Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
File: CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft (raw, json)
Hash identifier: t1mhoZdZpOlDKO/wQ10NJ1JGxjCWlzzBluoaPoh7gss=
Subject key identifier: 59:AB:2B:F4:9A:08:67:19:49:F1:21:04:54:DF:1E:1A:39:C7:E4:94
Authority key identifier: 0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
Certificate issuer: /CN=0b1027ace17f0067f697c65361488192eaf64138
Certificate serial: 019F91DA189238CBC7A4FDC0969CCC710141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 02:00:16 +0000
Manifest this update: Fri 24 Jul 2026 02:00:16 +0000
Manifest next update: Sat 25 Jul 2026 02:00:16 +0000
Files and hashes: 1: CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl (hash: +hr9n+t8djdXLRMDkdahgHxAjG0MD5eyP1msee47xRg=)
2: olOPnaLLnIT6RL2jFeXy_mY0R1U.roa (hash: WWXON9JXIV3ioE2DMW0bmhdUFZ19nV5gUDCVfyMR3to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:18:92:38:cb:c7:a4:fd:c0:96:9c:cc:71:01:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1027ace17f0067f697c65361488192eaf64138
Validity
Not Before: Jul 24 02:00:16 2026 GMT
Not After : Jul 25 02:00:16 2026 GMT
Subject: CN=59ab2bf49a08671949f1210454df1e1a39c7e494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:93:32:86:5f:83:1f:7e:71:d3:f1:69:09:b5:
16:8b:d6:96:52:80:3f:51:e1:16:1e:42:28:3f:b9:
dd:c2:f3:d1:93:0b:b3:19:e2:f9:2d:1a:52:8c:48:
58:e1:cc:fc:98:87:a8:ee:c6:2c:7e:b3:78:a4:4d:
e7:ae:ca:97:cd:4b:c7:f1:aa:b1:b5:ba:92:22:2d:
72:a2:0a:3d:9a:3c:fb:8b:27:1e:fa:f5:b7:1d:85:
51:70:0c:20:c8:91:8c:8d:4c:c4:12:d1:3d:63:a9:
be:2e:58:b7:62:c1:00:e1:c6:f4:99:76:94:5a:0a:
8e:e1:c0:65:74:fa:72:64:06:8b:3d:9a:0e:55:22:
51:e8:21:37:60:82:42:33:d9:8a:5d:29:3f:e9:03:
f4:f7:c9:52:81:0f:0c:d4:95:0b:68:c7:1d:13:ca:
67:94:45:0a:79:ff:44:c8:1b:a1:81:ea:5a:42:ea:
0b:be:cd:3f:22:b8:15:dc:ad:63:4d:15:bb:24:45:
d3:a3:31:2c:da:12:e1:57:61:85:47:68:7f:23:34:
9a:4f:70:a5:66:22:62:58:6c:f5:a4:2b:64:3f:3a:
0d:2b:92:37:8e:14:ba:7a:9a:5f:e6:21:28:e5:0a:
09:58:67:dc:52:a1:d3:61:f7:2f:30:92:b1:78:91:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AB:2B:F4:9A:08:67:19:49:F1:21:04:54:DF:1E:1A:39:C7:E4:94
X509v3 Authority Key Identifier:
keyid:0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:38:e1:a2:14:25:25:18:0c:a5:99:c0:5e:d7:ac:a8:44:4c:
04:fb:fe:ce:f4:9a:79:e3:d8:0f:12:6a:b4:be:dd:4e:f3:eb:
0b:98:cc:29:71:ad:85:e3:ac:60:27:f3:7d:17:25:e9:ee:f1:
2b:0e:aa:e7:d5:5d:7b:d5:20:67:ca:4a:bb:88:42:fc:59:bd:
eb:a9:ea:1c:51:8a:0d:0f:86:36:15:d6:5d:78:b4:50:b9:ab:
1a:4f:e4:d3:22:f0:91:6c:0e:56:eb:02:6a:78:4c:71:56:20:
b9:8d:04:c6:df:fd:69:e4:10:62:c8:53:49:b8:13:ef:fa:48:
c5:4d:62:0f:ee:63:cd:23:61:eb:c9:84:1d:6d:16:c9:10:a7:
9d:96:df:56:17:72:ff:8e:45:f1:4d:5d:68:69:e8:6b:67:44:
d7:d8:ed:b3:07:98:34:c3:83:1a:4f:47:80:56:0a:0b:9e:1f:
eb:89:35:68:d7:a6:7a:75:55:aa:5d:c8:c8:d2:88:57:24:91:
c0:3e:0a:27:39:17:10:1a:ee:2d:ae:9b:df:64:b7:41:15:69:
da:b9:bd:1e:a1:ee:b3:23:74:77:a4:d2:90:87:ce:ca:d3:a4:
70:cd:bb:bd:87:6d:be:c1:d7:13:d0:f8:09:bd:0a:57:8e:fe:
69:b6:98:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:37 2026 by rpki-client