Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
File: Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft (raw, json)
Hash identifier: XaKhBYGUgxKC9blGUBr0hcJ+cYaYu/F3C6EO1giRWUk=
Subject key identifier: 67:30:A8:60:49:85:6E:A1:CD:77:55:27:AB:34:75:1C:13:7C:5A:91
Authority key identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
Certificate issuer: /CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Certificate serial: 019CAAFD70B595A234F695D5AFE5380C963C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
Manifest number: 0806
Signing time: Sun 01 Mar 2026 20:01:01 +0000
Manifest this update: Sun 01 Mar 2026 20:01:01 +0000
Manifest next update: Mon 02 Mar 2026 20:01:01 +0000
Files and hashes: 1: Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl (hash: KvcFKaBN5uQdTXgZuKnuVCE+F9P3BdoJL3W37piLiNw=)
2: pGFwy3aEV2qhiZhwH7yaMrR8fo0.roa (hash: KW1x50QC1Ci4rIl9Ru/vbiHcwzJviAGG+0QbXfYDiO8=)
3: qlxYIa3PjXKqV7hlzapOlNgcm0I.roa (hash: 1ZBb0ZiezUactfqIZmt39M9PRVHG48Yw9HnDmIgNQw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:70:b5:95:a2:34:f6:95:d5:af:e5:38:0c:96:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Validity
Not Before: Mar 1 20:01:01 2026 GMT
Not After : Mar 2 20:01:01 2026 GMT
Subject: CN=6730a86049856ea1cd775527ab34751c137c5a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:e5:e6:74:70:7d:cd:0a:24:6f:0d:84:a9:
1c:ea:e6:6d:15:84:e3:57:bd:4f:2b:42:37:07:68:
11:03:3d:79:22:37:9b:5a:23:58:41:38:a9:09:de:
4e:e8:59:48:7e:0d:d0:45:3c:b9:78:e2:10:0f:31:
aa:82:1d:ac:46:4f:c8:09:a6:b9:c6:9d:31:4b:61:
dd:d9:d5:fd:86:c8:32:e8:06:81:19:1e:06:13:41:
57:51:8c:4c:a7:3f:cb:d7:ef:8a:99:e2:dd:d0:a4:
2b:42:63:ab:cc:8f:ac:de:95:67:1a:49:a7:1a:d6:
90:b1:5b:97:3b:6c:59:4b:90:d3:c5:09:85:b1:cb:
90:a5:d6:5a:85:cc:c7:dd:c1:6d:44:59:1c:bc:05:
6b:1d:1a:04:87:3c:b8:ef:06:53:0b:6c:de:57:1a:
35:d8:36:24:84:46:3b:a7:c0:5e:29:c0:7e:e0:6a:
db:c0:6e:ae:9a:81:43:74:e2:05:f8:fb:e9:88:50:
9b:5d:28:89:4e:68:f2:3e:87:77:52:9d:8a:0f:87:
59:79:be:a6:fe:ca:b2:39:7f:d4:c4:44:09:5b:89:
dc:cd:ef:5a:e0:fc:45:f5:e0:42:c0:41:79:85:da:
95:db:d1:e2:1e:2e:9d:ee:28:52:cf:d1:0f:94:40:
5b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:30:A8:60:49:85:6E:A1:CD:77:55:27:AB:34:75:1C:13:7C:5A:91
X509v3 Authority Key Identifier:
keyid:0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ba:d2:38:24:a6:18:6e:76:46:bb:72:11:a6:b3:f0:d7:55:
56:4b:d2:47:c1:0e:2b:45:af:96:12:99:cc:28:48:d3:37:2d:
2f:b2:f0:57:ac:4e:fa:2e:19:4c:17:3f:c9:68:27:80:2b:df:
51:eb:63:26:c8:0d:d3:1d:59:e5:54:ca:e3:39:01:12:d3:1b:
43:1a:0f:d2:b6:10:ab:ca:89:fd:de:2d:61:98:6a:cb:85:db:
1e:8b:85:56:4f:17:c0:4f:84:91:f8:b5:99:ba:03:8e:cd:2d:
43:2a:43:44:3c:37:a9:fe:9a:cf:bd:3c:90:58:22:7d:15:a0:
8a:f5:fc:31:88:6f:7a:56:a8:3f:89:65:20:de:63:08:9f:c5:
4e:27:76:ec:9d:c6:18:f4:68:25:95:30:f0:d7:28:6b:7c:52:
50:72:6b:0a:88:8d:72:7d:06:13:cc:34:85:5a:66:7d:b2:ef:
4d:70:2a:8e:86:d8:e5:8f:6c:4b:b6:f9:92:76:db:26:47:89:
f7:5f:ab:4c:61:0f:f8:85:20:61:da:09:43:76:99:9a:15:1a:
25:5f:22:cc:df:51:8f:fa:47:f9:91:29:48:9e:b4:f3:21:47:
95:e3:ca:f8:9e:36:5d:58:6b:5d:ee:c8:cb:5a:fd:0d:d0:a2:
41:c8:1d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:58 2026 by rpki-client