Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.mft
File: Cx_IbXySo01haTZCvs_-mgnkq5M.mft (raw, json)
Hash identifier: Q0a70JC3jshrEyrnuK7nGcqQaOJoubBCgCZLkG804QQ=
Subject key identifier: 5A:65:E0:49:0A:A2:A4:04:46:FB:59:1D:88:CC:E2:81:A7:7C:56:9D
Authority key identifier: 0B:1F:C8:6D:7C:92:A3:4D:61:69:36:42:BE:CF:FE:9A:09:E4:AB:93
Certificate issuer: /CN=0b1fc86d7c92a34d61693642becffe9a09e4ab93
Certificate serial: 019FA899806BF82F929516F24DA11EA2E58E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx_IbXySo01haTZCvs_-mgnkq5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:59 +0000
Manifest this update: Tue 28 Jul 2026 12:00:59 +0000
Manifest next update: Wed 29 Jul 2026 12:00:59 +0000
Files and hashes: 1: Cx_IbXySo01haTZCvs_-mgnkq5M.crl (hash: VnHroR3iEOg1zHQm14EQ5ME/f5dL6jdWoUQwCmi9xls=)
2: Sh2PEP2-MbPB0IM3ViP0tnARGnw.roa (hash: aLTyx16ru8CGVowWY4gCMQ3X+iZjRgCKx74BRuePAjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx_IbXySo01haTZCvs_-mgnkq5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:80:6b:f8:2f:92:95:16:f2:4d:a1:1e:a2:e5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1fc86d7c92a34d61693642becffe9a09e4ab93
Validity
Not Before: Jul 28 12:00:59 2026 GMT
Not After : Jul 29 12:00:59 2026 GMT
Subject: CN=5a65e0490aa2a40446fb591d88cce281a77c569d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c0:79:57:97:df:6b:6a:84:29:82:f6:af:5d:
ac:b5:45:e0:82:aa:a2:7f:7a:0c:21:de:37:bf:7c:
91:a6:10:1c:fe:ad:a2:33:c1:33:c2:c5:62:e8:75:
27:47:fa:50:f4:39:da:38:ca:08:80:d4:5f:32:96:
fa:bb:73:a8:ab:b8:7d:ab:f7:7c:71:02:ab:af:03:
5e:d8:6a:6c:bd:fe:56:ab:3d:24:d4:32:ec:14:19:
80:e0:b9:18:96:17:d3:61:4a:f2:a5:fa:79:c1:47:
80:ae:fe:1b:39:bb:ac:36:81:df:36:37:3f:6d:52:
da:b8:87:c8:03:e0:55:f8:24:f7:de:41:6b:ca:29:
06:b9:92:f5:b3:a3:30:4a:cd:25:6d:9d:b8:0e:9d:
85:a4:38:fd:35:66:40:1d:f0:57:a0:d1:ce:db:e3:
cb:73:8a:70:71:e9:d2:e7:43:01:fa:ca:55:eb:6f:
30:4b:94:f7:5c:4f:fb:82:bf:ad:f8:ac:50:34:43:
57:65:bf:98:50:ce:c7:1d:0c:9d:58:d4:4f:02:fd:
2f:7a:5c:f6:75:c4:e3:b3:e7:17:0a:d8:a4:3f:c8:
e6:50:91:66:a6:d3:87:68:21:4a:0f:2f:55:e2:13:
4c:f0:2e:2a:a6:16:36:15:f6:ca:7a:b8:12:a8:ce:
97:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:65:E0:49:0A:A2:A4:04:46:FB:59:1D:88:CC:E2:81:A7:7C:56:9D
X509v3 Authority Key Identifier:
keyid:0B:1F:C8:6D:7C:92:A3:4D:61:69:36:42:BE:CF:FE:9A:09:E4:AB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx_IbXySo01haTZCvs_-mgnkq5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:87:39:37:62:e7:1b:b8:e8:77:b7:6e:81:f5:6f:52:93:8c:
