Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
File: Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft (raw, json)
Hash identifier: aRjNV9C3g4zyiwbpzbdEDwWROSfK9DutJ0/SQbqT9BQ=
Subject key identifier: F1:F8:0A:FA:D6:98:07:96:3D:02:80:EE:7B:BD:48:38:9C:E4:71:33
Authority key identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
Certificate issuer: /CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Certificate serial: 01A0C96B0F20A5C36B5B3E47617C4CC7916D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
Manifest number: 0A28
Signing time: Tue 22 Sep 2026 14:00:31 +0000
Manifest this update: Tue 22 Sep 2026 14:00:31 +0000
Manifest next update: Wed 23 Sep 2026 14:00:31 +0000
Files and hashes: 1: Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl (hash: ZBMzdKwZ5iG6Vqcg8rsO0N13tfZgiHfx9+H3rST8FUs=)
2: pGFwy3aEV2qhiZhwH7yaMrR8fo0.roa (hash: KW1x50QC1Ci4rIl9Ru/vbiHcwzJviAGG+0QbXfYDiO8=)
3: qlxYIa3PjXKqV7hlzapOlNgcm0I.roa (hash: 1ZBb0ZiezUactfqIZmt39M9PRVHG48Yw9HnDmIgNQw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:0f:20:a5:c3:6b:5b:3e:47:61:7c:4c:c7:91:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Validity
Not Before: Sep 22 14:00:31 2026 GMT
Not After : Sep 23 14:00:31 2026 GMT
Subject: CN=f1f80afad69807963d0280ee7bbd48389ce47133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6c:34:a6:f9:10:60:51:c4:1c:43:e5:7a:5c:
ec:db:0d:f7:21:35:90:20:77:c9:6f:98:54:f7:f4:
e4:9b:ca:8a:a0:5b:3d:a7:41:59:f9:95:32:16:e9:
1c:95:a4:65:27:05:be:17:e4:f9:e2:d6:97:2e:fc:
a3:7d:36:6b:55:d4:c3:ff:bf:30:25:47:86:94:fb:
8a:a6:f2:57:4b:11:9b:92:9e:66:a5:ce:08:5e:75:
18:96:59:7e:62:3f:b7:05:22:d2:d2:a6:b5:b6:a0:
24:80:1b:0a:d0:aa:f9:ae:ed:81:3d:78:2f:b4:8f:
43:0a:6c:69:25:f0:f3:60:30:99:e8:0f:24:fc:c5:
f4:75:b3:95:d3:48:fd:99:5a:e4:ab:d0:ae:7f:52:
1b:bb:c7:29:2b:7b:38:d7:29:81:26:48:b3:20:28:
19:0e:38:21:48:3d:0f:2c:ac:f7:9b:1a:64:1f:11:
21:50:59:8a:9d:97:6b:31:10:b7:dc:d9:16:0e:75:
23:35:21:6f:6c:51:dc:c5:b2:d4:a3:fe:e4:b9:0c:
f1:9c:36:6d:c9:16:33:2b:cc:6e:b5:0d:3f:25:4d:
be:af:62:b8:68:04:6c:3d:f7:8f:32:d5:7c:dd:e6:
06:a7:be:d7:1d:30:37:90:da:1f:41:d8:18:f8:e0:
38:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F8:0A:FA:D6:98:07:96:3D:02:80:EE:7B:BD:48:38:9C:E4:71:33
X509v3 Authority Key Identifier:
keyid:0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d0:d1:53:aa:7e:26:3e:e1:86:4f:bf:29:59:34:06:27:d1:
30:64:f6:50:d1:64:8d:45:7c:01:85:de:f5:eb:64:58:55:1f:
64:93:4b:4d:f8:a9:84:87:c8:a2:44:ed:3d:b6:4a:ff:fd:82:
9e:3b:aa:1c:5b:25:1a:28:99:96:f8:c0:b5:be:89:f4:0c:57:
fe:d9:ad:14:8a:98:1c:3b:1a:62:71:78:56:5f:2c:85:94:da:
e2:8c:97:e2:63:d6:65:ff:ed:03:75:fa:9b:1c:ac:2b:a9:a8:
21:4f:8f:83:a1:09:ad:26:21:96:38:ab:ad:e8:87:7f:a1:00:
c5:bf:21:e5:e7:12:b9:3d:54:07:e3:ab:94:00:0c:c3:b5:fa:
5c:50:c6:26:52:26:2f:c4:00:df:af:4f:65:bf:05:a3:71:91:
c3:b6:77:dc:55:66:1b:b9:32:86:7b:ed:c7:b0:d5:66:0d:c3:
38:b5:09:19:e3:d3:12:e1:32:77:b3:ee:a9:c7:01:e7:b7:92:
2e:2a:93:a5:a0:81:ce:25:02:a8:6f:14:79:18:b0:7b:50:be:
0e:06:10:c4:63:39:1c:a5:79:97:d8:a8:a6:01:98:21:3c:f8:
ed:b8:65:7c:c2:de:fa:65:39:1d:43:01:3c:b0:3f:ec:85:d6:
ef:18:3c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:42:26 2026 by rpki-client