Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
File: cxkAeiit4HgdMS2NSUcts2dnBBY.mft (raw, json)
Hash identifier: moNnkQKG4CpscblPkBIeejtVv3+XgBjbBHuLyYc7mUo=
Subject key identifier: FB:99:CF:F3:A5:C0:D3:F6:6C:58:28:3B:81:4D:0C:75:00:E3:30:F1
Authority key identifier: 73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
Certificate issuer: /CN=7319007a28ade0781d312d8d49472db367670416
Certificate serial: 01A110A8CD2D40C91F5BD2385B688569500B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
Manifest number: 0D09
Signing time: Tue 06 Oct 2026 10:01:00 +0000
Manifest this update: Tue 06 Oct 2026 10:01:00 +0000
Manifest next update: Wed 07 Oct 2026 10:01:00 +0000
Files and hashes: 1: Le8K7qSkEZ1_FmI_JNvcQwDT3kM.roa (hash: YPGYe40UQA7fHzeXPlUUiQ7ZZraM1bL1CPz1T+qTDdY=)
2: cxkAeiit4HgdMS2NSUcts2dnBBY.crl (hash: InMYe/XXtt3enppCqXnuNok7ZMilg+23QuVSGTlSUQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:a8:cd:2d:40:c9:1f:5b:d2:38:5b:68:85:69:50:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319007a28ade0781d312d8d49472db367670416
Validity
Not Before: Oct 6 10:01:00 2026 GMT
Not After : Oct 7 10:01:00 2026 GMT
Subject: CN=fb99cff3a5c0d3f66c58283b814d0c7500e330f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:37:7b:ae:0c:4f:f2:53:1e:ff:2f:ba:b1:89:
c6:47:de:b8:92:6b:c7:65:fb:fc:4a:2a:ca:a1:f9:
e4:e6:ad:16:f8:62:f9:e2:6f:9c:ab:99:e1:4c:4a:
c6:35:30:24:62:1e:77:2f:c5:a9:7e:dc:cd:40:47:
a6:51:7a:58:06:21:a3:ef:56:09:af:65:9b:12:43:
a7:8d:a3:67:49:7d:dd:65:e3:4b:fa:1d:9c:e9:16:
2f:b6:ff:46:0d:68:45:48:0b:98:df:f3:78:c6:f2:
25:97:e2:a5:9b:c8:aa:c4:f4:f2:cf:ce:50:3e:8c:
5e:03:24:d1:aa:c3:2c:3d:12:d9:16:2e:b8:d0:18:
77:69:2a:07:8b:c1:65:15:c4:75:9c:f3:d6:8d:ee:
d7:01:fe:1f:77:29:57:6c:00:a8:b2:b9:67:d6:fd:
d4:75:4f:8d:47:de:7d:a8:a1:95:2c:7f:2c:db:b5:
68:6e:e7:7a:ee:1c:64:df:2e:1d:01:eb:bb:19:bb:
f6:7d:89:f4:e1:d5:d0:41:af:61:9e:0e:be:88:d7:
68:af:4d:bb:8f:a3:54:df:08:2a:8d:dd:c7:ce:1c:
00:be:6d:3e:5d:13:ff:90:8e:8e:5d:d5:d3:b7:75:
8a:5b:32:db:61:aa:4e:44:f9:fc:7d:49:23:85:18:
9c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:99:CF:F3:A5:C0:D3:F6:6C:58:28:3B:81:4D:0C:75:00:E3:30:F1
X509v3 Authority Key Identifier:
keyid:73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b2:a9:2e:c3:1f:1d:34:24:7e:af:9e:e3:fd:14:2f:a9:76:
f5:00:a9:3c:c7:59:70:e8:f5:2e:80:11:78:fd:e0:4a:88:d0:
