Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
File: CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft (raw, json)
Hash identifier: jUOGb6oBfFXFLIOoXzFlGGRtkZsOengMpmkxALe/9xw=
Subject key identifier: 94:27:BC:FF:79:92:02:2F:5B:75:D3:0E:77:B2:78:3A:30:84:09:79
Authority key identifier: 09:7B:B4:8E:21:4B:B4:D8:DB:42:30:3E:9D:92:A6:C7:09:48:CC:1D
Certificate issuer: /CN=097bb48e214bb4d8db42303e9d92a6c70948cc1d
Certificate serial: 019DA52FF53E3BD71894AE7DB40D8B3D637C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
Manifest number: 39
Signing time: Sun 19 Apr 2026 10:01:16 +0000
Manifest this update: Sun 19 Apr 2026 10:01:16 +0000
Manifest next update: Mon 20 Apr 2026 10:01:16 +0000
Files and hashes: 1: 3UrLjHCB4pwcHVB3zBFHrMVrSsw.roa (hash: FmQXFHkHNyNXx7/DlR8LyUj511QpfY6zuQXRoYOyGLo=)
2: 3vZIFgD88S-GCNxDnP1LiF3y1Mc.roa (hash: IojT01yCuekhR3J8NVJlRfRwjrsV8AmZFTiDSTjzBYk=)
3: CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl (hash: eo91smJn/An68vdKBXivYGcjunsYPKeaUt+ZhmgvwUE=)
4: XK1u2OpOHfPFyWFSpStjjFR21eM.roa (hash: zmHubFupuS74yLzF6KkoHbfyUplOIcN6d9GoVLzuZOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:f5:3e:3b:d7:18:94:ae:7d:b4:0d:8b:3d:63:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097bb48e214bb4d8db42303e9d92a6c70948cc1d
Validity
Not Before: Apr 19 10:01:16 2026 GMT
Not After : Apr 20 10:01:16 2026 GMT
Subject: CN=9427bcff7992022f5b75d30e77b2783a30840979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:f3:d1:94:25:72:24:0d:b8:8a:d0:27:93:
29:be:02:e8:e7:06:45:46:26:06:46:12:93:0f:b3:
6a:ac:ec:9c:86:bd:5d:c4:56:47:11:fa:e3:5d:bf:
74:11:09:51:3f:64:dd:a4:58:d0:4e:f5:a8:ee:18:
76:39:19:9f:47:5a:75:d6:61:31:70:c8:88:9f:aa:
64:1a:41:b7:0a:33:71:7c:e5:70:2b:9a:e1:db:3b:
a3:0c:e1:ce:4a:a2:93:56:c9:9b:ea:55:30:fd:16:
5d:c9:b7:41:c2:0f:50:48:45:c2:92:57:92:bf:d9:
c3:cc:8b:f1:96:9e:64:d0:40:82:25:04:fe:bc:dc:
27:ec:6b:6b:19:fd:9f:84:ac:2a:13:aa:c3:29:34:
b5:15:2a:49:c7:33:cd:d5:16:4e:c6:e4:4d:92:a2:
58:48:a9:f1:b9:d0:4d:ee:fc:fc:13:65:69:f8:33:
02:44:e8:4f:f9:47:cd:aa:6a:0a:02:2d:5c:f9:0f:
6b:37:d7:61:e7:0c:2a:a1:de:ae:c6:dc:7c:56:bf:
61:17:3c:6b:b6:51:33:df:4b:3e:1e:c9:9e:34:5a:
aa:07:68:67:26:2d:c8:98:a3:15:a0:7d:e3:72:68:
ff:32:6b:70:82:1a:c1:69:79:f2:cf:ea:84:2c:88:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:27:BC:FF:79:92:02:2F:5B:75:D3:0E:77:B2:78:3A:30:84:09:79
X509v3 Authority Key Identifier:
keyid:09:7B:B4:8E:21:4B:B4:D8:DB:42:30:3E:9D:92:A6:C7:09:48:CC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:06:bf:ae:df:60:ed:69:6e:0c:2e:b9:11:1c:0f:c3:37:1a:
25:f5:47:6f:a6:22:22:4d:d1:0c:af:6f:ea:9d:ad:ad:fe:11:
53:4f:ba:5e:2f:3b:ee:7d:ba:18:11:be:72:b0:8f:e0:07:a5:
9c:da:a9:d7:83:8a:11:6e:df:b9:4a:36:ae:be:b4:7a:0c:4d:
f4:d7:d3:0b:a0:bb:1e:d5:4b:4c:d2:73:04:48:da:b4:1c:42:
fd:4d:8e:f4:96:ba:14:80:7e:bc:36:38:9d:0d:b8:22:4a:cd:
32:26:07:dc:9f:b4:26:0e:fd:e1:fc:8d:b1:aa:5d:a9:8f:5f:
3a:aa:bb:64:0f:36:a0:4a:6d:4c:bc:ff:28:0d:24:28:3e:75:
89:a1:84:ce:bf:44:e9:5c:77:e2:9c:d5:9e:d0:b6:86:6f:a6:
d7:d9:44:c5:27:eb:d1:8a:88:79:75:00:b3:d2:fb:b3:63:28:
33:32:12:76:34:b1:13:7e:6d:83:5b:e5:1b:01:29:a4:aa:a8:
7c:26:f9:5e:15:83:4c:37:89:7a:f7:01:f7:d6:3a:30:61:86:
d6:a1:0c:a5:10:31:0f:66:22:b7:a0:09:5a:e5:5f:bf:ff:8e:
e0:4c:a2:bf:40:ae:ab:13:fe:b4:d7:00:6e:19:3a:a5:f2:3c:
78:89:39:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:25:20 2026 by rpki-client