Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json)
Hash identifier: O3ngy6LYGnY6O+yIv0mykcAu+PdQm5vyqE1dwcC9kfM=
Subject key identifier: DA:5B:26:74:05:6C:B3:4B:37:FE:11:76:E0:67:E7:59:43:03:88:0B
Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48
Certificate serial: 019CAC0FDE9FDD903B38ADA2A4ECAAF1273B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
Manifest number: 1158
Signing time: Mon 02 Mar 2026 01:00:46 +0000
Manifest this update: Mon 02 Mar 2026 01:00:46 +0000
Manifest next update: Tue 03 Mar 2026 01:00:46 +0000
Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: yFdzdaxqmKdPslhyQZB3AUJgaeNyiKtt6IqnjJy4/yA=)
2: Rzs2HXQzTLrDqDj9LP1oWAbKMGw.roa (hash: OG2fkvNtGY/HMomh9VL9hQ1Vbd5noSl5aNza/Xw2mXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:de:9f:dd:90:3b:38:ad:a2:a4:ec:aa:f1:27:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48
Validity
Not Before: Mar 2 01:00:46 2026 GMT
Not After : Mar 3 01:00:46 2026 GMT
Subject: CN=da5b2674056cb34b37fe1176e067e7594303880b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c7:e6:bc:fa:a4:a1:7f:8a:03:32:7f:60:3c:
44:ff:d4:79:ca:0e:19:c3:52:28:aa:1e:ec:58:f1:
6c:dc:91:7f:89:c6:48:4b:23:e2:e6:4d:53:53:ed:
c3:c2:de:e6:2e:6d:c3:ea:e3:82:58:74:db:56:c4:
9d:6e:0e:aa:f2:0a:66:94:e0:1b:56:e0:f2:15:f0:
7e:a9:db:21:3e:2d:f9:ec:66:73:0c:26:99:76:3e:
6f:3a:a5:6c:37:08:6d:00:bd:df:bc:d8:97:e5:00:
b8:2a:dd:ef:39:85:99:f0:5e:26:f8:fe:0d:7b:62:
be:f7:00:af:e8:29:ad:15:7e:4d:24:b8:10:bb:69:
af:0c:d4:e4:8d:de:00:e6:7c:81:f9:d4:99:6e:de:
e4:0b:70:b6:8f:4a:5f:45:4d:c1:61:04:bd:f0:12:
60:95:65:5f:b9:87:88:59:63:1e:54:a8:e3:1e:e3:
7c:d7:36:1e:68:01:8c:56:e1:65:80:ac:d7:b3:26:
53:31:ff:f3:42:27:9e:40:18:28:1e:90:8f:f9:dc:
d7:fe:6c:d6:63:2f:fb:fe:ed:81:91:af:9c:99:0b:
4a:da:ca:ce:2c:09:3c:91:9a:d3:fa:c8:a6:09:4e:
58:5f:9f:23:72:43:42:b3:14:9e:9f:d7:52:62:14:
0f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5B:26:74:05:6C:B3:4B:37:FE:11:76:E0:67:E7:59:43:03:88:0B
X509v3 Authority Key Identifier:
keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:4a:97:2a:d0:43:bd:60:d0:11:22:a0:d9:97:e0:55:b6:b9:
0c:20:52:5c:4f:ef:46:74:ad:09:78:00:97:8f:21:bb:ea:2d:
a4:81:05:c0:25:b2:b5:08:11:41:c1:b5:9d:76:2c:02:a3:1b:
4b:a3:e5:e3:1f:9b:ca:91:da:f9:43:89:d7:62:e2:cc:11:79:
3c:e8:53:c7:2f:94:b2:67:17:a3:1e:86:2d:4b:1f:81:b1:2c:
1e:8c:19:26:10:61:af:32:08:79:54:ee:a8:71:38:cd:aa:51:
90:43:3e:32:30:6e:32:49:44:a9:6a:ba:50:b5:1b:35:8b:d2:
72:23:82:e3:78:f5:86:5e:07:78:34:3f:5a:f0:0e:ed:91:c8:
f6:f7:f5:f5:a9:ce:82:71:32:5b:0a:2c:8f:b3:f2:ce:24:88:
5e:72:11:f0:27:fd:65:b4:7e:d4:5e:64:57:0b:40:ca:a6:47:
1b:56:54:1c:76:19:f2:e0:67:90:1e:1d:0d:ba:8c:9a:20:5a:
fe:15:e1:2e:cb:42:b2:1e:8c:5b:0d:59:28:17:8a:34:b7:1f:
2f:da:30:6a:6e:47:2b:07:db:83:78:09:97:63:3d:a1:b0:27:
32:1f:99:51:77:66:77:97:06:51:4c:6f:7c:ad:fe:12:fa:25:
37:c4:75:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:48:11 2026 by rpki-client