Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
File: Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft (raw, json)
Hash identifier: FhINEXz5vKrcxXowoEbMWEe+k5lyD8L3HG+7yrzMJdM=
Subject key identifier: BF:3C:63:BB:AC:41:F8:21:E8:C7:CC:52:66:B4:56:EB:AB:75:20:48
Authority key identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
Certificate issuer: /CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Certificate serial: 019EBE10B8173EC78E8306C87B105F1238CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
Manifest number: 0919
Signing time: Fri 12 Jun 2026 23:00:27 +0000
Manifest this update: Fri 12 Jun 2026 23:00:27 +0000
Manifest next update: Sat 13 Jun 2026 23:00:27 +0000
Files and hashes: 1: Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl (hash: +8uvHUmC0V07DYciNoID1HzUPMZIla/XkjcjWvt/5kE=)
2: pGFwy3aEV2qhiZhwH7yaMrR8fo0.roa (hash: KW1x50QC1Ci4rIl9Ru/vbiHcwzJviAGG+0QbXfYDiO8=)
3: qlxYIa3PjXKqV7hlzapOlNgcm0I.roa (hash: 1ZBb0ZiezUactfqIZmt39M9PRVHG48Yw9HnDmIgNQw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:b8:17:3e:c7:8e:83:06:c8:7b:10:5f:12:38:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Validity
Not Before: Jun 12 23:00:27 2026 GMT
Not After : Jun 13 23:00:27 2026 GMT
Subject: CN=bf3c63bbac41f821e8c7cc5266b456ebab752048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:81:d3:8e:c0:f2:9d:b1:44:d3:33:40:66:
a8:40:cb:d2:d1:99:e4:9d:e4:de:10:07:b0:1b:a4:
85:6e:39:8f:ca:63:2c:d8:33:4b:81:40:9d:ca:be:
38:bc:37:40:0d:1e:ab:82:1f:b5:13:64:cb:6f:be:
59:a2:a8:0a:38:10:76:eb:5b:07:8a:6e:74:08:07:
a3:73:c7:77:3c:2c:7d:26:68:67:49:0a:6c:73:d2:
c7:4b:9c:4c:b9:69:1a:7c:36:45:a0:b4:40:c2:7d:
03:f9:da:2c:08:d7:e5:1e:72:b5:24:45:67:0e:49:
67:56:8e:7d:b5:4e:77:ff:7c:a4:2a:be:81:00:09:
77:b7:d8:9b:c0:a1:2c:ae:59:da:f9:83:d6:58:53:
86:3a:6d:72:58:e3:2d:91:97:f4:47:0b:9a:52:13:
e3:1c:f4:30:cc:47:28:1c:42:4e:7f:15:69:42:c2:
a0:83:7c:21:35:c5:c7:f7:1e:6a:8f:4f:c8:d0:04:
46:ad:64:90:b1:d5:82:5c:46:5e:1f:44:d1:f9:3a:
f7:1b:d5:5d:03:6f:be:ac:b3:a5:70:4c:9b:ff:4b:
d6:bc:0c:9c:20:44:19:ec:b1:a2:b2:a1:4f:a1:2a:
39:bb:77:50:54:7e:92:a4:5f:d1:b0:58:48:e0:06:
19:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3C:63:BB:AC:41:F8:21:E8:C7:CC:52:66:B4:56:EB:AB:75:20:48
X509v3 Authority Key Identifier:
keyid:0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6e:cb:da:15:9d:98:71:4a:79:08:80:5a:ea:a2:c0:31:78:
b0:12:8a:a1:23:a1:2d:c9:85:2f:7c:ba:c1:2b:9a:88:59:f9:
11:e0:35:c2:06:0f:ca:63:09:e2:06:ce:ba:91:00:24:71:d9:
e8:5e:23:4c:16:fb:56:a2:23:8d:ce:03:86:19:ae:8f:79:7e:
7f:31:59:3c:5f:76:20:c4:91:dc:3d:ba:64:fa:36:9c:72:dd:
70:ec:d6:18:c8:e6:05:75:69:de:23:ed:4a:52:50:18:07:81:
61:65:ac:00:da:90:4e:fc:21:38:84:ec:95:fa:78:fb:4e:be:
07:75:41:54:e8:c9:fc:f2:ea:01:80:d9:d5:e5:d1:a8:e1:78:
73:e6:c7:61:aa:f4:37:77:b8:ce:1a:c1:a1:5d:73:18:d1:1d:
a8:08:61:df:60:36:a9:a6:c7:8b:38:16:16:47:30:ca:6a:99:
e4:35:10:67:33:77:fa:da:a6:05:c4:f1:63:db:7a:75:47:53:
62:27:dd:79:75:f4:a7:db:b8:1f:7b:41:f0:d0:6b:09:e1:82:
83:0d:ed:9e:3a:14:35:dd:e4:56:3c:59:f9:ea:c8:5e:de:65:
f3:e0:cb:a0:b2:2f:52:c8:de:7a:d7:ed:77:d9:2e:0d:8e:ec:
e3:e9:db:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:50:23 2026 by rpki-client