f:e7:94:17:b5:e9:eb:a7:20:59:a4:a7:
3b:1d:66:41:a4:89:83:a1:0d:d2:a6:83:6f:6c:bd:
4b:74:c7:1c:18:01:09:99:cb:18:d6:70:d9:3d:a4:
46:b8:fc:e6:9e:78:b6:cd:f7:8a:9a:ed:d4:3a:47:
a2:55:66:ee:fb:5f:de:4e:88:31:6d:29:03:11:08:
12:d6:3a:5c:07:f2:0e:2f:a0:50:30:13:37:ee:80:
89:d6:a5:0c:ae:12:e6:c3:04:f0:cd:bc:90:8b:92:
57:84:3e:02:7a:d5:36:41:bb:58:4d:fc:6a:aa:48:
ab:de:45:85:16:f8:e0:e4:1a:50:09:ed:83:fa:da:
02:14:a9:d2:01:e8:d7:53:b7:c9:51:03:d5:be:68:
1b:9a:b4:be:5c:2b:33:e9:e8:dc:57:b8:60:41:6f:
8e:ff:e7:0b:ac:98:f4:09:03:80:0f:26:5d:f6:d4:
82:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4C:7D:B1:8D:0F:EE:48:B1:10:6F:48:3F:42:D7:6E:0F:66:01:C9
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:68:3c:ac:de:1d:4c:dc:02:31:a3:3b:df:51:ea:ac:b2:d1:
b0:6f:c4:3e:a9:80:a0:df:77:3c:2e:d4:9e:76:9e:46:e1:49:
66:0c:99:35:c8:bb:cd:7b:e7:7c:d5:a5:7f:df:7d:b2:8b:ec:
3d:8e:ea:28:17:5f:7e:4e:54:92:c3:78:c0:e8:d8:a6:0a:3d:
34:7f:df:26:de:39:92:0a:bd:ee:9f:18:72:fd:f4:85:32:f3:
7d:92:f2:ab:b6:c6:d5:08:d6:d3:26:17:48:11:61:99:50:2e:
55:33:f7:a1:b8:3d:47:0e:bc:8b:a7:e0:b6:76:72:9d:c2:e0:
60:6b:47:e5:e6:f5:49:3b:e0:2c:75:35:38:44:1b:49:57:7f:
cb:f1:fd:00:2b:72:39:1b:d1:29:05:2a:9a:27:fa:76:57:4c:
cd:6c:37:0c:d0:8e:a4:4a:4a:fc:c8:d9:b7:1a:b7:ae:1a:1c:
b8:8c:6d:5a:f2:6c:cd:07:20:10:da:83:4d:2d:b1:00:66:86:
5a:a5:d6:ce:2d:2f:fc:f8:16:cf:17:6a:94:75:e2:96:04:d6:
89:2e:ed:74:e1:10:38:24:8b:dc:f9:91:a8:6b:7f:ff:1e:06:
a5:f9:e9:9e:12:82:80:59:a3:a8:2e:ab:3d:65:b9:08:a7:d1:
94:ce:1e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:41:00 2026 by rpki-client