Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
File: CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft (raw, json)
Hash identifier: qRgVrjQkuRe8k+IuXpJ8/X0Bhei84J/VG1v7ixfzvJQ=
Subject key identifier: FB:4F:2F:08:4B:A9:4E:11:A3:5E:B2:B7:7A:41:8B:0A:7A:00:53:FD
Authority key identifier: 0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
Certificate issuer: /CN=0b1027ace17f0067f697c65361488192eaf64138
Certificate serial: 019E1D229C5EE5949B18958D647ADA6D059B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 17:01:07 +0000
Manifest this update: Tue 12 May 2026 17:01:07 +0000
Manifest next update: Wed 13 May 2026 17:01:07 +0000
Files and hashes: 1: CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl (hash: p4SN0dyrb6+bVQc9m5FNdduw3mHCnfClPlb8oFvCvh4=)
2: olOPnaLLnIT6RL2jFeXy_mY0R1U.roa (hash: WWXON9JXIV3ioE2DMW0bmhdUFZ19nV5gUDCVfyMR3to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:9c:5e:e5:94:9b:18:95:8d:64:7a:da:6d:05:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1027ace17f0067f697c65361488192eaf64138
Validity
Not Before: May 12 17:01:07 2026 GMT
Not After : May 13 17:01:07 2026 GMT
Subject: CN=fb4f2f084ba94e11a35eb2b77a418b0a7a0053fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:f8:c3:06:eb:20:49:43:5c:52:e7:7c:03:
98:6e:f8:49:eb:f4:1e:ef:f5:23:06:bb:e7:51:43:
88:2c:c4:f6:9f:3a:3a:17:d0:d9:2a:09:c1:0b:3b:
2f:86:41:91:86:8a:52:a8:a1:93:4c:cc:f1:e4:79:
0c:db:a1:81:8b:6e:2d:80:4a:93:89:cd:be:1e:33:
70:5e:ac:32:68:b9:2e:4d:50:c8:4b:c4:f9:3a:58:
bd:12:3d:e0:39:3d:61:56:39:01:7b:f5:f6:02:c0:
21:b7:4f:99:15:51:e9:db:eb:80:ed:93:97:0a:54:
25:51:a8:ce:5f:d3:b7:1a:41:96:15:91:62:2e:25:
da:1e:a5:f3:05:08:c4:50:b3:02:f5:39:ce:83:4c:
c2:38:db:db:fc:a1:ba:b5:9e:58:e0:09:ff:cd:4f:
98:f1:77:97:1a:3c:00:cb:d9:4b:c7:39:37:a2:06:
64:ce:74:00:2b:a3:2a:20:75:0b:c0:01:91:de:43:
0c:66:5e:e6:c5:8a:29:4f:be:99:9d:04:f2:f5:34:
0b:1d:df:b6:ba:37:4d:b4:4c:6d:2e:f5:64:17:fd:
13:71:76:6d:d7:49:75:00:c3:d6:67:26:d2:5b:1a:
3e:a3:99:57:ce:aa:2e:49:0b:74:37:9c:f7:21:bf:
d1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4F:2F:08:4B:A9:4E:11:A3:5E:B2:B7:7A:41:8B:0A:7A:00:53:FD
X509v3 Authority Key Identifier:
keyid:0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d8:47:bf:a0:23:12:82:8d:7d:c2:1b:05:f4:db:2a:c5:c6:
63:eb:5a:27:04:54:bb:80:39:e5:b0:15:c3:e5:a5:eb:93:e9:
65:e5:5a:a9:6a:56:a4:c9:1b:7c:00:f0:2e:72:ef:e3:40:e1:
3b:c2:12:7f:81:13:c2:3b:2e:93:db:65:2b:6e:46:cc:79:a5:
f0:27:1c:b6:57:5b:bf:89:e7:ba:1c:a2:e2:98:73:06:0e:fb:
be:17:fd:ff:5b:96:ab:2c:c8:81:b4:b2:08:15:18:aa:4f:78:
a6:5c:59:2f:f3:d6:b4:12:97:6c:64:b6:27:7a:36:aa:c9:43:
8a:d4:f4:9f:d6:3f:5d:f6:5d:63:8d:b1:47:67:59:a3:4e:73:
0b:e2:45:7b:dc:cc:c5:56:8e:7b:b2:a6:a8:82:da:bc:aa:23:
2d:8b:fc:e4:c2:bc:b8:15:08:f1:6c:61:67:31:bc:fc:32:5e:
11:38:79:ed:b5:3e:d0:75:9f:9d:4a:ac:bd:8e:5e:d6:5b:74:
f1:c6:7e:6c:47:b7:5b:d5:32:da:86:c1:5e:cd:1b:41:7a:36:
09:3a:07:74:b6:23:e0:8e:7b:cc:29:7a:e0:31:af:02:76:9f:
80:4a:d4:f0:33:d7:65:97:89:b5:c4:19:5a:a1:ec:29:50:bc:
ce:d9:c6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:55:21 2026 by rpki-client