Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
File: cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft (raw, json)
Hash identifier: V6uQQAk1Efqu/9nULFDkhfsFwSUY9vVoQjywcY8/31A=
Subject key identifier: 78:39:C8:6D:DB:61:40:07:42:4C:5E:2B:03:C7:A2:8D:53:44:5E:0C
Authority key identifier: 73:19:77:0F:FB:48:7E:39:10:DD:44:D9:DB:0A:53:4D:8D:EF:78:FA
Certificate issuer: /CN=7319770ffb487e3910dd44d9db0a534d8def78fa
Certificate serial: 01A0C6D7C1DC87A72FED512EEFA96E6AD979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
Manifest number: 012A
Signing time: Tue 22 Sep 2026 02:00:23 +0000
Manifest this update: Tue 22 Sep 2026 02:00:23 +0000
Manifest next update: Wed 23 Sep 2026 02:00:23 +0000
Files and hashes: 1: J-ZrGngsinzzxKhty_0eOSBvSyE.roa (hash: yEjmBQt7jbBwQjbfz6E3LLZh+zLBv/2IV7cQ/+10/as=)
2: cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl (hash: 1Dzsa+r4cRziXdshnJ+Yuylciq1eyc5CxH4A577yrYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:c1:dc:87:a7:2f:ed:51:2e:ef:a9:6e:6a:d9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319770ffb487e3910dd44d9db0a534d8def78fa
Validity
Not Before: Sep 22 02:00:23 2026 GMT
Not After : Sep 23 02:00:23 2026 GMT
Subject: CN=7839c86ddb614007424c5e2b03c7a28d53445e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fb:f3:78:a4:2c:03:d2:7d:05:48:63:8b:64:
e0:4e:1e:e5:d0:12:cd:2a:34:56:38:2d:1e:0c:81:
fb:b4:73:f2:19:cf:aa:6e:a8:6e:73:d6:b2:db:eb:
2c:9d:cf:8b:8e:e2:b3:05:5d:51:a3:38:6f:90:8c:
97:46:4e:19:62:15:ca:a2:3c:3b:21:a2:6f:34:f9:
22:12:90:2b:01:6f:41:31:9d:6f:2f:d1:02:89:91:
36:83:33:de:10:f0:da:88:fa:bb:dc:d1:51:ce:e3:
98:a9:e4:6d:52:3a:be:e8:d9:8f:a7:88:cb:b5:94:
1b:a6:05:9e:ae:7c:8f:99:4a:00:b7:07:69:5e:41:
e5:12:60:2c:aa:f4:ff:98:04:43:af:52:ba:e8:a8:
c8:9f:62:e5:88:9f:22:41:a3:23:86:83:c8:0c:d5:
66:d3:a6:3b:23:a9:43:50:ec:76:8d:22:1b:4a:10:
18:bc:0e:0d:b1:aa:c4:5b:8e:ba:fc:5e:e2:8f:ad:
09:aa:22:d2:88:4b:56:4a:d2:65:2b:57:03:ab:29:
c9:cd:87:8d:6a:5c:9d:06:96:3a:8f:53:85:d6:b2:
bb:45:ef:64:45:5f:e5:8d:80:b6:fa:9e:db:65:e2:
54:42:be:7a:40:12:de:f6:1c:22:1c:6c:55:6d:bc:
44:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:39:C8:6D:DB:61:40:07:42:4C:5E:2B:03:C7:A2:8D:53:44:5E:0C
X509v3 Authority Key Identifier:
keyid:73:19:77:0F:FB:48:7E:39:10:DD:44:D9:DB:0A:53:4D:8D:EF:78:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6f:69:3c:a5:5d:63:bd:8e:92:de:52:95:b0:13:5d:b5:e4:
d6:c5:2d:c7:04:d1:18:94:e8:f7:72:79:0c:d9:bc:1d:b2:a3:
f3:57:62:35:1b:6f:12:04:23:bd:cd:f3:e1:13:f9:18:89:78:
2d:ce:38:09:cc:66:ac:01:0e:77:38:3a:26:77:ce:d6:64:17:
f7:6e:f1:71:29:0b:fa:14:be:f7:58:0c:89:d9:46:0b:de:11:
03:08:d5:a8:e0:5b:97:04:dc:16:a2:92:f7:c7:7b:11:94:63:
eb:96:33:40:7d:6c:32:e6:42:86:40:f7:62:ea:a9:bd:33:86:
97:5f:5b:68:ea:6c:c0:06:0a:39:36:f4:80:20:a9:c7:54:1b:
64:65:65:ff:a9:4b:9e:1e:4c:43:fb:f7:ae:f2:87:83:ec:d3:
2f:26:aa:16:2f:e5:14:a2:7a:d8:e6:50:da:da:58:40:5e:d3:
ae:cd:18:ee:46:37:88:6a:b2:2c:6b:c4:57:12:cc:1b:48:62:
b8:6f:b4:23:f1:ac:88:fa:ec:ba:2f:4c:54:19:3b:10:63:66:
c1:f5:ff:ed:74:ae:82:ac:08:e3:dc:80:78:bf:65:a3:0c:fa:
57:0e:74:b6:af:e0:ad:23:d7:94:3a:3c:0c:ad:ef:7d:b0:c3:
4a:76:55:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:44:11 2026 by rpki-client