Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier: CN/hEovFSN4u+jTM4AtwTul5MuuJ8cRxnK/F7X0BuQs=
Subject key identifier: 69:A6:8A:68:4C:02:C7:4A:FC:2D:0F:D9:EB:00:63:89:9F:0B:90:A5
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 01A0D26EA0CF0DC973191F0E0C932C819751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number: 149E
Signing time: Thu 24 Sep 2026 08:01:00 +0000
Manifest this update: Thu 24 Sep 2026 08:01:00 +0000
Manifest next update: Fri 25 Sep 2026 08:01:00 +0000
Files and hashes: 1: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: qjBi76pn4k4zbCXhw7knaEDZ9dxUlq99luclKhBp1CI=)
2: gLcTJvZ-bTiZKez7VJlhXddzj5I.roa (hash: njLU3hmp1ice1mv35YuU3QwtIJDPeTW7I2pUB3WU76k=)
3: iGV0CoyrITzjkKDaw4INbKqkpdE.roa (hash: S/9miWwjqyjrqWzqhVaykBqXwqlsa3o7EOP2wtoRCcU=)
4: t8eIgMClHX3oL8Kz7kDeYL0J8-I.roa (hash: jcUfNtNFO2Y7xEuTx/9w6iJn9BhR83TnoBAGY+TGric=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:a0:cf:0d:c9:73:19:1f:0e:0c:93:2c:81:97:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Sep 24 08:01:00 2026 GMT
Not After : Sep 25 08:01:00 2026 GMT
Subject: CN=69a68a684c02c74afc2d0fd9eb0063899f0b90a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2b:60:20:31:68:71:a3:c9:49:13:60:f8:ae:
86:3f:7a:71:9d:55:1f:c6:4c:1a:f3:ca:19:12:d9:
7d:e2:c7:aa:7b:20:63:90:2d:90:9c:90:14:ae:ad:
1a:50:4d:a6:8a:23:4a:d7:4a:ab:ea:fd:1c:d0:e4:
81:21:1a:35:2d:94:5d:23:91:3c:b5:3c:84:91:9c:
27:20:b3:92:6d:20:9d:74:39:42:67:4b:07:16:30:
a9:01:ec:e2:44:12:64:3c:98:1a:c2:59:25:93:ec:
0d:e8:6f:e7:62:51:34:c9:01:fe:f0:18:4f:3e:84:
64:f0:fb:5f:d7:64:c0:61:5a:69:f5:cd:d5:45:e0:
cb:4f:ba:2d:aa:cc:6b:ee:90:d2:51:87:88:2b:12:
f2:b4:f7:35:91:60:4a:0d:21:7d:57:b4:d8:dd:34:
d2:61:50:0f:cc:e2:1c:75:59:3a:15:84:6f:fc:62:
cc:95:97:3a:f4:39:b1:06:36:76:53:6a:5f:e1:ae:
8c:df:57:30:71:5e:d6:d6:fb:48:bf:55:cc:ce:93:
cb:ab:4e:68:c8:ca:37:a4:b6:91:c4:04:76:a0:56:
21:5f:28:bc:7c:1c:b9:ee:eb:50:c3:fb:0c:47:87:
0a:d9:93:67:48:ec:e8:87:24:6f:79:3f:83:c7:c6:
fd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A6:8A:68:4C:02:C7:4A:FC:2D:0F:D9:EB:00:63:89:9F:0B:90:A5
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:dc:42:4f:db:25:1c:42:4d:d1:a5:6c:78:55:80:6e:6e:b0:
2d:23:eb:e4:70:01:bd:cb:c0:96:74:58:89:96:db:56:e9:3e:
ca:7a:3a:aa:5b:09:3b:41:07:cd:2e:5f:72:93:f8:3e:d5:3e:
e7:39:6c:92:eb:94:4c:c5:71:cf:c1:72:13:b0:cb:2c:0f:62:
4c:57:20:3f:5d:f4:b0:3b:91:60:9d:8a:b3:01:d5:e1:0b:7c:
72:1f:af:ad:f2:b2:e0:ca:52:1c:78:32:77:4f:38:3f:1c:2c:
e5:e4:ca:6b:3b:d3:88:a9:84:51:6a:f9:f1:45:93:c7:f5:a3:
90:28:bc:d7:38:a4:69:e4:1d:8a:94:a5:60:01:87:4e:82:76:
11:28:f2:ed:f1:d9:52:0b:66:39:4a:2c:d2:e3:a5:ac:54:31:
22:39:6e:ef:c2:1c:d3:44:05:ed:90:e0:e7:ba:ff:de:fb:f4:
37:fd:e6:22:58:fc:27:03:11:dd:d1:e5:9c:cf:46:60:5c:04:
dc:23:f2:46:aa:a2:d6:32:ad:64:70:18:4a:6b:e3:ee:2b:1d:
fc:72:58:cd:e8:ed:61:09:aa:c7:69:00:8d:9e:f2:e4:45:8d:
9f:05:0c:0d:3e:91:0d:c1:ec:40:09:d8:34:fb:59:45:26:c8:
27:39:bc:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSbqDPDclzGR8ODJMsgZdRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMWQ5YWQ0MDRlY2RhZmE3MGVhOWE0YzlkMTBiOTgwMTgy
OWVhMWYwHhcNMjYwOTI0MDgwMTAwWhcNMjYwOTI1MDgwMTAwWjAzMTEwLwYDVQQD
Eyg2OWE2OGE2ODRjMDJjNzRhZmMyZDBmZDllYjAwNjM4OTlmMGI5MGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2StgIDFocaPJSRNg+K6GP3pxnVUf
xkwa88oZEtl94seqeyBjkC2QnJAUrq0aUE2miiNK10qr6v0c0OSBIRo1LZRdI5E8
tTyEkZwnILOSbSCddDlCZ0sHFjCpAeziRBJkPJgawlklk+wN6G/nYlE0yQH+8BhP
PoRk8Ptf12TAYVpp9c3VReDLT7otqsxr7pDSUYeIKxLytPc1kWBKDSF9V7TY3TTS
YVAPzOIcdVk6FYRv/GLMlZc69DmxBjZ2U2pf4a6M31cwcV7W1vtIv1XMzpPLq05o
yMo3pLaRxAR2oFYhXyi8fBy57utQw/sMR4cK2ZNnSOzohyRveT+Dx8b9bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmmimhMAsdK/C0P2esAY4mfC5ClMB8GA1UdIwQY
MBaAFHMdmtQE7Nr6cOqaTJ0QuYAYKeofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYt
ZTIwYTY1NGZjYTk1LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYtZTIwYTY1NGZjYTk1
LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNxCT9sl
HEJN0aVseFWAbm6wLSPr5HABvcvAlnRYiZbbVuk+yno6qlsJO0EHzS5fcpP4PtU+
5zlskuuUTMVxz8FyE7DLLA9iTFcgP130sDuRYJ2KswHV4Qt8ch+vrfKy4MpSHHgy
d084Pxws5eTKazvTiKmEUWr58UWTx/WjkCi81zikaeQdipSlYAGHToJ2ESjy7fHZ
UgtmOUos0uOlrFQxIjlu78Ic00QF7ZDg57r/3vv0N/3mIlj8JwMR3dHlnM9GYFwE
3CPyRqqi1jKtZHAYSmvj7isd/HJYzejtYQmqx2kAjZ7y5EWNnwUMDT6RDcHsQAnY
NPtZRSbIJzm89Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:05:03 2026 by rpki-client