Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
File: cxkAeiit4HgdMS2NSUcts2dnBBY.mft (raw, json)
Hash identifier: Ern9kddlfmWX13sbq21F7Y6dq++FfXu0c+IXHF4fHCU=
Subject key identifier: 5A:61:E2:F7:DE:3A:85:D5:1E:92:7C:06:89:28:0F:FE:C3:76:A7:6C
Authority key identifier: 73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
Certificate issuer: /CN=7319007a28ade0781d312d8d49472db367670416
Certificate serial: 019FAD523632276B23311554CEF7390B7333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
Manifest number: 0C51
Signing time: Wed 29 Jul 2026 10:01:13 +0000
Manifest this update: Wed 29 Jul 2026 10:01:13 +0000
Manifest next update: Thu 30 Jul 2026 10:01:13 +0000
Files and hashes: 1: Le8K7qSkEZ1_FmI_JNvcQwDT3kM.roa (hash: YPGYe40UQA7fHzeXPlUUiQ7ZZraM1bL1CPz1T+qTDdY=)
2: cxkAeiit4HgdMS2NSUcts2dnBBY.crl (hash: /P1zBIlKYRT3OEHKlJg9d+SxUjFxox4GWX8y4pbDf38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:52:36:32:27:6b:23:31:15:54:ce:f7:39:0b:73:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319007a28ade0781d312d8d49472db367670416
Validity
Not Before: Jul 29 10:01:13 2026 GMT
Not After : Jul 30 10:01:13 2026 GMT
Subject: CN=5a61e2f7de3a85d51e927c0689280ffec376a76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:ce:6d:45:80:05:75:65:dc:bc:d0:23:b4:
7d:e1:23:e3:67:d7:61:86:54:28:bc:30:cc:da:0e:
a1:d7:af:b7:46:3c:54:4f:fd:69:e3:a5:1e:60:15:
6e:fe:9a:68:bf:20:6a:4a:a4:13:ae:c4:4d:74:17:
0f:ba:d0:12:69:0a:cd:85:a4:c2:76:27:4d:6e:a2:
e6:8c:5d:29:46:c6:ce:de:18:47:f1:eb:0f:27:c7:
85:26:33:e0:28:25:1c:6d:20:db:08:d2:ed:9b:29:
1c:0a:4c:6b:a4:26:df:aa:af:45:e2:c9:06:09:1f:
c5:76:0b:f7:0d:ff:40:61:72:aa:f2:33:5d:82:95:
5c:e6:83:54:e0:3a:9b:ca:7c:61:37:e1:60:38:33:
2b:7b:71:8f:57:29:41:a0:60:1c:1a:b0:17:fe:32:
98:e7:8d:f0:27:99:23:cf:d2:a8:e6:ee:38:be:08:
12:1c:ac:a3:9a:66:03:27:da:3c:b2:32:72:56:c7:
ed:c1:c4:25:47:4d:20:ab:6a:2d:c0:ca:1d:48:03:
ff:e2:99:42:59:bb:a4:92:55:00:69:ca:5e:32:1a:
33:76:85:3b:07:5f:c0:43:02:c9:2b:c3:9a:a9:87:
90:80:c7:bd:80:bc:b2:9b:55:d9:52:db:8e:e2:68:
0e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:61:E2:F7:DE:3A:85:D5:1E:92:7C:06:89:28:0F:FE:C3:76:A7:6C
X509v3 Authority Key Identifier:
keyid:73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:8d:af:e0:e7:a2:e7:1f:36:ac:54:b3:71:27:72:ba:46:b6:
a1:f0:58:8e:99:a8:ed:d5:27:b2:a9:de:73:65:39:30:b6:90:
