Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
File: Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft (raw, json)
Hash identifier: noVwGl0tDgAoP0QTGdwusRpmfn3Ier6b9G6c8g83MqI=
Subject key identifier: 89:06:EC:98:E7:D1:B1:17:45:98:03:90:DE:55:06:43:F5:00:50:56
Authority key identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
Certificate issuer: /CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Certificate serial: 01A1C47981EED1FC3DF5F4800C712C3CE2ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
Manifest number: 0AAA
Signing time: Tue 10 Nov 2026 08:00:59 +0000
Manifest this update: Tue 10 Nov 2026 08:00:59 +0000
Manifest next update: Wed 11 Nov 2026 08:00:59 +0000
Files and hashes: 1: Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl (hash: N+xEY4qbeOt4T3Ux4SUox5RW2bVsewmBJew60WocWgo=)
2: pGFwy3aEV2qhiZhwH7yaMrR8fo0.roa (hash: KW1x50QC1Ci4rIl9Ru/vbiHcwzJviAGG+0QbXfYDiO8=)
3: qlxYIa3PjXKqV7hlzapOlNgcm0I.roa (hash: 1ZBb0ZiezUactfqIZmt39M9PRVHG48Yw9HnDmIgNQw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:79:81:ee:d1:fc:3d:f5:f4:80:0c:71:2c:3c:e2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Validity
Not Before: Nov 10 08:00:59 2026 GMT
Not After : Nov 11 08:00:59 2026 GMT
Subject: CN=8906ec98e7d1b11745980390de550643f5005056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:07:b6:83:e2:b7:22:70:90:3a:64:19:c4:e5:
9e:2d:d0:5d:9c:49:0c:4a:02:12:ea:86:78:64:ca:
73:d2:a6:46:5b:e1:7a:df:48:bf:e3:60:dd:20:8e:
16:d5:97:a0:66:a4:01:a3:6f:b4:ac:e0:8c:75:e8:
9d:79:33:29:1f:d3:2e:6c:32:8e:2a:58:c1:69:a8:
13:34:4c:49:8a:89:b8:ad:48:f9:a7:3e:32:0c:a3:
21:99:95:16:e3:5c:05:46:fb:a9:69:29:41:26:4b:
45:89:19:1a:1f:67:e8:19:a1:e8:21:04:06:74:ee:
21:9d:e2:8a:c1:b8:d4:f5:6b:25:68:82:f2:d0:fd:
20:c6:24:b6:00:79:92:69:ef:05:42:1f:73:d3:a1:
87:74:d7:ec:66:d8:f0:05:8b:82:7b:bf:0b:ad:ea:
fb:cb:c1:d7:d4:4e:c3:fc:ce:73:3a:3a:8f:f5:17:
cb:d6:87:68:9c:ba:50:96:2b:02:76:ae:f7:eb:12:
f9:d4:ea:d1:21:b5:cc:00:89:a5:30:4a:78:ee:81:
db:96:6a:02:b3:63:ec:c1:eb:a3:ec:47:5d:13:66:
ff:1c:d2:83:7d:4a:2c:db:ca:46:7b:04:e9:aa:62:
47:9e:e2:1d:f2:28:de:b0:fc:de:d2:22:c5:f5:f1:
83:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:06:EC:98:E7:D1:B1:17:45:98:03:90:DE:55:06:43:F5:00:50:56
X509v3 Authority Key Identifier:
keyid:0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:3f:13:bc:33:12:a6:7a:95:fa:28:c2:23:c1:42:33:81:82:
84:a3:d5:a9:e8:73:9c:d7:b9:3e:e6:64:59:e7:6a:bb:7a:8c:
96:bb:52:e9:be:ff:3c:54:cc:be:c6:b7:b0:ae:9d:cc:9e:a9:
7b:85:25:ae:34:f8:a2:a2:09:85:bb:53:f3:58:ff:a7:f1:eb:
be:27:f0:2d:1e:e2:5e:02:04:05:6b:9e:8e:08:9f:d1:a6:4f:
5f:1f:d6:66:32:3c:56:ee:cc:45:6e:af:be:2c:2e:e2:1a:03:
c3:22:78:2f:c1:5e:55:ba:37:f2:4c:9c:7c:ff:fa:e8:31:5b:
91:72:2f:76:3a:e5:93:a9:9c:31:ed:fe:36:02:0e:26:e3:25:
7a:75:a6:ea:20:ae:df:e7:e4:02:11:89:81:83:a8:f1:f8:ff:
81:9a:d0:ed:6d:cb:a3:19:a8:39:1c:a0:11:09:c2:bd:7a:63:
2c:9f:e3:7d:e9:0e:5b:02:35:2b:5b:99:93:57:52:e5:4c:d7:
09:fd:2f:60:a8:24:cd:38:0d:9c:10:01:6d:58:00:60:df:3d:
d0:e2:a3:75:94:c7:c7:75:76:81:dd:3b:34:75:33:3a:a1:4b:
c6:91:d6:01:3f:dc:f1:cf:b1:a3:c9:72:0c:2c:7a:15:2f:39:
ce:dd:69:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 17:12:09 2026 by rpki-client