Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
File: cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft (raw, json)
Hash identifier: DE84dDJIZI5J6LQS5F+F9UtMkqAkVn1YKUoAsje8fmM=
Subject key identifier: D4:C9:54:AF:66:A9:FC:10:F9:6C:21:95:68:F7:51:70:4B:A9:F2:72
Authority key identifier: 73:19:77:0F:FB:48:7E:39:10:DD:44:D9:DB:0A:53:4D:8D:EF:78:FA
Certificate issuer: /CN=7319770ffb487e3910dd44d9db0a534d8def78fa
Certificate serial: 01A1E0CCBD88324BFED8CCD7B95D2F990D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
Manifest number: 01BC
Signing time: Sun 15 Nov 2026 20:01:16 +0000
Manifest this update: Sun 15 Nov 2026 20:01:16 +0000
Manifest next update: Mon 16 Nov 2026 20:01:16 +0000
Files and hashes: 1: J-ZrGngsinzzxKhty_0eOSBvSyE.roa (hash: yEjmBQt7jbBwQjbfz6E3LLZh+zLBv/2IV7cQ/+10/as=)
2: cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl (hash: ytXs8MpAkPYp3Iac83bmkhFnhb8nCic2BonV77UKOKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:cc:bd:88:32:4b:fe:d8:cc:d7:b9:5d:2f:99:0d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319770ffb487e3910dd44d9db0a534d8def78fa
Validity
Not Before: Nov 15 20:01:16 2026 GMT
Not After : Nov 16 20:01:16 2026 GMT
Subject: CN=d4c954af66a9fc10f96c219568f751704ba9f272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:53:90:49:b1:4a:5d:cb:7b:37:17:ba:58:d4:
5f:43:e1:a2:4c:bf:ca:ed:c9:7d:10:9c:84:f9:10:
1c:83:d7:67:bf:03:41:b6:76:a9:d4:69:7f:18:e9:
8a:7f:45:aa:3c:48:fa:3c:f8:a6:52:b0:b0:2e:aa:
8b:44:d3:bf:c8:0e:ec:7d:b0:70:67:3a:52:f2:c1:
ca:99:c3:7a:37:55:7a:ab:d6:45:b8:90:6b:57:e9:
81:af:e7:25:ac:ad:d0:92:74:30:89:16:76:67:08:
0a:a0:de:8b:cb:3b:5f:24:3e:f3:98:87:ac:4e:e9:
80:19:56:86:84:59:8f:5c:e2:04:73:96:f8:22:a1:
98:d2:36:cd:54:f9:6b:b0:9a:c5:45:13:01:0c:a1:
84:02:4d:08:f6:7b:45:bc:e6:ec:6a:08:1c:e8:b2:
8d:1a:d9:94:e6:11:3e:5e:02:9e:55:bb:0a:03:c6:
41:3f:20:82:45:ff:f6:40:53:f4:df:d6:f1:34:6d:
4d:ef:27:fc:23:7b:db:59:01:3c:c4:f1:c4:60:b8:
58:64:9e:b0:e1:66:dc:08:57:0b:f2:3f:fa:37:a4:
ba:6e:d5:f2:fb:9b:62:5c:71:db:13:b1:5d:65:15:
9f:67:b1:3d:ac:2a:21:fa:67:e1:7e:05:ab:9c:fd:
f5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C9:54:AF:66:A9:FC:10:F9:6C:21:95:68:F7:51:70:4B:A9:F2:72
X509v3 Authority Key Identifier:
keyid:73:19:77:0F:FB:48:7E:39:10:DD:44:D9:DB:0A:53:4D:8D:EF:78:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:82:13:4a:a6:6f:f3:37:fa:7d:6d:b9:a1:82:6f:3d:46:b8:
