Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.mft
File: Cx_IbXySo01haTZCvs_-mgnkq5M.mft (raw, json)
Hash identifier: P2hxQDI4lb1crDLLAr4+eRP5IJRG9iJ0W8V37ul2Czs=
Subject key identifier: 1E:65:BA:2A:27:91:01:10:A4:3E:25:20:8F:B9:08:B3:1F:3C:4C:57
Authority key identifier: 0B:1F:C8:6D:7C:92:A3:4D:61:69:36:42:BE:CF:FE:9A:09:E4:AB:93
Certificate issuer: /CN=0b1fc86d7c92a34d61693642becffe9a09e4ab93
Certificate serial: 01A0C669C53AF0F2D82A9EDEE6EB98B8B2FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx_IbXySo01haTZCvs_-mgnkq5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.mft
Manifest number: E0
Signing time: Tue 22 Sep 2026 00:00:15 +0000
Manifest this update: Tue 22 Sep 2026 00:00:15 +0000
Manifest next update: Wed 23 Sep 2026 00:00:15 +0000
Files and hashes: 1: Cx_IbXySo01haTZCvs_-mgnkq5M.crl (hash: lkHTMEhEXIYNfgofAvlSjIfThNDjJLdYtIXWU7+ZsSY=)
2: Sh2PEP2-MbPB0IM3ViP0tnARGnw.roa (hash: aLTyx16ru8CGVowWY4gCMQ3X+iZjRgCKx74BRuePAjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx_IbXySo01haTZCvs_-mgnkq5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:69:c5:3a:f0:f2:d8:2a:9e:de:e6:eb:98:b8:b2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1fc86d7c92a34d61693642becffe9a09e4ab93
Validity
Not Before: Sep 22 00:00:15 2026 GMT
Not After : Sep 23 00:00:15 2026 GMT
Subject: CN=1e65ba2a27910110a43e25208fb908b31f3c4c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fc:fe:fa:fa:d4:45:c6:3a:b1:ae:a9:ac:3c:
a8:c8:5a:b7:1d:97:7e:2d:5a:65:02:3f:5d:bb:42:
a1:77:d6:30:e0:c1:80:cf:87:1a:54:9f:30:b1:a6:
5e:37:59:46:a9:a4:34:00:dd:72:6e:b5:55:8f:5b:
34:5e:86:bc:35:aa:8f:aa:b6:43:6f:7b:d7:cd:32:
7c:f5:a9:85:5e:f0:0c:4d:14:6b:12:01:2b:cb:29:
e2:ee:6a:11:06:71:e0:e9:4d:4c:8b:5d:4f:ee:41:
d3:eb:10:9c:7a:a2:87:b7:66:8f:31:24:15:57:fc:
c3:e6:a5:91:23:1a:b1:9e:45:6e:51:1a:51:14:2a:
24:79:63:fb:bc:cc:43:92:9a:c4:3d:4e:c2:74:d6:
c0:e8:91:37:36:70:9b:c1:a4:43:61:b7:b7:8f:04:
80:4d:e0:02:e8:6c:d0:53:da:59:c1:e7:e3:b7:0b:
91:92:94:16:37:54:b8:fb:4c:2d:fa:36:93:42:3a:
7d:a1:93:54:00:c7:96:b3:b1:9d:9a:a1:8d:bd:ce:
e1:1c:7a:a0:e4:75:ad:a0:3b:b9:04:a2:fb:6d:9f:
7e:98:da:c4:cc:df:42:a7:3c:e3:79:d1:65:b1:2d:
d6:50:1e:14:7a:5d:54:cd:4e:c2:f4:e6:d5:09:c9:
10:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:65:BA:2A:27:91:01:10:A4:3E:25:20:8F:B9:08:B3:1F:3C:4C:57
X509v3 Authority Key Identifier:
keyid:0B:1F:C8:6D:7C:92:A3:4D:61:69:36:42:BE:CF:FE:9A:09:E4:AB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx_IbXySo01haTZCvs_-mgnkq5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:dc:7c:55:bb:ee:eb:16:e3:2d:65:89:00:d2:e4:ba:19:80:
