Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
File: Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft (raw, json)
Hash identifier: K34kgdT6DvSz6nBJll0B5VX2Qvyi2ZQA0Ku61mzpQkQ=
Subject key identifier: E0:E4:96:72:72:4B:BD:9B:65:EB:12:53:5B:C8:88:DB:BD:7D:E4:BC
Authority key identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
Certificate issuer: /CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Certificate serial: 019FA9AC35D20A9997658F9DB4AFA003BC87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
Manifest number: 0993
Signing time: Tue 28 Jul 2026 17:01:03 +0000
Manifest this update: Tue 28 Jul 2026 17:01:03 +0000
Manifest next update: Wed 29 Jul 2026 17:01:03 +0000
Files and hashes: 1: Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl (hash: 2PYnU1NQcSAXPCjgANRVmKQKFRCM0ReJwCzRmzCaPOM=)
2: pGFwy3aEV2qhiZhwH7yaMrR8fo0.roa (hash: KW1x50QC1Ci4rIl9Ru/vbiHcwzJviAGG+0QbXfYDiO8=)
3: qlxYIa3PjXKqV7hlzapOlNgcm0I.roa (hash: 1ZBb0ZiezUactfqIZmt39M9PRVHG48Yw9HnDmIgNQw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:35:d2:0a:99:97:65:8f:9d:b4:af:a0:03:bc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Validity
Not Before: Jul 28 17:01:03 2026 GMT
Not After : Jul 29 17:01:03 2026 GMT
Subject: CN=e0e49672724bbd9b65eb12535bc888dbbd7de4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:35:21:c4:f2:5a:05:d0:44:a4:ec:d4:28:
5a:da:a4:a6:75:44:a4:a4:8a:6a:4d:5c:88:4a:fe:
91:d9:ed:a6:8a:b0:51:0c:5f:bc:94:5e:da:23:a2:
85:09:93:72:49:71:05:1e:6c:d5:f4:6d:78:92:6a:
69:f1:44:5a:b3:fe:92:61:be:0e:cd:26:84:63:8f:
b4:e3:ae:7e:56:60:ea:59:0a:bd:fd:2a:21:fa:51:
da:23:9c:cc:09:06:fb:30:6d:67:24:18:22:b0:ea:
4b:29:55:a9:27:3c:53:3c:b2:4b:39:6e:3c:13:8b:
7e:2d:3e:ce:2b:f8:bb:d5:90:61:39:f1:71:e0:c3:
e9:5a:88:34:78:15:f6:7c:c1:76:f1:fe:a2:94:dc:
82:6e:ea:3e:25:29:e9:8b:b3:d1:14:5b:a7:a5:fc:
8d:24:dd:5c:b1:a7:9e:9e:5d:56:1b:a5:bd:14:de:
b8:8b:e3:fc:ee:b3:ec:88:da:14:33:25:e0:65:e6:
f0:57:2f:55:26:7e:e7:29:02:da:47:a6:39:fa:b8:
56:ce:2a:6c:cc:28:a1:4a:6a:aa:58:ef:2a:b6:2f:
55:4b:be:0a:6d:7d:6f:50:2d:98:7e:49:f2:09:9f:
df:77:01:94:a8:e8:93:59:e5:e2:49:9a:a2:03:06:
56:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E4:96:72:72:4B:BD:9B:65:EB:12:53:5B:C8:88:DB:BD:7D:E4:BC
X509v3 Authority Key Identifier:
keyid:0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:09:03:84:a1:0b:63:83:83:c2:a7:9d:ab:de:04:93:66:58:
f7:a1:27:d8:3f:b5:33:a0:e0:41:13:e2:d3:7f:b1:39:47:46:
45:b3:de:bb:ff:15:70:c1:42:0d:d8:46:4b:75:20:18:fa:95:
c2:4c:b6:10:86:e6:e5:d3:24:05:01:d5:35:fd:02:f8:db:8a:
74:10:5d:fb:2e:d1:05:59:1a:ed:2c:2a:dc:8b:87:fb:b2:92:
7d:95:de:f9:5f:23:37:45:c5:ac:4c:94:db:61:31:cd:78:9e:
f4:2a:3f:e1:58:ca:e0:d9:77:d3:cf:00:3d:3b:bf:c6:3d:ed:
3d:7a:d8:16:bb:56:0b:48:e9:01:c2:30:62:2a:f3:87:32:bb:
b0:dd:c2:be:c7:ae:3e:9a:4f:86:45:87:83:e8:f9:27:f9:25:
d5:01:12:04:82:33:d6:03:b3:02:ac:ed:8b:b1:e4:63:8a:88:
30:8c:a6:c1:e3:f2:a9:07:80:3b:21:dc:2e:30:de:da:c1:7e:
b1:e2:5e:a2:f5:7b:b0:30:48:bb:2f:2c:03:1c:c6:a8:6b:e6:
81:e1:ad:73:c7:13:fc:65:a9:b0:5f:90:62:52:c2:2d:24:c1:
4b:9d:f6:56:ad:93:68:29:3a:73:10:2b:a1:39:15:2b:56:5a:
a7:d1:84:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:14:00 2026 by rpki-client