Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json)
Hash identifier: bgpCKs5jainr0En3C7Xducj8gHDCCL8fk6pO0SyD3C0=
Subject key identifier: 29:1B:54:D8:EB:24:A2:D0:BF:D7:8D:DF:15:14:B1:97:CF:08:AE:61
Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48
Certificate serial: 01A127307552B8185E2C40E6262902B83D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
Manifest number: 13AA
Signing time: Sat 10 Oct 2026 19:00:49 +0000
Manifest this update: Sat 10 Oct 2026 19:00:49 +0000
Manifest next update: Sun 11 Oct 2026 19:00:49 +0000
Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: QtGg5iSmQNHMgqzetJnOnuFjYgUzpcT3oS3z3sJpA3Y=)
2: Rzs2HXQzTLrDqDj9LP1oWAbKMGw.roa (hash: OG2fkvNtGY/HMomh9VL9hQ1Vbd5noSl5aNza/Xw2mXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:30:75:52:b8:18:5e:2c:40:e6:26:29:02:b8:3d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48
Validity
Not Before: Oct 10 19:00:49 2026 GMT
Not After : Oct 11 19:00:49 2026 GMT
Subject: CN=291b54d8eb24a2d0bfd78ddf1514b197cf08ae61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:60:84:a7:5e:b5:44:df:63:2b:fd:cd:56:e8:
9d:f4:08:de:8d:b2:bb:f1:18:69:46:3f:b3:20:f8:
0b:ad:a6:ba:aa:a4:48:90:b7:c2:6f:66:db:51:31:
91:b0:67:96:be:6a:01:78:54:95:9c:82:4b:3e:8b:
8c:a4:ef:9a:f9:1c:07:6f:4a:2b:1e:f6:4f:62:6c:
17:26:d1:5a:bd:3e:a7:22:8b:4b:5e:e7:ce:6c:c2:
ec:d4:a8:7d:68:c9:10:98:03:f7:8a:c3:82:95:24:
d9:98:d9:40:73:22:1e:62:6b:8c:bf:d2:49:5e:c3:
f3:e0:66:62:95:de:be:a5:2a:0b:4b:11:a7:9c:dd:
88:cb:36:b2:3b:98:6e:45:8b:9e:45:27:96:ae:fa:
6b:a3:c0:8e:a3:ed:d2:cd:0f:62:bc:1f:0c:c0:3b:
06:a5:ea:a9:4e:fc:06:c8:9e:af:f8:19:bf:62:2b:
9a:fb:a3:0c:b2:e4:8a:86:d8:36:f8:c1:f3:83:b2:
dd:9e:d9:d8:7d:37:62:06:86:c8:29:1e:95:70:21:
77:aa:fe:16:8b:d0:ff:31:e5:4b:30:a2:eb:1c:6c:
e4:b5:fb:bd:da:94:c0:b3:f7:65:fe:b8:a1:5a:9c:
cd:db:67:59:45:5c:ab:9a:a5:3c:5b:76:7c:fc:7b:
30:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1B:54:D8:EB:24:A2:D0:BF:D7:8D:DF:15:14:B1:97:CF:08:AE:61
X509v3 Authority Key Identifier:
keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5f:f1:bd:52:1f:a7:c7:7d:a6:ac:64:67:d5:c4:eb:ac:d7:
0b:db:6d:ae:8b:85:e3:7a:76:f9:b0:60:ca:ac:93:db:59:67:
3c:b0:34:06:08:46:cf:54:5a:cb:e0:78:a2:46:7e:77:cf:a0:
3b:45:c2:fd:b1:22:26:73:d6:ee:03:af:4d:64:7c:04:2f:0e:
89:99:3a:71:c7:5e:b6:30:d4:dd:31:67:73:9f:a9:40:24:5a:
08:ae:3e:b6:34:6a:3c:c4:3e:d7:7e:7f:ce:14:72:77:70:8c:
9e:18:e0:db:25:30:49:86:43:63:84:90:a7:05:d4:29:ed:a3:
bc:e0:ac:43:b9:7f:cc:11:c5:d6:30:b8:c3:44:7d:57:97:ef:
4c:84:22:bf:f0:a9:27:ca:ff:53:14:fb:5b:76:05:11:61:ec:
b0:78:33:64:21:73:1f:9b:d0:36:00:c2:63:73:ef:5d:d5:49:
c5:54:cc:a5:fb:62:5e:1f:95:39:a7:ab:46:85:3e:d3:31:a1:
12:2a:ce:42:68:1a:7f:f4:7e:bf:ae:e7:90:17:46:82:72:77:
6d:c8:4c:97:0f:18:69:03:e5:aa:f5:3f:d0:34:68:21:02:58:
89:6b:5d:59:70:c2:70:ea:78:20:f2:fe:7a:0e:62:f2:1d:45:
a2:82:29:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:26:45 2026 by rpki-client