8d:54:55:c2:cd:51:8c:ed:9d:a7:61:9c:c6:61:7b:69:8a:db:
c5:64:50:6b:46:3d:47:66:53:2d:9d:bd:6d:88:e0:ae:5c:91:
ee:fb:19:e6:f9:e5:66:45:57:12:53:3c:de:57:38:37:bd:a3:
e1:e0:3f:18:ec:6e:b8:a0:1d:89:4e:ca:f2:5a:c7:4c:e4:6e:
5d:a2:1b:3b:e9:84:97:6d:0c:ac:6a:e0:e3:15:b6:2d:a7:9a:
bf:c6:db:c8:08:a9:26:d6:79:91:70:66:c1:62:a5:f4:61:de:
6d:cd:1e:d8:93:cb:c8:bd:5f:be:e9:24:51:f8:d9:be:d7:09:
c3:0c:cb:53:e0:84:83:77:99:91:cb:cd:eb:cc:2d:7d:48:f2:
fe:a9:f1:13:90:af:6e:df:8d:c7:0b:aa:d6:1d:3f:b8:27:57:
e8:48:69:d9:89:d2:c0:f5:99:c7:11:16:0c:cd:1b:f4:bd:c9:
d9:9c:39:73:03:9d:64:67:4a:86:73:e4:a4:46:7f:98:0a:b6:
ca:fe:ff:8c:83:d7:52:94:97:13:bf:d9:6b:b2:7b:77:16:1c:
82:20:5c:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tUjYyJ2sjMRVUzvc5C3MzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMTkwMDdhMjhhZGUwNzgxZDMxMmQ4ZDQ5NDcyZGIzNjc2
NzA0MTYwHhcNMjYwNzI5MTAwMTEzWhcNMjYwNzMwMTAwMTEzWjAzMTEwLwYDVQQD
Eyg1YTYxZTJmN2RlM2E4NWQ1MWU5MjdjMDY4OTI4MGZmZWMzNzZhNzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorDObUWABXVl3LzQI7R94SPjZ9dh
hlQovDDM2g6h16+3RjxUT/1p46UeYBVu/ppovyBqSqQTrsRNdBcPutASaQrNhaTC
didNbqLmjF0pRsbO3hhH8esPJ8eFJjPgKCUcbSDbCNLtmykcCkxrpCbfqq9F4skG
CR/Fdgv3Df9AYXKq8jNdgpVc5oNU4DqbynxhN+FgODMre3GPVylBoGAcGrAX/jKY
543wJ5kjz9Ko5u44vggSHKyjmmYDJ9o8sjJyVsftwcQlR00gq2otwModSAP/4plC
WbukklUAacpeMhozdoU7B1/AQwLJK8OaqYeQgMe9gLyym1XZUtuO4mgOOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFph4vfeOoXVHpJ8BokoD/7DdqdsMB8GA1UdIwQY
MBaAFHMZAHooreB4HTEtjUlHLbNnZwQWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3hrQWVpaXQ0SGdkTVMyTlNVY3RzMmRuQkJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9mOGM3ZTItMzI4Mi00ZWJiLTg1MDgt
OWY5NDk0OTY2YzU0LzEvY3hrQWVpaXQ0SGdkTVMyTlNVY3RzMmRuQkJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9mOGM3ZTItMzI4Mi00ZWJiLTg1MDgtOWY5NDk0OTY2YzU0
LzEvY3hrQWVpaXQ0SGdkTVMyTlNVY3RzMmRuQkJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeI2v4Oei
5x82rFSzcSdyuka2ofBYjpmo7dUnsqnec2U5MLaQjVRVws1RjO2dp2GcxmF7aYrb
xWRQa0Y9R2ZTLZ29bYjgrlyR7vsZ5vnlZkVXElM83lc4N72j4eA/GOxuuKAdiU7K
8lrHTORuXaIbO+mEl20MrGrg4xW2Laeav8bbyAipJtZ5kXBmwWKl9GHebc0e2JPL
yL1fvukkUfjZvtcJwwzLU+CEg3eZkcvN68wtfUjy/qnxE5Cvbt+Nxwuq1h0/uCdX
6Ehp2YnSwPWZxxEWDM0b9L3J2Zw5cwOdZGdKhnPkpEZ/mAq2yv7/jIPXUpSXE7/Z
a7J7dxYcgiBcuQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 17:22:52 2026 by rpki-client