Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
File: cxkAeiit4HgdMS2NSUcts2dnBBY.mft (raw, json)
Hash identifier: YtPapNrb9lP86DSWrSwS8NUVifwgUHpghEy+QeYqGMk=
Subject key identifier: FB:8D:06:88:7A:7E:8C:A5:B0:98:59:B4:78:21:FC:56:2F:64:93:42
Authority key identifier: 73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
Certificate issuer: /CN=7319007a28ade0781d312d8d49472db367670416
Certificate serial: 01A0DE73F7B9A079B1839287B6EE8F5372A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
Manifest number: 0CEF
Signing time: Sat 26 Sep 2026 16:02:16 +0000
Manifest this update: Sat 26 Sep 2026 16:02:16 +0000
Manifest next update: Sun 27 Sep 2026 16:02:16 +0000
Files and hashes: 1: Le8K7qSkEZ1_FmI_JNvcQwDT3kM.roa (hash: YPGYe40UQA7fHzeXPlUUiQ7ZZraM1bL1CPz1T+qTDdY=)
2: cxkAeiit4HgdMS2NSUcts2dnBBY.crl (hash: BkndUs5yXlxetrVLD30mCgPYKqKp1yr0nSevIEu8iUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:73:f7:b9:a0:79:b1:83:92:87:b6:ee:8f:53:72:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319007a28ade0781d312d8d49472db367670416
Validity
Not Before: Sep 26 16:02:16 2026 GMT
Not After : Sep 27 16:02:16 2026 GMT
Subject: CN=fb8d06887a7e8ca5b09859b47821fc562f649342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:6f:19:a5:77:82:90:6e:ed:a6:28:87:fd:
1d:76:24:bf:b7:cb:d0:a1:ee:36:b0:5c:96:74:4a:
b5:4a:69:c4:ca:8a:76:cc:a3:8a:8a:69:c0:32:0b:
bf:32:45:d8:b6:10:bd:e3:9e:0c:0e:09:71:e2:c4:
e9:09:4a:fe:f3:16:52:a8:62:2e:59:4f:52:81:ff:
3c:99:d8:66:6e:1d:2f:45:78:b8:84:89:ee:7a:e0:
e2:8b:fb:60:81:14:a5:dc:0e:29:f7:57:2b:42:bf:
d5:aa:5c:5e:f4:68:5f:8e:cc:cc:61:47:99:c9:b9:
5d:14:5b:cf:b8:aa:fc:f5:93:da:fa:2a:64:f4:bf:
e8:3a:75:4d:e0:b7:26:e4:a6:51:46:76:3c:fd:4f:
ff:26:99:37:b2:63:d4:2e:45:0e:da:26:ff:05:76:
12:87:64:e2:81:5d:5e:76:d1:fd:4f:30:c5:5e:9b:
5c:7e:64:82:20:74:ab:24:ec:f7:74:83:44:33:01:
ef:2d:44:47:1c:36:b5:91:97:9f:61:a2:89:f8:53:
67:85:09:e6:22:86:7c:90:3f:50:12:2d:8b:21:47:
b6:82:aa:63:0d:08:5e:90:0c:23:cd:67:75:ca:b4:
6d:e7:18:28:95:c1:78:3d:35:55:b9:16:c6:fc:67:
36:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8D:06:88:7A:7E:8C:A5:B0:98:59:B4:78:21:FC:56:2F:64:93:42
X509v3 Authority Key Identifier:
keyid:73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:94:0d:ae:7c:15:75:64:6a:5e:0e:89:29:5b:65:8f:0c:26:
95:b1:89:59:7c:44:0d:e3:97:bf:6a:4c:88:95:a4:75:25:47:
e8:81:4a:d5:6f:59:dd:d1:7f:f0:28:06:30:76:d4:73:29:cb:
c2:f2:bf:6a:ec:b4:54:55:25:03:11:68:af:a0:36:ad:9a:01:
92:43:01:5c:05:66:96:42:fd:e4:9b:97:bc:d2:ae:4d:b7:46:
6d:d6:82:b3:d2:f2:02:d0:6c:c5:c0:8e:d4:45:a3:9e:60:76:
f3:cd:7e:db:6a:23:c1:d7:8d:46:4f:bc:59:d4:bf:c1:e3:82:
c9:f7:bd:50:ac:6d:fd:e0:97:4d:ff:05:b7:ec:60:b1:a8:e3:
5a:9a:ec:2f:31:61:8b:f6:18:64:f0:05:26:66:e3:b9:56:fa:
d0:22:7d:bf:79:db:d3:ee:0b:48:e1:fb:09:6e:24:54:10:fc:
14:61:6b:ff:40:6a:14:0e:63:b4:3e:cf:53:17:a3:0a:a9:3e:
ac:ca:26:23:1a:75:ec:f4:5a:87:0d:bc:36:cc:49:3e:eb:ba:
db:9c:3a:29:c3:43:f5:22:6a:0d:73:c1:c5:89:77:6f:2e:d6:
39:74:e5:ce:34:05:61:36:e7:30:3d:80:5b:2a:31:c1:10:27:
06:69:da:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:01:30 2026 by rpki-client