
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
File: cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft (raw, json)
Hash identifier: gPNJkLNt6iuOF9rl2BDSV6QSX+KcnkMKpMoVLXnmttc=
Subject key identifier: C6:EC:02:18:CE:BE:79:82:4D:F7:17:31:97:7D:E3:03:35:52:AC:50
Authority key identifier: 73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
Certificate issuer: /CN=7316772efce2a133fb7f8720929d0560cef1db46
Certificate serial: 019D97E1DE3B05882616DF8DF4F29E8D6599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
Manifest number: 06CB
Signing time: Thu 16 Apr 2026 20:00:55 +0000
Manifest this update: Thu 16 Apr 2026 20:00:55 +0000
Manifest next update: Fri 17 Apr 2026 20:00:55 +0000
Files and hashes: 1: W00kh9cFoXYEts6Z_wNoICvROmI.roa (hash: 6F92izfRGMl8gegm30l362lw0oFK4K1whATYCIM0f9A=)
2: cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl (hash: KRXYfmkw/+gbOoZI6mMwBEJKFJxsoNj32JMwMZU5E7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:de:3b:05:88:26:16:df:8d:f4:f2:9e:8d:65:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7316772efce2a133fb7f8720929d0560cef1db46
Validity
Not Before: Apr 16 20:00:55 2026 GMT
Not After : Apr 17 20:00:55 2026 GMT
Subject: CN=c6ec0218cebe79824df71731977de3033552ac50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:13:48:93:83:3c:63:47:a3:9d:b3:03:0f:
29:6a:91:ce:d2:01:ee:47:5e:a1:09:20:10:dc:1e:
31:cd:f2:d0:4f:e0:25:75:d9:b2:17:95:83:4e:1a:
1b:2e:96:d3:2e:e3:9f:b5:f5:96:d7:fb:89:ca:57:
c5:78:64:e5:03:4f:79:7e:27:dd:0b:15:2b:fa:80:
83:7e:1b:03:53:57:35:73:9e:0a:4f:cc:ba:96:9e:
33:10:91:c4:51:b7:d7:1a:33:cb:87:cd:72:34:48:
30:a3:31:31:b2:cf:e4:72:a7:f4:8a:00:1b:92:2e:
f6:28:8c:14:67:47:5b:ee:f3:f7:a9:5d:85:59:e5:
24:51:b7:cc:c8:e2:1f:93:34:7e:d6:01:f2:05:2e:
dd:74:05:06:da:88:20:88:52:8f:a3:5d:94:72:c3:
2e:36:50:50:c8:61:d4:ac:9b:e1:4b:45:e4:2a:c8:
24:0b:f9:13:ea:5a:ad:98:08:78:be:5a:b5:81:b0:
31:2b:6f:f3:b2:e1:a7:e7:f1:01:ce:2d:85:4d:8b:
ed:d1:1a:bf:38:77:66:68:b3:cf:ce:50:09:47:6d:
92:fc:ed:5f:f9:a5:6c:54:11:de:bb:45:1d:da:38:
be:7f:9d:d8:18:cc:00:78:33:a9:df:83:54:80:d5:
f7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EC:02:18:CE:BE:79:82:4D:F7:17:31:97:7D:E3:03:35:52:AC:50
X509v3 Authority Key Identifier:
keyid:73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7e:57:6b:6b:e1:18:95:ab:88:eb:bf:35:35:cb:3e:e8:66:
75:84:7b:e7:9c:c4:5e:09:5e:6e:a5:db:b1:5a:36:b6:98:5b:
fe:79:20:42:28:28:31:a9:a6:1d:ee:ab:d0:06:82:3d:88:2d:
f1:16:09:e4:db:67:66:fc:0b:1d:12:eb:7f:ee:8f:69:2d:2b:
c7:40:45:0c:22:31:b2:ce:0d:4c:76:d8:b5:ed:ec:47:26:0c:
30:c3:43:c1:29:dd:fb:74:62:a3:57:ef:a3:e9:fd:7f:29:4e:
08:2a:9b:f7:54:ee:81:73:f9:9a:89:af:cf:37:69:64:ea:19:
b7:8a:8f:2e:68:fd:80:bb:e6:f3:0a:5f:3b:42:f1:74:43:1a:
cb:ca:76:0c:d8:3c:2f:ec:bf:be:c2:b6:fa:52:25:64:bc:28:
b0:c5:a0:e0:1d:53:63:14:f6:e0:e6:53:1c:27:78:c7:e6:b8:
a5:eb:47:17:e5:ef:48:07:cd:c8:ed:16:04:72:e2:13:6a:8b:
a7:4a:20:9f:1a:e8:90:e7:e6:da:d1:91:34:e2:67:77:59:70:
e8:4a:e3:6f:55:b1:d7:ca:57:6d:f2:e7:fd:a3:3a:9d:ad:bc:
e7:61:45:58:97:89:53:90:a7:5a:3f:b3:4c:7d:f2:a9:1b:4b:
62:d5:a0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:32:44 2026 by rpki-client