Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
File: cxwTgoWLDclamtvqRyizH54iwNg.mft (raw, json)
Hash identifier: ca7N+q11WCZVVtHbu5J6d+H/jE7ejomjsAdcJT36/+k=
Subject key identifier: E4:F9:00:83:78:09:8F:A7:46:11:26:72:C4:71:85:0C:73:F3:8E:80
Authority key identifier: 73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
Certificate issuer: /CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Certificate serial: 019D9B19E9F4CDB61577F2426209D5AFFAD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
Manifest number: 0A20
Signing time: Fri 17 Apr 2026 11:00:59 +0000
Manifest this update: Fri 17 Apr 2026 11:00:59 +0000
Manifest next update: Sat 18 Apr 2026 11:00:59 +0000
Files and hashes: 1: cxwTgoWLDclamtvqRyizH54iwNg.crl (hash: 0I3B6YQCbHAGlK66LyTmYEyLXwM/V3TYg9RkK6ovq8c=)
2: eCfciMd8WvfOpLwSmZnFxhRFtP8.roa (hash: mnu1L5F4WUL4nlzWuT0asBSz38ZR2rhi6ZOxZOIl63c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:e9:f4:cd:b6:15:77:f2:42:62:09:d5:af:fa:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Validity
Not Before: Apr 17 11:00:59 2026 GMT
Not After : Apr 18 11:00:59 2026 GMT
Subject: CN=e4f9008378098fa746112672c471850c73f38e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9e:c7:df:f2:e3:6d:c8:f5:2b:d3:93:0c:92:
6e:43:5c:5c:3b:df:38:69:40:a5:b0:06:da:5f:20:
fd:33:bf:80:10:61:18:e9:78:25:84:61:5a:3e:a6:
ac:ac:98:9c:77:18:bc:2e:9d:3f:eb:86:d3:ae:3e:
70:5b:af:1f:fc:5a:00:3c:ce:61:04:0d:89:f5:d5:
a5:99:58:df:3a:fe:75:db:76:14:c6:d8:ac:08:ce:
e2:e1:30:69:15:e0:1b:fe:1f:b8:a1:1e:ad:42:e3:
b2:15:15:71:be:c1:ab:9a:6b:24:8f:21:f6:b2:50:
c7:d2:47:20:55:b3:75:a7:42:54:1b:ac:9f:5b:56:
63:78:a9:37:2b:d7:84:9d:29:54:a3:43:13:bf:c5:
31:41:ea:d4:cc:5c:a8:89:b5:35:a3:c9:d5:6f:9a:
76:5c:16:2c:69:db:f7:78:95:dc:99:70:c5:41:87:
79:5d:ed:26:6f:0d:55:3a:c5:1f:72:36:8e:27:d7:
e1:f4:85:b8:bf:95:7b:30:eb:51:01:90:bc:ff:40:
dc:1b:38:0c:58:23:4b:3e:63:12:4f:b8:44:8d:df:
9e:43:87:d8:30:35:c4:02:63:a0:9c:83:08:03:73:
fb:4a:36:c3:13:34:df:2b:3c:90:41:1d:fb:44:c9:
f2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F9:00:83:78:09:8F:A7:46:11:26:72:C4:71:85:0C:73:F3:8E:80
X509v3 Authority Key Identifier:
keyid:73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:76:1e:29:fb:4d:ea:49:11:0b:66:dd:97:6f:4a:3f:95:af:
de:bf:af:ba:70:bc:43:0f:5c:fb:af:d8:9a:9e:8e:f8:6f:08:
f1:8a:d0:ff:0b:c7:ae:83:f7:e6:b3:93:70:a0:02:6d:d0:7c:
c4:0a:fa:e6:ea:d7:f9:1c:fb:f5:84:e1:81:3e:77:fb:87:16:
23:a5:33:6d:76:60:49:49:c0:0d:84:d1:36:9c:06:af:bb:0b:
55:e8:59:25:d3:cb:68:11:03:62:8b:cd:cb:1b:f8:20:06:a9:
23:a0:a3:d5:89:8e:d6:73:a6:f5:b4:2d:08:68:31:6b:7d:a9:
a5:2f:06:0e:af:27:d2:df:ec:4c:cd:c1:30:1e:bd:9d:16:b9:
ab:54:25:6e:95:68:68:99:9e:c7:8a:da:5e:17:d6:bd:d9:e7:
9b:14:f1:1e:eb:dc:87:59:3d:94:66:02:1e:98:87:80:94:35:
23:0e:24:41:58:2e:61:96:a6:50:1d:9d:92:2b:78:51:3c:6c:
68:0f:8a:b0:4d:00:1a:96:bd:bc:27:7c:ee:7f:46:41:d6:a5:
c7:40:ed:3b:04:5c:01:4c:ef:09:7c:6e:0e:be:e5:2c:6b:e1:
37:75:41:c2:12:83:e7:50:ff:32:fd:49:c8:5f:c1:45:31:73:
84:88:0b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:05:08 2026 by rpki-client