
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
File: CxxtDecMxRgFtjpeIydiJSXQdbE.mft (raw, json)
Hash identifier: Q/ZRriCabmlslssAufwCCIeyS2Dc9HBTErzWzr+AzLc=
Subject key identifier: F9:B2:5E:91:68:23:16:0F:EF:07:47:3A:5A:04:F8:0A:8C:B8:78:BB
Authority key identifier: 0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
Certificate issuer: /CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Certificate serial: 019D988652142B44FBC3B5F7F9D889BAACC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
Manifest number: 0A46
Signing time: Thu 16 Apr 2026 23:00:32 +0000
Manifest this update: Thu 16 Apr 2026 23:00:32 +0000
Manifest next update: Fri 17 Apr 2026 23:00:32 +0000
Files and hashes: 1: CxxtDecMxRgFtjpeIydiJSXQdbE.crl (hash: 9MbT1EzsFOOxPNzbhM4rg1UaBfaihbnCpbkHpmYlsXA=)
2: JjNsdw31mkopTJEXLbd7F3jftjY.roa (hash: DFuBhTTsIvaSw7xpZBBqOn0fJhT7O4EMyfeXK8BYOr4=)
3: Z3vCIqOr8cFIHfCAG87UHRnj4gs.roa (hash: Nj8uppubigdG8cIGJW1LyHCqaPIHngDL7HFSlaeDITs=)
4: jN1MNJJzz6nkhurADJXEP9ytqmM.roa (hash: GRqEsDxhV3ugvj9OHpXpUsMc7ljdeWmRso4kAcjjsao=)
5: omXxQha0HM-pJ0TV0_0uSHRjPXE.roa (hash: Jj3CyBugiBkfT/V/5P2VA5GoJM48HMeye5aq9QG9uls=)
6: ps5j8iyfZH5bJ04s3Df24Oa-Z90.roa (hash: 561YCOwWidkLUNxZ27ftIMouBGOfKq4wJsC6Y9JLTu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:52:14:2b:44:fb:c3:b5:f7:f9:d8:89:ba:ac:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Validity
Not Before: Apr 16 23:00:32 2026 GMT
Not After : Apr 17 23:00:32 2026 GMT
Subject: CN=f9b25e916823160fef07473a5a04f80a8cb878bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:64:0e:9b:90:13:3b:f2:c2:2a:3c:c8:42:5b:
79:9e:6a:82:0e:45:4b:0a:34:88:48:77:8c:94:c9:
0e:8c:4e:7d:f1:ba:8c:06:b9:f5:f7:ea:2e:a1:f5:
84:38:7c:df:b3:76:96:db:9d:23:83:06:b2:91:f6:
77:77:d3:da:9b:05:b9:33:7b:1b:0c:83:7e:76:20:
b8:a7:8b:7f:b1:1d:85:26:e7:34:5c:d2:2e:79:61:
7f:a2:67:62:07:6f:82:22:1a:53:3b:59:2c:ab:30:
78:bb:4b:da:64:8f:40:79:01:d1:f9:90:87:6b:78:
26:dc:a0:cb:00:30:18:d5:bd:59:cd:67:5e:9f:70:
f4:0a:ae:bd:b3:d5:0a:38:96:a8:9b:7c:82:11:52:
50:db:7e:c0:25:9f:7d:97:fb:6d:f7:2d:ee:91:5a:
96:58:9f:8a:9c:b2:10:08:b2:51:74:29:5e:a4:31:
18:a7:bd:a7:10:af:4a:d2:12:67:6e:9d:f4:c8:0c:
1d:e7:76:56:9a:42:5a:6e:e4:b7:3a:ad:5b:08:3d:
c2:a9:cf:de:22:9c:a4:1a:be:72:2d:72:c8:2d:ff:
27:46:22:17:d3:d9:4a:4a:51:35:f7:c9:19:cc:8f:
42:8c:cd:23:be:1b:dd:fe:af:1f:c7:d4:60:bc:37:
3e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B2:5E:91:68:23:16:0F:EF:07:47:3A:5A:04:F8:0A:8C:B8:78:BB
X509v3 Authority Key Identifier:
keyid:0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:5a:6d:bc:e4:8b:d3:99:e2:41:6a:04:33:78:21:af:8d:38:
c8:50:62:d7:af:4d:90:2f:d8:7b:e7:d3:c3:ba:83:7d:a5:b4:
31:d9:de:80:3f:06:a0:dc:52:1f:60:89:e8:a0:f3:37:b7:fa:
15:c3:34:51:43:96:8e:a8:d2:91:0f:32:cb:af:c2:7b:d3:04:
ee:ac:b7:16:5b:02:4e:66:ac:bc:31:4f:f9:b7:2d:10:c2:d4:
70:b0:53:33:eb:11:99:7e:e5:9b:31:06:85:5b:83:0e:ad:85:
67:0f:d7:1d:e7:22:fb:17:e5:55:e1:42:b5:2d:63:61:8d:d1:
f3:3e:8c:9b:62:40:a4:b9:f5:28:57:62:31:07:3f:4f:19:e8:
f8:73:78:80:65:e0:c5:24:ea:76:7a:f5:b5:60:c9:cc:50:4e:
77:79:84:ba:32:bc:ca:30:08:5b:27:08:6a:f8:4f:59:1e:24:
d3:8c:60:07:9b:f0:91:69:df:8c:19:2d:3b:f3:2c:0e:36:a9:
42:7f:43:52:46:93:17:50:17:13:3c:cc:4b:83:3f:bc:43:d5:
a3:42:0f:94:74:c0:81:04:78:a6:59:ba:7d:fb:58:c6:8d:82:
25:6d:47:05:91:5a:84:da:c1:e2:64:57:e5:ef:3d:2b:a7:75:
c9:8d:e0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:27:18 2026 by rpki-client