Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
File: Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft (raw, json)
Hash identifier: L+jBPihPzE4fCvv5CYosl1YyHIy/VoUKS3uktX4DBv4=
Subject key identifier: 30:05:9D:90:F6:ED:E3:31:A2:07:EF:F5:C3:3C:EF:00:44:22:D0:67
Authority key identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
Certificate issuer: /CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Certificate serial: 019D9886BEA3D28B77BC8C45711F372403F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
Manifest number: 0881
Signing time: Thu 16 Apr 2026 23:01:00 +0000
Manifest this update: Thu 16 Apr 2026 23:01:00 +0000
Manifest next update: Fri 17 Apr 2026 23:01:00 +0000
Files and hashes: 1: Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl (hash: dFiK8nKGdGrOxXqs0+rUBiDx9zdDhprtVRXbAYVkvwM=)
2: pGFwy3aEV2qhiZhwH7yaMrR8fo0.roa (hash: KW1x50QC1Ci4rIl9Ru/vbiHcwzJviAGG+0QbXfYDiO8=)
3: qlxYIa3PjXKqV7hlzapOlNgcm0I.roa (hash: 1ZBb0ZiezUactfqIZmt39M9PRVHG48Yw9HnDmIgNQw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:be:a3:d2:8b:77:bc:8c:45:71:1f:37:24:03:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Validity
Not Before: Apr 16 23:01:00 2026 GMT
Not After : Apr 17 23:01:00 2026 GMT
Subject: CN=30059d90f6ede331a207eff5c33cef004422d067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:87:fc:3e:5e:df:e6:df:73:cc:fe:82:6f:e6:
47:f5:18:67:dc:38:cf:3d:f5:de:4d:3a:25:b4:6b:
38:bc:d2:6e:e2:9f:ca:98:90:8a:2b:a2:d1:48:92:
52:de:d8:b6:67:63:f5:53:2f:02:41:7d:87:77:cd:
a9:96:03:81:0c:8e:33:92:86:ff:83:15:66:86:67:
a2:32:94:e7:aa:c6:2e:eb:27:db:7f:0f:62:6c:49:
03:bf:c8:27:e0:88:93:2c:3a:77:64:6f:7d:6c:14:
ea:01:cf:f5:1a:79:c7:ef:74:c6:2b:b7:05:c6:8b:
db:fe:e6:a1:5c:b6:a6:98:64:ab:7f:de:88:ae:05:
50:96:82:d8:dd:df:9c:73:80:92:26:29:78:f0:84:
b1:ab:b4:42:8f:7c:fc:6c:f0:d7:c6:84:de:34:16:
f4:75:bd:8f:c3:6a:3d:5a:6e:40:14:e9:f2:fa:45:
e1:b0:0a:b7:ce:f6:68:98:08:30:68:7e:61:09:2a:
6e:45:f7:42:a6:8c:88:7a:d8:53:06:69:c5:36:81:
31:d1:44:bd:6a:18:d8:21:cf:20:5b:4d:f7:d5:6c:
4d:da:d8:67:35:bd:f6:91:62:0e:6e:cb:19:a9:da:
6b:3d:a4:c6:fa:03:8a:58:ff:35:98:a8:2a:66:d5:
5c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:05:9D:90:F6:ED:E3:31:A2:07:EF:F5:C3:3C:EF:00:44:22:D0:67
X509v3 Authority Key Identifier:
keyid:0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:aa:f1:21:cc:8a:30:42:e8:20:78:fc:7a:04:3b:bb:e7:f5:
1a:58:fa:47:81:df:9a:fa:96:69:30:33:7d:e1:5a:26:9c:af:
59:5d:e8:71:bf:24:db:f8:d5:b2:d2:f5:8e:95:8d:47:cd:b7:
ef:b7:ed:d9:2c:7b:82:26:7e:14:08:78:f5:1e:99:76:78:14:
79:36:03:98:bd:ee:32:81:b9:f1:97:24:35:66:7f:c4:d9:18:
ae:66:22:19:92:8b:94:01:99:b3:e4:41:42:00:f6:c8:64:c2:
06:a8:6f:fa:88:2f:b2:85:f9:d0:72:8d:36:19:96:f7:1b:48:
d3:9b:fb:6b:fe:44:88:98:fb:2e:60:de:4e:ce:86:a2:a0:34:
6c:7e:de:ba:82:14:23:75:f6:02:11:47:af:f9:e8:23:13:58:
98:92:16:77:d3:39:45:da:87:57:07:19:89:6d:32:c6:9a:eb:
85:5e:fe:e1:96:da:81:f9:7a:8b:97:5f:a0:13:ef:b4:ce:cb:
b2:c8:a4:08:c4:1f:d5:a6:6d:c2:af:e6:c9:fb:20:f8:5b:eb:
7d:be:c9:23:92:01:d6:a6:01:df:cd:37:79:a7:d4:10:d1:85:
45:bf:d0:91:7f:7d:29:34:f8:38:bb:63:d2:60:71:bf:a1:91:
58:86:e1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:23:07 2026 by rpki-client