Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
File: cxkAeiit4HgdMS2NSUcts2dnBBY.mft (raw, json)
Hash identifier: 33aSQyxlD7kFPXgSoGZXdqFPgN07KarJxXQ9oqEpyJg=
Subject key identifier: 6C:61:86:63:1D:4B:D2:3E:AC:82:08:FB:C2:85:DC:96:03:52:C9:2D
Authority key identifier: 73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
Certificate issuer: /CN=7319007a28ade0781d312d8d49472db367670416
Certificate serial: 019F9624EE971C085370195A9941BB8D6B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
Manifest number: 0C45
Signing time: Fri 24 Jul 2026 22:00:30 +0000
Manifest this update: Fri 24 Jul 2026 22:00:30 +0000
Manifest next update: Sat 25 Jul 2026 22:00:30 +0000
Files and hashes: 1: Le8K7qSkEZ1_FmI_JNvcQwDT3kM.roa (hash: YPGYe40UQA7fHzeXPlUUiQ7ZZraM1bL1CPz1T+qTDdY=)
2: cxkAeiit4HgdMS2NSUcts2dnBBY.crl (hash: UH06UqtfFp0WKAzTNNjOBZ/VCxGy+YaGdjdE3lK35TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:24:ee:97:1c:08:53:70:19:5a:99:41:bb:8d:6b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319007a28ade0781d312d8d49472db367670416
Validity
Not Before: Jul 24 22:00:30 2026 GMT
Not After : Jul 25 22:00:30 2026 GMT
Subject: CN=6c6186631d4bd23eac8208fbc285dc960352c92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ed:53:02:fb:03:0f:05:6b:75:18:68:9b:8c:
44:57:a2:d2:fc:53:08:12:d9:46:8d:31:86:91:93:
e3:47:d9:ab:a1:4b:13:69:ad:ea:29:bb:7e:da:ee:
54:1d:7e:8c:4c:a0:3c:4e:73:5c:b8:8a:cc:7a:ab:
01:b3:66:42:91:7c:3c:39:25:38:c5:96:a1:e5:bb:
51:cf:54:01:79:bc:69:a4:8c:a6:50:19:a5:33:c1:
fc:82:60:8b:6e:75:5a:b0:01:7c:e7:50:51:6f:35:
d9:92:e5:e6:51:ad:8e:30:f6:40:55:e9:5b:99:4a:
88:4b:e9:15:58:72:a4:b7:67:14:62:f0:64:6d:bc:
fd:59:b5:0e:c0:fa:cb:4c:01:f9:a9:11:e5:16:d7:
d4:00:9e:95:26:93:2e:c0:4a:37:57:7d:23:52:15:
c1:79:23:93:02:a5:4a:72:0f:62:16:7d:24:8f:e7:
e9:cb:a8:94:2e:b0:a6:3c:6d:8c:eb:65:09:1a:36:
e5:44:08:26:bd:41:5f:ed:fe:85:cd:ea:93:c4:b2:
62:18:8d:3c:e0:13:1e:23:8b:5a:e0:18:bc:1e:15:
eb:c1:5f:9d:8a:2d:aa:25:ec:18:e1:75:74:b4:48:
06:40:2e:7f:83:89:ed:a1:e8:8a:f0:c6:c2:4e:59:
6d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:61:86:63:1D:4B:D2:3E:AC:82:08:FB:C2:85:DC:96:03:52:C9:2D
X509v3 Authority Key Identifier:
keyid:73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:9d:16:c1:d8:bd:3b:f7:e4:5d:0a:04:84:30:8d:ab:ac:1e:
b6:a4:68:9e:03:9e:11:a1:59:88:71:cd:4d:e3:42:f2:a1:e8:
02:dc:db:e7:ac:af:0f:b9:4b:56:14:ba:95:01:b0:55:fb:7a:
c3:fe:f3:e9:f6:94:31:e6:30:b1:72:74:09:bd:bd:09:b1:1a:
c9:73:96:dd:d0:75:04:03:ea:93:71:42:df:8f:15:dc:c0:2c:
af:c4:69:35:ab:39:1f:da:e6:16:5b:ac:51:eb:17:8a:e4:6d:
d4:3a:79:9b:75:0b:aa:ef:a5:0c:f7:d7:9f:bd:3c:ba:32:0b:
ef:b6:77:5f:93:ff:42:6d:f0:a7:e1:85:0b:38:50:af:0d:04:
87:f0:18:17:30:72:da:9e:cf:c1:b3:26:4b:da:6f:72:17:98:
bc:28:44:d4:e4:ca:19:36:14:48:f9:d4:01:08:0c:1d:fc:1a:
b1:dd:fc:8b:6a:a7:42:8a:bf:9f:cc:01:49:af:a1:e1:86:43:
20:17:c4:93:6f:1c:05:8c:29:c8:8e:b1:41:bc:dd:7d:e9:4e:
a2:16:f1:c2:d5:e2:b1:f5:fa:f0:57:dd:aa:f0:72:ad:91:ee:
c9:48:e9:5e:f1:bc:c7:fc:ac:5b:7c:27:b3:1c:26:9b:98:dc:
88:21:c8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:31 2026 by rpki-client