Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
File: cxwTgoWLDclamtvqRyizH54iwNg.mft (raw, json)
Hash identifier: UJ0upB7WpUDZXKQGyzr+5Mm0mhc1O7fqYq+THN9/bew=
Subject key identifier: 34:4C:86:C3:BF:B6:4C:43:90:08:7C:3C:D3:9B:79:D5:73:06:92:F2
Authority key identifier: 73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
Certificate issuer: /CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Certificate serial: 019CAD90A452ABE7848346585D633524A31A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
Manifest number: 09A5
Signing time: Mon 02 Mar 2026 08:01:03 +0000
Manifest this update: Mon 02 Mar 2026 08:01:03 +0000
Manifest next update: Tue 03 Mar 2026 08:01:03 +0000
Files and hashes: 1: cxwTgoWLDclamtvqRyizH54iwNg.crl (hash: fDbSbcTwqjVePuz8BwxAcX4M153V0fcLFA6rj/f8c+0=)
2: eCfciMd8WvfOpLwSmZnFxhRFtP8.roa (hash: mnu1L5F4WUL4nlzWuT0asBSz38ZR2rhi6ZOxZOIl63c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:a4:52:ab:e7:84:83:46:58:5d:63:35:24:a3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Validity
Not Before: Mar 2 08:01:03 2026 GMT
Not After : Mar 3 08:01:03 2026 GMT
Subject: CN=344c86c3bfb64c4390087c3cd39b79d5730692f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cb:af:d2:76:7a:01:5b:f4:89:5a:e1:2b:91:
cc:5b:b0:40:03:23:1a:23:a9:26:3b:01:6b:ea:17:
43:21:11:73:42:fd:38:e6:93:f2:9c:d4:5a:e8:d7:
44:b1:cb:14:80:f9:31:6f:95:59:57:c6:17:c3:18:
7f:b6:21:a7:df:37:06:78:02:8b:f5:7a:42:54:2b:
bf:1c:87:7e:59:4e:55:f2:02:ad:f2:cd:5f:7f:63:
cb:3f:78:b5:56:77:60:81:4b:dd:fa:60:60:e8:81:
17:ae:13:96:de:fb:34:68:69:07:11:ee:43:64:42:
d7:0c:46:93:79:e5:59:e2:b8:2c:6f:46:f2:fd:ec:
48:f3:64:42:83:8b:27:b5:28:72:a4:58:db:5e:7d:
9a:56:42:b5:a1:78:ea:6a:1a:99:9f:54:74:18:5f:
39:d5:62:5e:64:40:1f:83:ce:bc:0f:0a:ae:2d:09:
2b:27:e9:50:27:42:b8:6d:cd:fc:5e:e1:15:c2:8c:
87:be:e6:08:45:0c:5d:48:33:30:e1:f0:d2:c0:1d:
04:3c:47:7b:ca:0d:e2:57:aa:d5:2a:46:9f:45:f0:
08:7d:9a:27:00:4e:eb:9d:2c:89:41:85:da:00:81:
55:9a:24:63:0c:6c:80:fd:8f:2d:8e:e4:15:14:e7:
cb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4C:86:C3:BF:B6:4C:43:90:08:7C:3C:D3:9B:79:D5:73:06:92:F2
X509v3 Authority Key Identifier:
keyid:73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:f6:fe:6e:54:dd:02:ff:a1:0f:0a:05:3e:78:3d:b5:5e:aa:
b7:d8:b4:52:c6:2f:e0:1a:1a:0a:61:32:8c:ae:86:74:29:f7:
9c:24:90:77:bd:f5:49:d4:58:72:21:fe:aa:c6:74:5e:77:8a:
e2:68:01:f3:87:ed:3a:ae:ad:62:56:a6:8e:ff:44:19:13:3e:
b5:31:54:73:d5:0b:8c:a6:28:bf:98:a8:0f:bc:6d:a0:fc:0c:
05:9b:e3:bf:79:55:54:6a:fb:7d:b8:e8:93:c6:b0:4c:cd:5c:
7d:9a:16:a2:60:35:9d:ab:16:4b:e9:4b:7b:c8:e4:14:50:19:
3e:a8:4f:90:de:af:92:64:44:a3:ca:01:5c:ad:63:b6:e4:e0:
00:0a:95:56:24:24:97:60:1d:14:0d:fb:7d:d8:15:91:32:46:
53:fe:cd:d8:de:b5:77:2b:b7:3a:5e:d4:ef:4f:a2:cd:cd:7f:
17:78:a3:62:c0:cc:61:97:59:79:91:33:bd:01:39:f3:b2:ce:
c9:7a:42:17:3e:1c:be:6a:5b:f2:81:96:d4:8e:7f:56:8a:c9:
5e:7a:04:45:26:31:d9:21:e9:b5:df:95:21:44:d5:4f:bd:f5:
54:19:2a:05:0d:b6:f3:a1:d4:26:33:a8:f9:91:aa:e5:c3:22:
ec:ed:b2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:47:41 2026 by rpki-client