1f:31:93:72:9e:0a:e5:52:56:dd:d5:e9:b3:28:78:0e:cb:91:
a4:ce:aa:a9:fb:e6:d3:d9:29:8b:07:8d:41:bd:36:52:46:3f:
98:f3:b0:c6:0a:6f:a5:6d:3c:08:b3:96:b1:83:e2:a5:51:aa:
fe:89:64:0b:48:1e:f8:29:c0:39:20:6f:48:ef:48:59:f2:a3:
cb:a4:8f:27:97:f2:17:81:79:60:8a:d5:7f:84:c6:4c:2b:4d:
e0:89:a3:a0:c2:ac:55:b9:60:0f:c5:0c:d4:4e:a2:c2:4d:bb:
d3:39:92:6b:0d:2d:64:3b:44:e9:c1:ce:ff:4e:fe:f0:ff:4c:
60:8e:d0:be:01:12:8e:f2:38:89:1d:2e:7b:46:c5:9f:47:9d:
0b:8e:5f:b8:74:9b:ae:06:a4:7d:30:41:13:e9:9c:35:94:eb:
16:26:18:48:d0:72:83:29:f7:37:a3:59:40:74:05:5d:1d:80:
95:15:14:38:05:51:8b:be:c1:f0:08:1e:3e:1b:19:67:a1:68:
85:4b:ac:54:fa:68:c8:02:4c:e2:6b:ae:9b:31:a1:23:89:95:
b3:2b:8d:ad:57:1f:d0:7f:47:5e:a4:6c:9c:f4:72:eb:74:48:
55:6d:13:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHgzL2IMkv+2MzXuV0vmQ0rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMTk3NzBmZmI0ODdlMzkxMGRkNDRkOWRiMGE1MzRkOGRl
Zjc4ZmEwHhcNMjYxMTE1MjAwMTE2WhcNMjYxMTE2MjAwMTE2WjAzMTEwLwYDVQQD
EyhkNGM5NTRhZjY2YTlmYzEwZjk2YzIxOTU2OGY3NTE3MDRiYTlmMjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VOQSbFKXct7Nxe6WNRfQ+GiTL/K
7cl9EJyE+RAcg9dnvwNBtnap1Gl/GOmKf0WqPEj6PPimUrCwLqqLRNO/yA7sfbBw
ZzpS8sHKmcN6N1V6q9ZFuJBrV+mBr+clrK3QknQwiRZ2ZwgKoN6LyztfJD7zmIes
TumAGVaGhFmPXOIEc5b4IqGY0jbNVPlrsJrFRRMBDKGEAk0I9ntFvObsaggc6LKN
GtmU5hE+XgKeVbsKA8ZBPyCCRf/2QFP039bxNG1N7yf8I3vbWQE8xPHEYLhYZJ6w
4WbcCFcL8j/6N6S6btXy+5tiXHHbE7FdZRWfZ7E9rCoh+mfhfgWrnP31bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTJVK9mqfwQ+WwhlWj3UXBLqfJyMB8GA1UdIwQY
MBaAFHMZdw/7SH45EN1E2dsKU02N73j6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3hsM0RfdElmamtRM1VUWjJ3cFRUWTN2ZVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81OGM5YTAtZmZjZi00MGI4LTk3YmMt
ZWYwYTdjMTUwNzE2LzEvY3hsM0RfdElmamtRM1VUWjJ3cFRUWTN2ZVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi81OGM5YTAtZmZjZi00MGI4LTk3YmMtZWYwYTdjMTUwNzE2
LzEvY3hsM0RfdElmamtRM1VUWjJ3cFRUWTN2ZVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIITSqZv
8zf6fW25oYJvPUa4HzGTcp4K5VJW3dXpsyh4DsuRpM6qqfvm09kpiweNQb02UkY/
mPOwxgpvpW08CLOWsYPipVGq/olkC0ge+CnAOSBvSO9IWfKjy6SPJ5fyF4F5YIrV
f4TGTCtN4ImjoMKsVblgD8UM1E6iwk270zmSaw0tZDtE6cHO/07+8P9MYI7QvgES
jvI4iR0ue0bFn0edC45fuHSbrgakfTBBE+mcNZTrFiYYSNBygyn3N6NZQHQFXR2A
lRUUOAVRi77B8AgePhsZZ6FohUusVPpoyAJM4muumzGhI4mVsyuNrVcf0H9HXqRs
nPRy63RIVW0Tug==
-----END CERTIFICATE-----
Generated at Sun Nov 15 23:43:03 2026 by rpki-client