Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
File: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft (raw, json)
Hash identifier: JmHJzYEqopwI/gY6kedcd3595aBhxkTl11MCVcISm9E=
Subject key identifier: 3A:98:55:D2:28:F4:4B:9A:67:EE:19:18:30:5D:F9:F0:96:E3:DE:ED
Authority key identifier: 71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
Certificate issuer: /CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Certificate serial: 019CAE35AE82F56245A645EA4281CC0C7DD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 11:01:19 +0000
Manifest this update: Mon 02 Mar 2026 11:01:19 +0000
Manifest next update: Tue 03 Mar 2026 11:01:19 +0000
Files and hashes: 1: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl (hash: dzGyVS7WQCju2AQfRoW41lLA2xaae3i0b8Wq3hp91V0=)
2: fQazRsuQA7KoggBdQ3lwX4Pk9DE.roa (hash: gfbrsTU/I0e+W/MQFr0NClUgyaIVv/jWpNgk1NCWi8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:ae:82:f5:62:45:a6:45:ea:42:81:cc:0c:7d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Validity
Not Before: Mar 2 11:01:19 2026 GMT
Not After : Mar 3 11:01:19 2026 GMT
Subject: CN=3a9855d228f44b9a67ee1918305df9f096e3deed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:81:51:09:81:cc:dd:52:09:f0:4b:2a:25:
48:50:30:4a:61:58:d4:84:ab:1c:24:95:4f:b5:af:
22:a8:b2:4b:ff:9e:88:6e:70:77:20:67:58:78:77:
88:ec:45:79:81:c9:9a:20:f5:3a:48:f3:e5:f4:b8:
88:a2:c4:b7:11:61:0d:9a:58:b8:6a:27:76:56:cb:
d7:df:80:33:1c:d0:45:ca:20:2c:6c:a4:15:5f:d5:
06:aa:89:c0:5b:9a:82:8c:7e:b8:44:0a:da:61:8c:
e4:13:fb:b5:14:06:3b:10:2f:16:d8:cc:0b:d8:62:
ef:c5:5a:89:7b:45:ef:00:05:46:b4:b8:60:c6:e3:
09:fc:45:45:5e:a9:3d:3c:07:ed:0f:ea:cf:10:90:
26:2f:ce:22:92:ac:9e:3b:8d:da:74:15:f1:2c:7e:
a1:fb:52:8a:ed:69:c5:bc:00:2c:55:c1:c2:1e:ac:
8b:d4:05:79:50:b2:d9:6b:f5:46:9b:30:50:99:d8:
27:89:55:65:08:fa:fb:7d:19:9e:47:7d:67:75:78:
eb:2c:32:69:91:ec:80:fd:72:85:e5:a1:97:6f:73:
dc:cc:58:95:b0:18:b0:0c:eb:72:d5:a7:e5:32:78:
22:ed:cf:28:9f:85:09:31:36:3a:b3:c5:3a:32:64:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:98:55:D2:28:F4:4B:9A:67:EE:19:18:30:5D:F9:F0:96:E3:DE:ED
X509v3 Authority Key Identifier:
keyid:71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4c:99:76:ce:af:e5:9f:55:ee:52:57:cb:4c:89:32:9a:64:
50:6e:6b:34:25:f6:c7:ab:9a:e6:ca:4c:24:82:25:ec:fb:69:
17:58:e3:37:ca:d1:2a:6f:dd:98:2d:a7:f3:00:8c:86:4e:29:
91:0e:07:29:6d:fb:ca:6a:bb:24:79:06:fe:87:b8:4a:39:08:
5b:5b:f2:fa:97:69:c7:80:5b:8d:58:bf:7e:89:f9:81:de:e3:
d3:81:21:4c:73:30:66:80:b6:90:70:e3:e5:96:72:aa:72:e2:
4e:33:dd:26:6d:ed:58:c5:55:ee:81:d8:0d:4d:3c:24:66:13:
a0:71:15:98:1d:c7:f8:7f:46:25:68:ac:d4:dd:15:e4:94:18:
95:74:d1:09:06:23:b1:bf:17:b5:ec:02:36:1d:22:66:4a:54:
6f:de:29:48:99:c9:3b:f0:ae:ae:64:0b:7e:90:55:1f:6f:2b:
03:eb:01:07:3a:24:85:5c:e8:95:18:e6:30:ee:60:58:8a:b1:
4d:94:88:77:51:16:9f:35:df:95:7f:6c:f4:ee:39:01:ab:27:
eb:eb:a7:fc:14:5b:bf:e4:48:e1:25:23:7b:fa:0a:5a:1c:1e:
f3:85:d5:9f:00:0e:a1:18:92:f0:77:d6:77:a5:ac:ed:c2:e2:
63:7e:ad:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:49 2026 by rpki-client