Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
File: CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft (raw, json)
Hash identifier: RxoG/Wr1KnL+zP288f8sO17NTMIsrJPB4aDR4ku0mcY=
Subject key identifier: 66:4A:29:BC:6D:8B:9A:EF:98:DB:B0:3F:DE:B7:41:59:AA:78:58:5E
Authority key identifier: 09:7B:B4:8E:21:4B:B4:D8:DB:42:30:3E:9D:92:A6:C7:09:48:CC:1D
Certificate issuer: /CN=097bb48e214bb4d8db42303e9d92a6c70948cc1d
Certificate serial: 019FAABE4C081D8A3D75DCD9D8D539B7C710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
Manifest number: 0145
Signing time: Tue 28 Jul 2026 22:00:25 +0000
Manifest this update: Tue 28 Jul 2026 22:00:25 +0000
Manifest next update: Wed 29 Jul 2026 22:00:25 +0000
Files and hashes: 1: 3UrLjHCB4pwcHVB3zBFHrMVrSsw.roa (hash: FmQXFHkHNyNXx7/DlR8LyUj511QpfY6zuQXRoYOyGLo=)
2: 3vZIFgD88S-GCNxDnP1LiF3y1Mc.roa (hash: IojT01yCuekhR3J8NVJlRfRwjrsV8AmZFTiDSTjzBYk=)
3: CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl (hash: kCjfSpmnZ2Ouqp559t5ngXSLp1I7mB9PhsY1kbOD/9I=)
4: XK1u2OpOHfPFyWFSpStjjFR21eM.roa (hash: zmHubFupuS74yLzF6KkoHbfyUplOIcN6d9GoVLzuZOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:4c:08:1d:8a:3d:75:dc:d9:d8:d5:39:b7:c7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097bb48e214bb4d8db42303e9d92a6c70948cc1d
Validity
Not Before: Jul 28 22:00:25 2026 GMT
Not After : Jul 29 22:00:25 2026 GMT
Subject: CN=664a29bc6d8b9aef98dbb03fdeb74159aa78585e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:9e:33:4c:f0:17:ad:94:29:c9:95:c5:f3:
8c:01:11:e8:85:81:44:88:cc:47:df:99:38:d7:62:
df:b9:a8:03:a2:7d:6a:e0:46:18:ce:dd:6e:e5:66:
e9:59:10:c6:dc:39:4c:0c:9a:f2:e7:98:cf:34:b7:
d3:5c:60:a3:19:c9:02:91:ce:9d:97:c9:55:48:7d:
84:c5:35:ff:22:6c:4e:3b:9b:03:f5:51:39:ed:0a:
ac:48:84:7f:18:6e:83:dc:63:26:1e:cd:3e:8f:d0:
2f:c3:f0:a8:12:cc:ae:94:91:0f:77:c6:c2:a1:02:
76:5b:47:01:2a:67:c8:59:f3:c1:8f:ac:a9:73:db:
39:b8:45:72:42:20:0c:fc:b6:d4:ec:eb:35:17:87:
14:12:c7:9d:41:7b:81:cb:c0:52:61:4f:08:4a:91:
3e:81:96:cd:6c:2c:78:8e:62:c5:4f:74:a3:37:a8:
dc:c8:60:92:92:e3:d6:4a:f7:ac:0d:4a:f2:1d:55:
be:a9:e0:e9:ca:fd:6e:d1:c1:84:56:5f:37:41:49:
8e:1f:5a:8e:e4:c4:f3:1e:c5:cb:dd:55:4a:cc:25:
9e:28:47:5f:b3:23:4d:e3:39:8a:cd:a3:75:f8:70:
65:60:97:b7:14:ad:80:70:4f:7d:87:3f:9e:32:08:
6a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4A:29:BC:6D:8B:9A:EF:98:DB:B0:3F:DE:B7:41:59:AA:78:58:5E
X509v3 Authority Key Identifier:
keyid:09:7B:B4:8E:21:4B:B4:D8:DB:42:30:3E:9D:92:A6:C7:09:48:CC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXu0jiFLtNjbQjA-nZKmxwlIzB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40becd-19e9-43fd-a1b8-056f463327e1/1/CXu0jiFLtNjbQjA-nZKmxwlIzB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:95:37:40:97:9a:65:61:be:f6:63:63:f2:21:7a:dd:30:c8:
4a:d8:d3:a5:2d:ee:e8:15:9d:91:64:8b:85:6d:e3:fa:f1:6a:
ba:0a:a1:27:54:e0:a6:57:33:0e:0e:ed:06:2a:e2:e8:4f:a8:
7a:25:6b:14:83:ca:f3:2a:af:f0:65:4e:d9:b2:2c:c6:d6:cc:
69:d6:1a:f1:ad:7a:5d:bc:5e:99:5c:7e:34:17:de:88:15:9c:
ed:e0:8c:ef:a6:47:7b:3d:bf:7f:8e:87:49:bc:ba:84:33:c5:
be:4f:e2:08:47:2e:20:13:c6:cd:71:69:ce:29:0c:be:c1:ee:
24:66:7c:f2:2a:c5:86:f5:5c:fd:c2:b4:ed:c5:b4:4a:94:c0:
e2:d8:cd:5c:11:33:f6:7e:91:0b:e3:d0:80:fc:dd:b6:4d:78:
ab:07:d8:ad:50:36:ed:ba:2c:c7:2c:0a:ff:ce:81:19:68:33:
0f:1e:1f:73:a3:1c:0a:f5:3d:23:68:c5:54:9a:18:35:d4:ca:
ff:f3:0a:fb:b4:5d:6d:0c:93:55:a8:a1:8b:56:e6:5d:63:18:
71:90:e8:57:93:5c:80:18:22:99:01:63:9b:67:1b:9d:62:cc:
43:5e:06:f9:c5:90:99:dd:35:1b:7c:45:c7:ab:e2:53:e8:7c:
fe:78:e0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:14:20 2026 by rpki-client