17:4c:2c:12:56:80:49:90:71:0d:74:dd:ef:77:ba:f9:38:7a:
c2:f5:11:20:2c:a8:2d:ce:f5:e7:5b:fe:9c:68:f6:0e:af:50:
e7:4d:73:51:a1:18:2d:38:91:79:24:04:2f:c8:e2:81:9b:0f:
e8:41:9f:78:2a:da:51:89:29:31:73:4c:5f:fa:2d:68:5d:74:
19:cf:5b:20:06:d4:7f:ca:78:34:91:76:2b:37:7a:4f:ac:93:
50:82:d7:cb:2d:b7:cb:27:bc:a9:f4:b2:d9:53:0e:23:6d:c5:
da:12:c6:74:9f:84:5f:61:d7:de:cf:13:2a:6e:0c:1f:0f:06:
82:03:94:e3:ea:cb:ee:f6:91:75:62:46:f5:2d:21:00:37:65:
c6:89:15:57:7f:15:f1:89:6d:0e:86:29:06:d8:da:9c:f8:18:
de:2b:92:f5:56:eb:74:4f:cc:8e:68:97:77:60:bc:24:84:33:
3c:9e:66:83:2a:1c:0c:db:07:c3:c0:59:04:d5:5c:05:dd:0c:
9b:07:50:69:4b:71:71:fe:67:39:6e:aa:1f:54:a4:f5:3d:ae:
b4:06:3e:a5:1f:22:5d:18:3d:41:38:6c:a3:f9:46:31:4b:01:
85:2b:91:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omYBr+C+SlRbyTaEeouWOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMWZjODZkN2M5MmEzNGQ2MTY5MzY0MmJlY2ZmZTlhMDll
NGFiOTMwHhcNMjYwNzI4MTIwMDU5WhcNMjYwNzI5MTIwMDU5WjAzMTEwLwYDVQQD
Eyg1YTY1ZTA0OTBhYTJhNDA0NDZmYjU5MWQ4OGNjZTI4MWE3N2M1NjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18B5V5ffa2qEKYL2r12stUXggqqi
f3oMId43v3yRphAc/q2iM8EzwsVi6HUnR/pQ9DnaOMoIgNRfMpb6u3Ooq7h9q/d8
cQKrrwNe2Gpsvf5Wqz0k1DLsFBmA4LkYlhfTYUrypfp5wUeArv4bObusNoHfNjc/
bVLauIfIA+BV+CT33kFryikGuZL1s6MwSs0lbZ24Dp2FpDj9NWZAHfBXoNHO2+PL
c4pwcenS50MB+spV628wS5T3XE/7gr+t+KxQNENXZb+YUM7HHQydWNRPAv0velz2
dcTjs+cXCtikP8jmUJFmptOHaCFKDy9V4hNM8C4qphY2FfbKergSqM6XdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpl4EkKoqQERvtZHYjM4oGnfFadMB8GA1UdIwQY
MBaAFAsfyG18kqNNYWk2Qr7P/poJ5KuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3hfSWJYeVNvMDFoYVRaQ3ZzXy1tZ25rcTVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yZDk1ZTctYmExNy00NzdmLTg5Yjct
ZGE1ZjZhNjU4ZjhiLzEvQ3hfSWJYeVNvMDFoYVRaQ3ZzXy1tZ25rcTVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8yZDk1ZTctYmExNy00NzdmLTg5YjctZGE1ZjZhNjU4Zjhi
LzEvQ3hfSWJYeVNvMDFoYVRaQ3ZzXy1tZ25rcTVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4c5N2Ln
G7jod7dugfVvUpOMF0wsElaASZBxDXTd73e6+Th6wvURICyoLc7151v+nGj2Dq9Q
501zUaEYLTiReSQEL8jigZsP6EGfeCraUYkpMXNMX/otaF10Gc9bIAbUf8p4NJF2
Kzd6T6yTUILXyy23yye8qfSy2VMOI23F2hLGdJ+EX2HX3s8TKm4MHw8GggOU4+rL
7vaRdWJG9S0hADdlxokVV38V8YltDoYpBtjanPgY3iuS9VbrdE/MjmiXd2C8JIQz
PJ5mgyocDNsHw8BZBNVcBd0MmwdQaUtxcf5nOW6qH1Sk9T2utAY+pR8iXRg9QThs
o/lGMUsBhSuRhA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:04:04 2026 by rpki-client