Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier: 733LRCVbNin8q5AYGCKRcBDKmcVbwOc0tDsjeCWhEi0=
Subject key identifier: 0E:37:19:BA:C2:58:95:71:05:68:3A:1B:E3:32:9B:E0:C4:6D:54:08
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 019D99D06D43644F058135E559268F498E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number: 12F3
Signing time: Fri 17 Apr 2026 05:01:06 +0000
Manifest this update: Fri 17 Apr 2026 05:01:06 +0000
Manifest next update: Sat 18 Apr 2026 05:01:06 +0000
Files and hashes: 1: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: 7YjMnqMWgKuB7MlwahUZdBnH+fJqxju8+8D1eqgUmQM=)
2: gLcTJvZ-bTiZKez7VJlhXddzj5I.roa (hash: njLU3hmp1ice1mv35YuU3QwtIJDPeTW7I2pUB3WU76k=)
3: iGV0CoyrITzjkKDaw4INbKqkpdE.roa (hash: S/9miWwjqyjrqWzqhVaykBqXwqlsa3o7EOP2wtoRCcU=)
4: t8eIgMClHX3oL8Kz7kDeYL0J8-I.roa (hash: jcUfNtNFO2Y7xEuTx/9w6iJn9BhR83TnoBAGY+TGric=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:6d:43:64:4f:05:81:35:e5:59:26:8f:49:8e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Apr 17 05:01:06 2026 GMT
Not After : Apr 18 05:01:06 2026 GMT
Subject: CN=0e3719bac258957105683a1be3329be0c46d5408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:aa:65:cf:2b:88:3c:61:ff:d9:01:40:e6:3b:
cd:c5:9a:4f:aa:db:46:b6:d0:60:d3:b6:9b:81:4d:
c7:32:a9:ba:5e:c4:71:7f:b6:50:df:99:7b:4d:82:
ab:35:16:93:1f:4b:73:16:8d:02:65:3e:ee:e0:ce:
34:3b:4d:e7:c7:57:b9:77:b2:ad:eb:48:f4:5b:c4:
a0:81:21:3e:48:82:65:ea:9e:17:eb:b5:44:c7:5d:
97:00:b5:c0:4e:cb:72:5e:e3:79:66:5e:77:42:cc:
37:1d:fc:4f:8a:c1:8f:64:ba:6f:00:9c:c9:1b:cc:
87:1f:62:9e:08:96:eb:9d:8a:6e:21:5e:86:ab:b1:
59:6d:bc:dc:08:66:6e:27:23:cc:30:4d:c7:e2:08:
04:05:5a:f0:36:98:c5:0b:fe:db:ec:c3:85:aa:e7:
eb:4d:c0:a3:b5:46:df:29:37:c1:dc:4d:9f:c4:86:
f9:b6:eb:97:24:54:73:82:c8:1a:2e:f1:91:f5:b3:
90:98:c7:9f:4c:39:f4:0e:a0:1e:25:10:23:2a:48:
af:cc:c4:24:b3:62:47:74:e6:2b:79:ee:23:a1:35:
32:68:43:0e:96:bf:8f:4e:0a:22:e9:a6:4d:62:dc:
3f:94:37:b2:73:66:1d:92:3e:60:7e:5f:60:bb:43:
65:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:37:19:BA:C2:58:95:71:05:68:3A:1B:E3:32:9B:E0:C4:6D:54:08
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3f:96:e7:aa:8a:88:3a:c2:03:7e:9b:64:ab:f3:c6:84:07:
0e:1f:a2:ad:40:2e:df:e0:69:cd:6f:6c:29:54:da:1b:18:81:
7f:b7:c6:cf:92:c7:31:c7:a1:d9:3f:06:9f:a4:96:0b:36:24:
62:d5:c8:65:eb:ff:71:7f:f1:38:c7:a8:19:c1:9e:c5:4b:b9:
1e:7f:e0:4c:d1:b7:f2:a0:43:3e:a1:b2:a2:34:d9:81:17:a7:
ca:a5:7c:69:c8:90:cb:91:da:35:0a:18:fd:61:71:8b:1b:0d:
df:fe:1c:f4:12:cb:1e:99:06:dc:a2:90:50:d4:7f:71:82:6e:
3d:7f:6e:2e:99:80:4d:63:eb:d0:ad:11:13:33:6f:95:28:cd:
bc:f8:42:85:06:26:7b:7e:52:34:c4:04:f8:83:64:5f:ac:56:
d3:b7:97:d9:10:67:0c:5e:79:e2:29:45:16:8b:fe:79:be:17:
3b:b0:f2:b9:5a:a8:46:ff:e7:b0:18:70:9e:97:63:4c:b1:b4:
6b:7e:7a:99:fa:52:7b:90:4c:a0:cd:2a:46:7a:f3:9d:4c:32:
57:7a:78:20:c1:bc:32:2c:d2:02:72:4b:31:01:3d:45:a4:3d:
85:26:1f:7c:bc:72:1e:76:43:ff:82:23:6b:7f:f5:87:24:f4:
d4:22:28:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:37 2026 by rpki-client