
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
File: cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft (raw, json)
Hash identifier: Bu5D2+pLArxzYDESCdosSbl/N9sUzY7Bwzv3M8gNoRc=
Subject key identifier: D6:3B:CE:A9:2A:40:F4:A0:02:46:27:4C:25:82:81:1A:00:F4:9E:CF
Authority key identifier: 73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
Certificate issuer: /CN=7316772efce2a133fb7f8720929d0560cef1db46
Certificate serial: 01A12955FA52B4BFB861C5A208E22E9D9305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
Manifest number: 08A4
Signing time: Sun 11 Oct 2026 05:01:02 +0000
Manifest this update: Sun 11 Oct 2026 05:01:02 +0000
Manifest next update: Mon 12 Oct 2026 05:01:02 +0000
Files and hashes: 1: W00kh9cFoXYEts6Z_wNoICvROmI.roa (hash: 6F92izfRGMl8gegm30l362lw0oFK4K1whATYCIM0f9A=)
2: cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl (hash: 8mm1UMJHf+PcdFkSA9V5PQ/SCTG0TvyJkH8ybm86zR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:55:fa:52:b4:bf:b8:61:c5:a2:08:e2:2e:9d:93:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7316772efce2a133fb7f8720929d0560cef1db46
Validity
Not Before: Oct 11 05:01:02 2026 GMT
Not After : Oct 12 05:01:02 2026 GMT
Subject: CN=d63bcea92a40f4a00246274c2582811a00f49ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:f7:f3:bb:b9:0f:7b:7a:cc:4d:67:c3:2e:
21:24:82:3e:e7:6c:4a:94:43:c3:d2:98:1d:73:83:
53:37:e3:03:65:fa:f4:6b:5e:f1:2e:9d:0d:e1:af:
7c:01:96:fd:05:49:68:f2:cc:2c:c3:4d:0c:8f:e2:
1f:5f:c1:97:5d:73:f0:b8:7c:56:4c:21:63:09:95:
e6:92:76:3d:84:f3:c6:d1:ac:c2:e2:3d:c1:13:d4:
42:90:58:85:17:b8:9e:98:91:42:36:9b:89:51:88:
e4:b5:52:a8:4f:15:1f:6f:c4:3c:a1:8f:97:52:83:
e5:4c:9c:1b:4d:a7:e9:75:97:6a:ff:c2:4c:5e:ec:
4b:e3:17:6c:c5:24:c3:ff:d5:2b:7a:5b:45:f9:40:
b4:2a:f7:6c:2c:af:76:22:df:9e:e6:52:4c:c0:5d:
54:f0:58:3d:ab:45:37:4c:66:3e:61:ad:4a:7e:52:
f1:b2:0a:f3:1f:85:2b:94:4d:10:72:ef:07:7b:b0:
f1:17:bb:e2:68:d5:d8:35:c4:48:9c:1d:81:24:76:
1e:63:d5:17:26:b7:f0:62:e4:51:06:6a:d2:43:d6:
37:e8:63:a7:44:97:ea:ef:eb:5c:4e:a4:aa:8c:6b:
6a:19:0f:52:5b:3a:58:b0:6a:ad:77:80:6a:5d:66:
d5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3B:CE:A9:2A:40:F4:A0:02:46:27:4C:25:82:81:1A:00:F4:9E:CF
X509v3 Authority Key Identifier:
keyid:73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:06:38:5b:17:9a:57:91:1e:53:94:83:70:c3:90:1b:3d:79:
