Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
File: CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft (raw, json)
Hash identifier: RLXK/19wV3Z/8LEPVmO/xVSnDOdfFkymyezkFnfWMr4=
Subject key identifier: 35:81:95:62:D6:AC:C2:E8:69:DB:E4:5E:FF:1E:0B:94:F7:4E:65:31
Authority key identifier: 09:7B:B4:8E:21:4B:B4:D8:DB:42:30:3E:9D:92:A6:C7:09:48:CC:1D
Certificate issuer: /CN=097bb48e214bb4d8db42303e9d92a6c70948cc1d
Certificate serial: 01A12541F2FED9CED20EBA67E729E38F012C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
Manifest number: 0209
Signing time: Sat 10 Oct 2026 10:00:41 +0000
Manifest this update: Sat 10 Oct 2026 10:00:41 +0000
Manifest next update: Sun 11 Oct 2026 10:00:41 +0000
Files and hashes: 1: 3UrLjHCB4pwcHVB3zBFHrMVrSsw.roa (hash: FmQXFHkHNyNXx7/DlR8LyUj511QpfY6zuQXRoYOyGLo=)
2: 3vZIFgD88S-GCNxDnP1LiF3y1Mc.roa (hash: IojT01yCuekhR3J8NVJlRfRwjrsV8AmZFTiDSTjzBYk=)
3: CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl (hash: /WKxaDGTfZZUV2BlhGyriuNV86bwWX0YC2rQX81CK7E=)
4: XK1u2OpOHfPFyWFSpStjjFR21eM.roa (hash: zmHubFupuS74yLzF6KkoHbfyUplOIcN6d9GoVLzuZOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:41:f2:fe:d9:ce:d2:0e:ba:67:e7:29:e3:8f:01:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097bb48e214bb4d8db42303e9d92a6c70948cc1d
Validity
Not Before: Oct 10 10:00:41 2026 GMT
Not After : Oct 11 10:00:41 2026 GMT
Subject: CN=35819562d6acc2e869dbe45eff1e0b94f74e6531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c2:e4:3d:95:6a:ed:ff:27:7a:b2:a3:d1:36:
49:de:49:da:ab:2c:82:55:ac:97:0b:9b:ee:d0:d3:
f2:df:79:54:88:fc:41:e2:fa:3c:fc:ce:e7:37:e1:
72:ac:7a:6c:a7:ac:c7:c9:40:01:bb:42:c9:01:be:
e2:ac:61:39:5a:0b:9f:92:39:1a:be:41:98:8b:b4:
24:ec:bd:cd:b3:18:21:65:6f:65:86:25:8b:70:44:
cc:87:12:38:6b:4a:99:7c:8e:87:d4:67:f1:49:1a:
92:44:84:64:51:d6:17:a6:ad:51:29:1e:00:08:8a:
cd:59:73:b6:11:80:3b:eb:d9:0b:a6:d9:a1:eb:40:
d3:cd:d8:f2:67:73:11:23:79:02:62:d7:67:3e:8d:
09:1c:60:e8:0e:d1:6f:f9:a0:4f:1c:b4:3c:54:37:
72:d7:ac:e3:65:cf:10:e7:b4:2f:3e:ad:09:4a:3f:
7e:cf:af:19:0d:f1:fd:c0:7b:48:51:04:bb:bc:b1:
f5:99:28:ff:29:54:8b:27:07:80:90:75:58:34:d1:
1e:1b:4f:45:c6:00:2b:50:68:81:4b:b1:fe:9d:6a:
a5:87:42:82:48:d2:19:89:c5:8f:23:88:b5:6f:13:
42:58:9e:e5:c6:60:98:12:a4:79:44:6c:01:a9:68:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:81:95:62:D6:AC:C2:E8:69:DB:E4:5E:FF:1E:0B:94:F7:4E:65:31
X509v3 Authority Key Identifier:
keyid:09:7B:B4:8E:21:4B:B4:D8:DB:42:30:3E:9D:92:A6:C7:09:48:CC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:8d:54:d4:f0:3a:16:c3:b4:0f:e2:61:b1:27:9a:b2:4a:06:
29:12:8f:a4:5d:ab:63:5e:ba:bc:fb:54:2f:04:7a:e6:95:a7:
04:0f:28:15:be:fe:5b:10:a2:a0:87:3d:6d:db:97:53:51:15:
fb:78:c5:b2:ac:4a:0c:36:80:3b:88:21:90:b7:a2:cf:06:94:
37:e6:8e:72:60:89:42:7e:9b:13:63:c1:a0:85:56:8b:be:93:
31:8a:ca:89:f4:67:db:c0:32:d6:e2:3e:fd:7b:08:ab:ce:ed:
37:d7:e1:16:a0:ba:cc:88:ed:2e:66:db:57:d4:47:ee:48:51:
0d:52:09:a3:aa:00:3d:d8:9e:a7:c2:1a:18:87:ff:da:56:c9:
a8:13:a0:a3:65:fb:b9:af:f3:03:24:fa:5c:bd:fc:be:53:97:
76:2d:5b:b0:b2:b7:8e:03:a5:c9:89:a2:f3:92:1a:ea:05:22:
28:99:76:76:3a:33:32:7e:3b:c2:c8:1c:05:4d:27:e7:46:ee:
81:76:dd:26:ee:f3:65:e6:8c:47:c1:b7:f9:3f:94:81:db:dc:
ef:76:9e:8d:64:cf:7d:ed:b6:6d:d4:3c:11:36:4c:54:44:84:
7d:6a:7e:c4:36:4f:43:0c:f4:ad:f6:ab:e6:5b:f3:33:7c:a6:
4c:ad:ba:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:33:27 2026 by rpki-client