Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
File: cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft (raw, json)
Hash identifier: 6zPAVh9iZ/XEj5r7x9qcUX6v+xB73AQdTcAKiKg7dVQ=
Subject key identifier: AA:2A:76:0E:1F:63:5B:20:EF:B2:32:73:4E:EA:3E:69:16:B2:F5:43
Authority key identifier: 73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
Certificate issuer: /CN=7316772efce2a133fb7f8720929d0560cef1db46
Certificate serial: 019CAA58B6B8D33E8071F0A29405465DDFB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
Manifest number: 0650
Signing time: Sun 01 Mar 2026 17:01:06 +0000
Manifest this update: Sun 01 Mar 2026 17:01:06 +0000
Manifest next update: Mon 02 Mar 2026 17:01:06 +0000
Files and hashes: 1: W00kh9cFoXYEts6Z_wNoICvROmI.roa (hash: 6F92izfRGMl8gegm30l362lw0oFK4K1whATYCIM0f9A=)
2: cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl (hash: 2U+/u3SMxzYs31VEj3XjOkrifPYupjEMWBPdimFSqLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:b6:b8:d3:3e:80:71:f0:a2:94:05:46:5d:df:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7316772efce2a133fb7f8720929d0560cef1db46
Validity
Not Before: Mar 1 17:01:06 2026 GMT
Not After : Mar 2 17:01:06 2026 GMT
Subject: CN=aa2a760e1f635b20efb232734eea3e6916b2f543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1b:5d:06:9d:ee:0a:7f:f6:e5:7e:e7:47:91:
33:50:55:60:21:49:39:b8:4a:29:8a:0f:3a:69:8f:
36:12:a5:36:c6:88:4a:8d:e5:b9:c2:80:00:0c:2c:
1a:af:02:c2:e6:5e:68:10:cd:9c:88:3c:90:1e:95:
33:80:3c:97:66:a1:43:82:f3:14:08:c2:b1:9d:1c:
f9:9a:71:04:dc:48:67:85:cd:aa:3e:62:fa:fe:1e:
61:56:2f:8d:4f:9e:b3:1a:cf:71:9f:99:00:f0:66:
7e:d0:3c:23:dd:aa:74:64:e7:bc:dd:0c:f0:86:e4:
5e:5a:4f:46:1d:72:f5:7d:c5:f0:ce:69:60:62:25:
53:e2:d8:ae:fc:09:02:30:34:10:d9:d6:66:38:94:
9f:c1:2d:d2:74:08:56:d2:87:2a:97:4f:0d:5e:14:
5a:89:eb:3c:36:15:22:41:80:26:8a:da:00:35:0e:
ca:18:e8:6b:fe:b0:3b:83:23:40:5d:d9:4b:7d:e1:
72:0d:d0:3d:40:99:43:af:21:80:44:8c:eb:da:69:
29:67:d3:e6:f4:7b:03:e8:b1:69:80:1e:f5:75:b9:
07:d8:50:a6:66:9c:13:17:43:c0:6b:07:90:3b:3f:
a7:9c:ee:92:7d:3e:4f:89:8b:bd:24:7f:50:dd:e5:
fc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2A:76:0E:1F:63:5B:20:EF:B2:32:73:4E:EA:3E:69:16:B2:F5:43
X509v3 Authority Key Identifier:
keyid:73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e0:a2:8d:cf:be:66:84:8d:87:51:66:d1:63:d6:57:8b:30:
3d:0a:b3:76:c9:77:69:f0:ae:47:7d:01:e5:87:b5:07:66:7f:
16:83:ed:d2:60:49:7a:21:c7:5d:f4:96:ae:90:de:38:f6:a2:
9b:95:4f:40:6b:06:52:f8:b2:2c:b2:fc:04:57:4f:df:6e:ca:
dd:72:2a:56:2c:42:97:fb:fd:ef:04:ce:ec:b6:c9:0a:45:61:
de:d7:87:bf:d1:99:ef:20:2f:0d:f4:94:d5:17:53:6c:c3:62:
2f:f6:e1:ab:99:61:8b:00:73:35:50:94:d7:c6:8c:b4:6c:70:
05:48:c7:4d:f5:34:36:e2:e3:99:6a:b1:0c:b2:39:10:31:82:
09:d4:1a:30:97:73:81:9f:26:83:0b:ff:3b:d0:b2:fe:17:5b:
a0:da:4e:98:16:6c:c5:08:f4:08:88:f3:b8:83:87:69:4b:ff:
fa:ba:e4:5d:2e:24:72:97:d1:f1:0f:37:fd:45:32:72:03:36:
5e:6d:88:dc:e2:8d:d8:79:a4:51:40:13:67:9c:49:99:c6:69:
68:92:b4:bb:19:43:7c:92:01:ec:81:92:b9:3b:5d:80:d0:53:
c9:80:ac:ff:1a:9f:d9:5d:05:28:29:02:d6:1f:e3:29:6d:c6:
51:2e:02:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:55:42 2026 by rpki-client