60:26:32:07:ec:2a:45:e4:a4:08:48:0f:b6:4f:7e:35:40:ed:
37:ff:d9:14:9d:be:96:af:22:20:8f:b1:ba:25:e5:cf:61:93:
28:8e:22:9c:9b:44:55:11:3f:d1:0f:e4:03:48:fa:38:8e:80:
5b:3d:6d:bd:77:ff:44:20:11:ae:f6:0d:68:28:af:42:6c:5a:
6d:ed:02:76:8c:3c:04:0f:42:2e:50:60:2c:0d:3f:28:d8:3e:
a9:c1:06:b2:a5:df:b7:f6:2d:e3:99:2e:08:d0:da:0a:40:fd:
c7:18:f4:01:86:e9:b3:c2:dd:22:df:24:9d:fd:29:6e:a6:6b:
a5:bf:b9:30:3e:91:60:6f:06:f3:e7:99:95:ef:46:94:57:54:
12:b3:da:57:a8:c0:30:2f:bd:1c:2c:2d:3a:a0:27:cd:dc:ef:
71:ff:26:ac:6b:3d:d8:94:a7:25:f0:13:1a:18:db:ff:74:84:
af:0c:63:cb:fb:16:0f:5b:46:8a:cd:91:20:c4:f7:7c:ef:92:
1c:59:75:81:ec:bf:5e:1f:0a:ad:a7:1d:2b:b3:0f:91:be:0a:
bc:3b:ce:6a:47:de:56:91:5e:d7:70:3f:aa:cf:a4:fc:8f:42:
fb:92:aa:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEpVfpStL+4YcWiCOIunZMFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMTY3NzJlZmNlMmExMzNmYjdmODcyMDkyOWQwNTYwY2Vm
MWRiNDYwHhcNMjYxMDExMDUwMTAyWhcNMjYxMDEyMDUwMTAyWjAzMTEwLwYDVQQD
EyhkNjNiY2VhOTJhNDBmNGEwMDI0NjI3NGMyNTgyODExYTAwZjQ5ZWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTr387u5D3t6zE1nwy4hJII+52xK
lEPD0pgdc4NTN+MDZfr0a17xLp0N4a98AZb9BUlo8swsw00Mj+IfX8GXXXPwuHxW
TCFjCZXmknY9hPPG0azC4j3BE9RCkFiFF7iemJFCNpuJUYjktVKoTxUfb8Q8oY+X
UoPlTJwbTafpdZdq/8JMXuxL4xdsxSTD/9UreltF+UC0KvdsLK92It+e5lJMwF1U
8Fg9q0U3TGY+Ya1KflLxsgrzH4UrlE0Qcu8He7DxF7viaNXYNcRInB2BJHYeY9UX
JrfwYuRRBmrSQ9Y36GOnRJfq7+tcTqSqjGtqGQ9SWzpYsGqtd4BqXWbVbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNY7zqkqQPSgAkYnTCWCgRoA9J7PMB8GA1UdIwQY
MBaAFHMWdy784qEz+3+HIJKdBWDO8dtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3haM0x2emlvVFA3ZjRjZ2twMEZZTTd4MjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80ZThkNTctNTNjYS00OWM1LTk3ZWYt
MWM4NzZkYjQ0ZmUyLzEvY3haM0x2emlvVFA3ZjRjZ2twMEZZTTd4MjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80ZThkNTctNTNjYS00OWM1LTk3ZWYtMWM4NzZkYjQ0ZmUy
LzEvY3haM0x2emlvVFA3ZjRjZ2twMEZZTTd4MjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgY4Wxea
V5EeU5SDcMOQGz15YCYyB+wqReSkCEgPtk9+NUDtN//ZFJ2+lq8iII+xuiXlz2GT
KI4inJtEVRE/0Q/kA0j6OI6AWz1tvXf/RCARrvYNaCivQmxabe0Cdow8BA9CLlBg
LA0/KNg+qcEGsqXft/Yt45kuCNDaCkD9xxj0AYbps8LdIt8knf0pbqZrpb+5MD6R
YG8G8+eZle9GlFdUErPaV6jAMC+9HCwtOqAnzdzvcf8mrGs92JSnJfATGhjb/3SE
rwxjy/sWD1tGis2RIMT3fO+SHFl1gey/Xh8KracdK7MPkb4KvDvOakfeVpFe13A/
qs+k/I9C+5Kq9w==
-----END CERTIFICATE-----
Generated at Sun Oct 11 08:24:29 2026 by rpki-client