Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier: DpMwx2fHqrtG/Z9eVRWIT3h8i/dQURi05x+iHF8JHQ0=
Subject key identifier: 0F:35:59:4B:10:6D:8E:C4:7B:79:84:48:88:A4:BB:00:FF:4A:CB:A6
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 019EC1488089FE73FA2C8DE2D2AABD46BC2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number: 138C
Signing time: Sat 13 Jun 2026 14:00:14 +0000
Manifest this update: Sat 13 Jun 2026 14:00:14 +0000
Manifest next update: Sun 14 Jun 2026 14:00:14 +0000
Files and hashes: 1: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: gKfxbhlDX1C1FRKQoLwBqWnnBDb12U7cIKjTtxnjKj0=)
2: gLcTJvZ-bTiZKez7VJlhXddzj5I.roa (hash: njLU3hmp1ice1mv35YuU3QwtIJDPeTW7I2pUB3WU76k=)
3: iGV0CoyrITzjkKDaw4INbKqkpdE.roa (hash: S/9miWwjqyjrqWzqhVaykBqXwqlsa3o7EOP2wtoRCcU=)
4: t8eIgMClHX3oL8Kz7kDeYL0J8-I.roa (hash: jcUfNtNFO2Y7xEuTx/9w6iJn9BhR83TnoBAGY+TGric=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:80:89:fe:73:fa:2c:8d:e2:d2:aa:bd:46:bc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Jun 13 14:00:14 2026 GMT
Not After : Jun 14 14:00:14 2026 GMT
Subject: CN=0f35594b106d8ec47b79844888a4bb00ff4acba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:17:56:39:bd:70:d4:e3:46:d3:c2:57:b6:
5a:f1:ee:de:8d:95:dd:fe:df:a3:d4:2d:d6:01:05:
65:1c:d4:80:b0:81:ab:8a:05:38:e1:99:38:fb:0d:
d7:3c:74:48:06:09:40:1f:87:23:f2:e2:7a:85:fd:
a6:8e:68:c4:5b:8b:ba:6c:2a:7e:1a:f8:c0:e6:44:
cf:b0:64:30:e8:c9:c3:7e:03:41:3e:f1:cf:de:1d:
c3:4d:70:33:a4:77:b6:c4:85:d6:64:87:7e:69:bd:
5e:d2:7c:69:c9:58:e6:f0:b6:ee:82:53:63:81:43:
1b:b3:5a:b3:7e:cc:32:bf:3a:17:40:01:3e:f7:f9:
81:47:b0:af:3e:b5:01:b7:f0:71:6e:78:c0:22:e8:
91:90:ea:58:c2:ff:23:de:6a:89:96:82:47:93:a5:
6a:70:36:23:93:a6:c1:62:32:79:67:c4:51:50:23:
60:7a:a9:7f:20:f8:40:e4:f0:70:29:6c:64:2e:44:
9e:54:26:68:e6:40:2b:ec:db:2b:b0:57:f3:f1:9f:
52:87:a4:ff:75:48:f3:13:cf:7a:86:93:90:26:15:
6d:c3:b5:04:9e:e2:cd:b5:ff:40:81:9d:c7:ad:34:
98:ec:e5:b9:e2:96:b7:c2:64:58:c2:80:54:51:23:
c4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:35:59:4B:10:6D:8E:C4:7B:79:84:48:88:A4:BB:00:FF:4A:CB:A6
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:94:0f:19:50:c1:45:ad:df:81:ea:4a:ca:b8:28:a0:85:76:
81:5a:88:ed:bc:ca:a3:bc:15:2c:47:cc:8c:3e:5f:20:7b:31:
e3:31:d7:2a:0e:0f:a8:6f:2f:35:30:73:2c:4d:d7:fb:db:97:
ee:4f:ce:15:ba:6e:e7:25:53:99:71:18:17:91:68:b3:cc:e5:
94:9f:90:13:59:f6:af:a5:31:c5:99:e9:a0:5d:02:e7:e5:b5:
32:c8:a0:5c:41:6b:06:49:43:d5:d1:95:d0:26:36:bd:35:19:
af:33:ee:ca:18:1b:bb:5e:eb:f8:1e:51:29:e8:92:d1:bf:82:
bc:a3:96:78:dd:2a:00:1f:13:3d:80:89:ea:45:90:57:17:d7:
15:a6:bd:8a:e6:90:c1:86:32:4b:48:e0:9f:28:f8:b0:43:c8:
ef:5b:18:59:47:8f:f8:27:29:58:e5:89:79:f9:33:0b:e6:44:
8a:ac:37:d7:c1:d0:7a:1b:0b:22:a7:20:c5:ec:17:d3:a9:29:
8b:49:9e:bc:19:46:ec:e3:b1:03:d9:4e:a8:52:83:26:3a:45:
92:6a:64:cd:6e:39:a7:fe:ea:52:2f:6b:62:e1:98:52:55:b0:
19:04:6f:a9:68:26:4e:15:f7:6c:30:79:c8:59:9a:9c:54:b0:
85:84:ad:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:31:36 2026 by rpki-client