Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/632cc0-c9fd-46ae-94c4-58e18cf8fda8/1/CxqDlFI_lNxsuYoGxS9XfuAAr4k.mft
File: CxqDlFI_lNxsuYoGxS9XfuAAr4k.mft (raw, json)
Hash identifier: AfsSuGsL1rWjOqcN0xpqWxmo5oJOAUrM2/NKhegPqac=
Subject key identifier: C8:5C:7F:2C:7A:D9:EA:27:08:BE:1E:23:AF:19:9F:44:84:03:A8:C7
Authority key identifier: 0B:1A:83:94:52:3F:94:DC:6C:B9:8A:06:C5:2F:57:7E:E0:00:AF:89
Certificate issuer: /CN=0b1a8394523f94dc6cb98a06c52f577ee000af89
Certificate serial: 01A0D26EA64BD630AA7A2A0C5A6D9D101481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxqDlFI_lNxsuYoGxS9XfuAAr4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/632cc0-c9fd-46ae-94c4-58e18cf8fda8/1/CxqDlFI_lNxsuYoGxS9XfuAAr4k.mft
Manifest number: 5C
Signing time: Thu 24 Sep 2026 08:01:01 +0000
Manifest this update: Thu 24 Sep 2026 08:01:01 +0000
Manifest next update: Fri 25 Sep 2026 08:01:01 +0000
Files and hashes: 1: ASjoruai3KnAAHnbGzUX99HhN0g.roa (hash: 4FIl1h2XJbFBe2bFejPyIMlAp59IVK0TKVlC3QwpJjY=)
2: CxqDlFI_lNxsuYoGxS9XfuAAr4k.crl (hash: pBO8oLz4u3CW7E8zKF+hhehry01AiNPqMGXFqrv47eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/632cc0-c9fd-46ae-94c4-58e18cf8fda8/1/CxqDlFI_lNxsuYoGxS9XfuAAr4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/632cc0-c9fd-46ae-94c4-58e18cf8fda8/1/CxqDlFI_lNxsuYoGxS9XfuAAr4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxqDlFI_lNxsuYoGxS9XfuAAr4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:a6:4b:d6:30:aa:7a:2a:0c:5a:6d:9d:10:14:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1a8394523f94dc6cb98a06c52f577ee000af89
Validity
Not Before: Sep 24 08:01:01 2026 GMT
Not After : Sep 25 08:01:01 2026 GMT
Subject: CN=c85c7f2c7ad9ea2708be1e23af199f448403a8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2f:a7:e8:70:69:69:4f:a0:fa:ac:1d:97:3d:
ef:e1:32:cd:bc:c7:0f:7e:00:5b:54:38:3d:ec:4b:
96:c0:e5:ff:1a:8f:2f:17:00:4f:28:2a:16:18:ce:
b0:64:b1:50:3a:c1:9b:67:27:69:18:3e:2f:d1:11:
0f:59:94:1d:86:11:7b:4f:fc:a6:3a:0e:11:fd:65:
49:6b:25:e5:46:84:c3:96:22:e8:fa:8d:2c:c5:06:
84:1b:44:95:22:3b:12:1a:1b:ea:56:02:a1:cb:c9:
01:a2:69:5b:6f:99:a3:b0:b4:8a:94:89:d2:f2:2d:
cf:5b:b2:b7:66:29:cf:62:87:64:0c:39:7e:97:27:
e1:ab:df:c7:1f:f8:7c:aa:7b:15:20:fc:46:30:7a:
b8:3b:63:b2:46:bb:8c:5c:88:f8:fb:7d:4c:b1:51:
85:f5:34:3d:8d:bf:72:ff:4c:bd:3d:a3:0d:70:f5:
06:83:31:5e:9e:cb:19:ab:a2:5f:97:b1:f6:d1:d8:
51:8d:b8:28:ca:78:90:ec:f0:02:f1:15:ed:6c:69:
2b:87:20:8e:c5:6f:f4:5f:01:a2:77:95:09:46:27:
4b:e9:1d:3d:e8:3a:e1:8f:28:cc:c1:29:58:d9:25:
e7:06:de:73:a2:f8:a3:62:95:44:f8:b7:6f:1d:37:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5C:7F:2C:7A:D9:EA:27:08:BE:1E:23:AF:19:9F:44:84:03:A8:C7
X509v3 Authority Key Identifier:
keyid:0B:1A:83:94:52:3F:94:DC:6C:B9:8A:06:C5:2F:57:7E:E0:00:AF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxqDlFI_lNxsuYoGxS9XfuAAr4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/632cc0-c9fd-46ae-94c4-58e18cf8fda8/1/CxqDlFI_lNxsuYoGxS9XfuAAr4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/632cc0-c9fd-46ae-94c4-58e18cf8fda8/1/CxqDlFI_lNxsuYoGxS9XfuAAr4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9e:a3:38:98:8a:9a:7d:42:58:e1:c6:e8:ab:38:e0:3c:53:
f5:7f:e8:1a:06:63:55:c4:88:7a:2f:9f:66:19:2a:e6:76:fc:
d5:77:e5:9d:c5:e2:23:bb:d0:7c:cd:5a:d1:79:06:09:af:69:
de:67:a5:c8:34:50:21:cb:6c:f8:ca:a7:bb:86:61:16:61:01:
fc:8b:c5:9b:ae:35:1b:2a:05:ad:c3:16:03:3f:1d:67:ef:61:
ff:f6:15:a2:e9:8f:47:9f:47:9d:4c:33:01:89:1a:b5:aa:ce:
c5:01:0f:9c:37:aa:4e:10:6f:7f:61:c7:b5:90:42:9b:54:68:
f7:c4:09:ff:c1:01:3a:69:ec:70:60:03:ca:e1:da:25:26:70:
f0:00:cb:b9:12:72:36:6f:fd:4b:b9:0d:b1:db:62:d0:28:b8:
c6:11:a2:26:85:97:fa:fb:82:4b:65:6f:77:c1:e3:db:99:01:
36:ff:a9:95:1d:d3:db:2e:3e:d4:7c:36:3a:d1:92:7c:fc:c9:
7c:8a:f4:9c:25:19:80:8c:18:6d:cd:16:b3:92:5b:1b:0e:d2:
8c:d2:2e:33:f3:d6:64:f7:64:1d:80:ba:fd:13:a8:77:05:65:
e2:2f:3a:a1:6e:73:27:82:68:01:95:eb:c1:c0:ec:d7:e3:eb:
f5:c0:92:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:16:03 2026 by rpki-client