82:24:13:74:c6:f1:93:d7:4b:86:41:d8:22:24:71:b5:6f:3f:
f1:8f:45:e9:d6:1a:a8:e8:6a:f7:4e:65:a8:f8:b9:e1:81:7a:
f7:a7:5a:af:99:dc:55:97:50:79:a6:e8:3f:38:41:fd:8e:45:
97:96:9e:03:78:42:d3:11:cd:53:b6:a8:f6:3e:16:13:5c:ea:
18:3b:3b:cf:03:a0:b6:fa:26:c4:47:c0:3e:7b:5d:08:17:f8:
61:3a:19:0b:f9:7d:a9:e5:51:c5:b1:d4:57:df:49:82:6e:a9:
cc:9e:86:07:7c:04:6a:67:02:58:9a:2d:92:22:81:2f:79:e6:
b1:34:f9:40:80:f6:3f:0f:d4:87:04:a4:e8:cb:6c:f2:02:79:
f0:db:66:56:24:a8:1e:b4:4c:b2:28:b6:6f:c6:10:0c:78:9f:
7b:a7:79:2e:e1:c7:26:d8:65:cc:66:b5:96:b7:a1:6a:7f:7a:
d5:b3:95:cf:ee:a4:35:6f:7a:57:2f:c0:38:18:8c:0a:15:26:
40:db:e5:50:ee:14:0d:a7:8b:2b:65:86:51:af:73:5c:f7:e7:
97:3a:20:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEQqM0tQMkfW9I4W2iFaVALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMTkwMDdhMjhhZGUwNzgxZDMxMmQ4ZDQ5NDcyZGIzNjc2
NzA0MTYwHhcNMjYxMDA2MTAwMTAwWhcNMjYxMDA3MTAwMTAwWjAzMTEwLwYDVQQD
EyhmYjk5Y2ZmM2E1YzBkM2Y2NmM1ODI4M2I4MTRkMGM3NTAwZTMzMGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jd7rgxP8lMe/y+6sYnGR964kmvH
Zfv8SirKofnk5q0W+GL54m+cq5nhTErGNTAkYh53L8WpftzNQEemUXpYBiGj71YJ
r2WbEkOnjaNnSX3dZeNL+h2c6RYvtv9GDWhFSAuY3/N4xvIll+Klm8iqxPTyz85Q
PoxeAyTRqsMsPRLZFi640Bh3aSoHi8FlFcR1nPPWje7XAf4fdylXbACosrln1v3U
dU+NR959qKGVLH8s27Vobud67hxk3y4dAeu7Gbv2fYn04dXQQa9hng6+iNdor027
j6NU3wgqjd3HzhwAvm0+XRP/kI6OXdXTt3WKWzLbYapORPn8fUkjhRicJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPuZz/OlwNP2bFgoO4FNDHUA4zDxMB8GA1UdIwQY
MBaAFHMZAHooreB4HTEtjUlHLbNnZwQWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3hrQWVpaXQ0SGdkTVMyTlNVY3RzMmRuQkJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9mOGM3ZTItMzI4Mi00ZWJiLTg1MDgt
OWY5NDk0OTY2YzU0LzEvY3hrQWVpaXQ0SGdkTVMyTlNVY3RzMmRuQkJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9mOGM3ZTItMzI4Mi00ZWJiLTg1MDgtOWY5NDk0OTY2YzU0
LzEvY3hrQWVpaXQ0SGdkTVMyTlNVY3RzMmRuQkJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLKpLsMf
HTQkfq+e4/0UL6l29QCpPMdZcOj1LoAReP3gSojQgiQTdMbxk9dLhkHYIiRxtW8/
8Y9F6dYaqOhq905lqPi54YF696dar5ncVZdQeaboPzhB/Y5Fl5aeA3hC0xHNU7ao
9j4WE1zqGDs7zwOgtvomxEfAPntdCBf4YToZC/l9qeVRxbHUV99Jgm6pzJ6GB3wE
amcCWJotkiKBL3nmsTT5QID2Pw/UhwSk6Mts8gJ58NtmViSoHrRMsii2b8YQDHif
e6d5LuHHJthlzGa1lrehan961bOVz+6kNW96Vy/AOBiMChUmQNvlUO4UDaeLK2WG
Ua9zXPfnlzogig==
-----END CERTIFICATE-----
Generated at Tue Oct 6 14:34:18 2026 by rpki-client