01:4d:23:87:22:75:1c:28:0c:c2:44:0a:0d:ed:f9:3e:c4:c8:
02:cf:26:dc:de:77:0b:d2:38:53:c4:5f:de:93:6e:0d:3a:bf:
54:74:83:03:ee:86:e2:a7:13:7e:fb:80:0d:41:81:9e:5e:f8:
8b:c3:b5:d6:44:49:ea:4a:97:0b:72:f8:4a:b4:b1:35:e7:a0:
b9:9c:8b:3d:f2:14:f9:ac:2a:0f:aa:76:f5:75:63:8c:58:43:
ec:27:c9:2f:aa:6f:d6:42:0b:f3:24:e6:62:06:02:97:85:11:
1f:b8:23:69:6b:66:ee:2d:a8:a2:21:fc:7c:a0:e6:bd:2d:f3:
58:ab:de:b9:f1:1b:b6:c3:00:d0:94:17:3d:f9:d3:a0:37:e2:
7c:66:7c:6d:12:38:8e:73:2a:32:3f:76:6c:a3:f2:ac:94:11:
f9:20:a8:53:c0:63:3c:34:df:30:7e:0a:b7:91:23:d6:b2:39:
f5:05:4b:56:13:18:11:73:be:9e:7d:39:b4:37:12:70:78:62:
61:7f:b3:48:21:d6:85:31:2a:00:1e:3f:ad:e2:69:e7:e2:51:
a0:19:cd:72:28:bb:86:a9:66:8d:a6:b0:07:bb:c3:9e:a3:b7:
95:ae:fb:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGacU68PLYKp7e5uuYuLL8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMWZjODZkN2M5MmEzNGQ2MTY5MzY0MmJlY2ZmZTlhMDll
NGFiOTMwHhcNMjYwOTIyMDAwMDE1WhcNMjYwOTIzMDAwMDE1WjAzMTEwLwYDVQQD
EygxZTY1YmEyYTI3OTEwMTEwYTQzZTI1MjA4ZmI5MDhiMzFmM2M0YzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPz++vrURcY6sa6prDyoyFq3HZd+
LVplAj9du0Khd9Yw4MGAz4caVJ8wsaZeN1lGqaQ0AN1ybrVVj1s0Xoa8NaqPqrZD
b3vXzTJ89amFXvAMTRRrEgEryyni7moRBnHg6U1Mi11P7kHT6xCceqKHt2aPMSQV
V/zD5qWRIxqxnkVuURpRFCokeWP7vMxDkprEPU7CdNbA6JE3NnCbwaRDYbe3jwSA
TeAC6GzQU9pZwefjtwuRkpQWN1S4+0wt+jaTQjp9oZNUAMeWs7GdmqGNvc7hHHqg
5HWtoDu5BKL7bZ9+mNrEzN9CpzzjedFlsS3WUB4Uel1UzU7C9ObVCckQVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5luionkQEQpD4lII+5CLMfPExXMB8GA1UdIwQY
MBaAFAsfyG18kqNNYWk2Qr7P/poJ5KuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3hfSWJYeVNvMDFoYVRaQ3ZzXy1tZ25rcTVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yZDk1ZTctYmExNy00NzdmLTg5Yjct
ZGE1ZjZhNjU4ZjhiLzEvQ3hfSWJYeVNvMDFoYVRaQ3ZzXy1tZ25rcTVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8yZDk1ZTctYmExNy00NzdmLTg5YjctZGE1ZjZhNjU4Zjhi
LzEvQ3hfSWJYeVNvMDFoYVRaQ3ZzXy1tZ25rcTVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo9x8Vbvu
6xbjLWWJANLkuhmAAU0jhyJ1HCgMwkQKDe35PsTIAs8m3N53C9I4U8Rf3pNuDTq/
VHSDA+6G4qcTfvuADUGBnl74i8O11kRJ6kqXC3L4SrSxNeeguZyLPfIU+awqD6p2
9XVjjFhD7CfJL6pv1kIL8yTmYgYCl4URH7gjaWtm7i2ooiH8fKDmvS3zWKveufEb
tsMA0JQXPfnToDfifGZ8bRI4jnMqMj92bKPyrJQR+SCoU8BjPDTfMH4Kt5Ej1rI5
9QVLVhMYEXO+nn05tDcScHhiYX+zSCHWhTEqAB4/reJp5+JRoBnNcii7hqlmjaaw
B7vDnqO3la77Ew==
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:02:40 2026 by rpki-client