Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
File: cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft (raw, json)
Hash identifier: ngosM5YV/HbRor7+m5hXZXU1+NvX16EjkIXCyGKaHe4=
Subject key identifier: FF:C8:C9:79:1E:2B:8C:AF:4F:D4:22:65:44:47:F4:CB:90:7E:63:7F
Authority key identifier: 73:19:77:0F:FB:48:7E:39:10:DD:44:D9:DB:0A:53:4D:8D:EF:78:FA
Certificate issuer: /CN=7319770ffb487e3910dd44d9db0a534d8def78fa
Certificate serial: 019EC2921187BFA578CA193EAACC4DA5A6C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
Manifest number: 1E
Signing time: Sat 13 Jun 2026 20:00:12 +0000
Manifest this update: Sat 13 Jun 2026 20:00:12 +0000
Manifest next update: Sun 14 Jun 2026 20:00:12 +0000
Files and hashes: 1: 4VECAtiWqje_60X7y9lsdprg2oI.roa (hash: +zMygkYKU5ImT2bqbHmd0qv5emwVpKIl+ThnFqmu454=)
2: cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl (hash: S0PWVVcEKUzPIOtrc0LUvCS2FmHZIBoGmGbzFPW1axo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:11:87:bf:a5:78:ca:19:3e:aa:cc:4d:a5:a6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319770ffb487e3910dd44d9db0a534d8def78fa
Validity
Not Before: Jun 13 20:00:12 2026 GMT
Not After : Jun 14 20:00:12 2026 GMT
Subject: CN=ffc8c9791e2b8caf4fd422654447f4cb907e637f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:16:17:b5:fe:8c:87:8e:4f:fe:ea:9c:28:a0:
74:6a:ab:f3:b2:c0:56:9f:4e:38:6b:ea:14:6b:8e:
66:59:b6:00:7a:3f:58:6e:c5:ed:31:f3:50:fe:63:
c7:02:06:46:11:c9:96:b8:0c:01:2d:50:82:41:c8:
f9:b4:7e:50:a8:bd:ad:95:c4:fb:9c:b8:dc:b6:32:
00:74:da:79:7b:b1:4a:78:f2:74:d6:ef:e4:de:79:
85:b7:cb:fd:a8:d8:0e:db:b1:4b:05:a0:20:ed:2c:
f0:a8:0d:bd:b3:d3:92:8f:0c:4f:56:ae:79:19:9c:
8d:5f:cb:c8:9a:b9:59:e6:d5:12:3b:79:7f:3a:a3:
3c:e4:f8:41:cb:1e:fe:0f:ec:af:34:3f:dd:94:9c:
c9:8a:bd:a5:92:c7:c1:7a:11:7b:ef:f9:d7:96:da:
e2:1a:37:0e:3e:61:98:d1:7d:b1:24:e7:08:29:e1:
7f:d9:03:98:33:96:f9:3b:95:02:50:9c:23:59:90:
a1:91:9e:05:2d:11:ea:25:d7:a3:25:4c:71:a6:5d:
a8:b9:0e:d1:a8:5f:a6:f2:63:19:37:c8:d3:e0:12:
9b:08:6f:23:6d:bc:ac:9d:8e:01:62:69:18:fc:6c:
0f:d1:65:23:88:ed:6c:2b:d6:49:60:db:c8:b3:11:
c0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C8:C9:79:1E:2B:8C:AF:4F:D4:22:65:44:47:F4:CB:90:7E:63:7F
X509v3 Authority Key Identifier:
keyid:73:19:77:0F:FB:48:7E:39:10:DD:44:D9:DB:0A:53:4D:8D:EF:78:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7f:a8:75:ea:b6:3f:f7:99:30:1e:5b:03:0e:0d:ea:87:69:
94:ff:a2:a7:a8:22:bf:0e:9b:b7:c1:d4:30:42:d7:8c:08:c8:
2e:1c:dc:c9:2c:03:d1:b7:a3:f3:f7:8f:1c:5d:29:0d:43:b2:
8f:30:12:2a:63:14:5c:49:1a:41:0d:f4:0e:0f:ba:8d:d7:3e:
85:10:49:f7:e5:d5:35:89:f8:1a:0b:89:74:f9:21:c7:5b:e1:
3b:c2:19:e2:6a:e8:b4:40:6f:51:95:79:aa:e7:b3:74:73:de:
d1:49:3e:1e:24:36:d1:b1:67:ac:c4:d0:99:ca:4b:9a:70:7c:
d6:1e:e1:4a:68:ea:09:e8:17:60:80:01:82:72:e0:fe:ee:22:
ff:ee:1d:e3:e4:12:0b:a4:6d:c2:71:48:ce:43:9b:0b:9a:94:
e3:75:1e:28:26:f6:a8:dd:74:41:57:a2:28:26:d1:bb:1c:67:
46:1a:fd:ed:de:9d:b5:bd:8d:86:85:77:2c:e4:70:85:8d:d5:
30:f9:2e:12:e6:c8:e6:80:d8:a9:9f:32:7b:7a:81:02:23:36:
a2:d1:b6:9d:57:2d:89:11:f1:1b:a0:34:35:79:a2:94:8e:1c:
7b:00:25:99:a0:77:d2:d2:b3:56:a2:10:e3:1f:c7:8f:4b:33:
99:32:90:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:12:33 2026 by rpki-client