Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
File: CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft (raw, json)
Hash identifier: E2MxRSBI9/W/z7IvoLmJUplMFKvS+KuYX4JzNx8WLfM=
Subject key identifier: CB:4C:94:97:6A:A3:14:E4:1F:55:DF:09:2C:93:E7:C9:13:47:7A:17
Authority key identifier: 0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
Certificate issuer: /CN=0b1027ace17f0067f697c65361488192eaf64138
Certificate serial: 01A0CCA314EC035639058624F403AA596ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
Manifest number: 1A69
Signing time: Wed 23 Sep 2026 05:00:34 +0000
Manifest this update: Wed 23 Sep 2026 05:00:34 +0000
Manifest next update: Thu 24 Sep 2026 05:00:34 +0000
Files and hashes: 1: CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl (hash: tYRBnqWknX2OSDSGKFvC6ymKjIxt1E0vJa+5QyJPW+Q=)
2: olOPnaLLnIT6RL2jFeXy_mY0R1U.roa (hash: WWXON9JXIV3ioE2DMW0bmhdUFZ19nV5gUDCVfyMR3to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:14:ec:03:56:39:05:86:24:f4:03:aa:59:6e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1027ace17f0067f697c65361488192eaf64138
Validity
Not Before: Sep 23 05:00:34 2026 GMT
Not After : Sep 24 05:00:34 2026 GMT
Subject: CN=cb4c94976aa314e41f55df092c93e7c913477a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fd:ac:d6:35:0d:b6:45:cf:e4:bf:7d:61:70:
69:71:2c:78:d0:0c:50:dc:44:af:26:91:3f:6a:f4:
1d:3c:24:84:cc:45:0b:5f:e5:46:f6:00:50:0c:b3:
2e:33:b7:39:c7:d0:94:08:91:ed:34:2c:a4:29:93:
00:e8:0f:2c:c0:39:b4:5b:33:c6:37:3b:af:f0:cb:
9a:5d:63:2f:43:37:f7:0b:86:11:71:28:4f:de:1f:
f9:f5:12:8c:59:18:e6:06:86:f7:37:55:78:9d:2c:
63:d6:c0:da:4a:eb:8e:1e:47:ac:03:6d:b0:08:13:
fa:6d:47:c2:c3:5c:e1:6a:ee:4f:56:08:81:b9:ba:
8f:f4:ff:e4:b2:02:d6:5d:72:5d:dc:45:aa:e4:b0:
56:42:ed:b0:37:1a:79:10:f2:7f:e9:9e:11:8a:4d:
6e:bc:39:ac:04:ae:61:53:c5:28:1a:22:5c:6c:e4:
7b:61:fd:dd:ec:05:b4:2f:ea:70:c2:8f:0e:ff:19:
93:52:0b:94:f9:d4:d1:59:dc:9a:db:42:ab:d4:0c:
0a:2f:e3:a9:d2:e7:be:21:a3:c2:d8:9f:85:93:32:
da:24:47:7c:22:d9:f7:e3:b4:5f:70:a7:ae:de:3e:
70:63:3e:77:32:8f:c8:e7:49:46:bc:46:51:3e:93:
03:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4C:94:97:6A:A3:14:E4:1F:55:DF:09:2C:93:E7:C9:13:47:7A:17
X509v3 Authority Key Identifier:
keyid:0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b1:a6:ec:0e:cd:01:72:60:0f:54:6c:01:18:2a:7c:f5:48:
c3:48:a5:c6:3a:db:fe:20:34:ca:90:8b:24:cc:23:90:5d:3d:
d6:59:73:8f:c5:38:a0:ad:3e:3b:6f:2d:9d:63:fa:fb:d1:62:
6b:c3:8d:c9:89:92:55:5e:c3:6c:ee:bb:5f:c5:b4:b9:4d:94:
7f:07:84:f6:4b:e7:a4:5a:83:9b:2a:ff:01:92:33:46:a2:66:
10:94:77:50:2e:02:90:2c:1b:ad:7c:23:58:ca:4c:b6:6f:bc:
a9:05:fb:44:24:f5:1a:f2:b9:65:b1:f8:e7:cb:f8:1a:60:b2:
2a:10:26:43:be:44:43:4d:20:2f:fb:e0:ef:cc:2a:68:ae:22:
66:1c:5a:8a:ee:03:49:a0:5d:4a:d7:fa:75:df:8c:74:d0:49:
bc:7d:14:da:66:67:ae:1f:9b:ad:01:cf:65:a2:72:60:97:23:
a1:04:ab:03:96:4c:22:0b:f4:08:15:e9:ad:1b:cd:4b:a9:df:
83:a9:34:fa:fa:28:00:cb:4e:2a:82:10:95:14:78:9a:f9:41:
70:7e:9e:d0:86:4e:86:7d:49:13:45:f9:97:56:82:0c:50:f9:
05:b2:15:35:3e:19:4d:7a:0a:39:c9:6d:bb:cb:b8:37:6e:4d:
0b:f7:3e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:51:26 2026 by rpki-client