Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
File: CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft (raw, json)
Hash identifier: SQNN2sCvuRVUcx4S6lysjxDFPztTImdx8TyHtmjxr58=
Subject key identifier: 16:C5:38:52:AF:6B:CB:D9:46:75:6F:11:99:03:9A:4C:2C:E0:10:4A
Authority key identifier: 0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
Certificate issuer: /CN=0b1027ace17f0067f697c65361488192eaf64138
Certificate serial: 019D27E044EDCA284AD7D65BBFF499360F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 02:01:42 +0000
Manifest this update: Thu 26 Mar 2026 02:01:42 +0000
Manifest next update: Fri 27 Mar 2026 02:01:42 +0000
Files and hashes: 1: CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl (hash: ggOWi8b/PKzrltDIOwwcg+HFa0MKKI2+uHeQf4sa46s=)
2: olOPnaLLnIT6RL2jFeXy_mY0R1U.roa (hash: WWXON9JXIV3ioE2DMW0bmhdUFZ19nV5gUDCVfyMR3to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:44:ed:ca:28:4a:d7:d6:5b:bf:f4:99:36:0f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1027ace17f0067f697c65361488192eaf64138
Validity
Not Before: Mar 26 02:01:42 2026 GMT
Not After : Mar 27 02:01:42 2026 GMT
Subject: CN=16c53852af6bcbd946756f1199039a4c2ce0104a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:09:84:f2:42:ef:b3:09:8d:92:37:2e:a5:93:
83:8a:11:fc:eb:92:01:8b:9e:32:87:9a:8f:24:67:
a1:37:42:c2:d8:5d:de:5f:a0:b4:1a:52:3f:14:b6:
11:07:f0:70:a1:7e:7a:bd:12:35:0d:e9:8f:98:00:
c3:50:64:db:3c:4c:70:27:eb:d0:44:08:8d:1c:bb:
dd:10:8d:d8:53:14:45:d8:81:dc:ef:35:da:68:71:
fc:5c:de:10:96:f9:29:92:b0:aa:d7:6d:9f:8e:37:
9f:76:47:96:41:9d:12:44:ef:04:ad:75:08:39:12:
2c:e8:42:93:73:1d:4d:a0:23:29:0e:9e:c5:7b:29:
e2:77:92:68:7c:9d:5c:37:c3:21:bd:dd:d2:f2:f0:
cc:55:bd:77:7a:ee:e1:e5:a3:ac:c3:69:16:61:d1:
46:50:f3:fa:ff:75:45:af:4d:43:4f:39:79:d5:61:
48:07:f9:a1:29:a0:57:f3:68:11:5f:43:8d:d8:f6:
51:6c:9c:75:86:78:27:94:9d:52:a6:ac:6f:86:d0:
59:f3:a5:68:e8:9e:1a:05:3c:b1:53:1f:a5:2a:fa:
e4:ff:a5:87:6f:fd:62:75:77:f0:51:ec:1f:65:f0:
17:f9:d3:00:ac:cd:82:a4:21:fd:52:f8:49:38:ce:
31:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C5:38:52:AF:6B:CB:D9:46:75:6F:11:99:03:9A:4C:2C:E0:10:4A
X509v3 Authority Key Identifier:
keyid:0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:96:55:6b:c8:a7:01:a0:83:4d:44:2f:fb:60:49:27:53:fa:
60:42:2f:e7:61:64:0c:13:4b:22:a4:8f:b0:fa:6f:3e:ce:38:
0e:bf:15:96:ed:52:3b:9a:bc:56:1b:88:48:9f:e3:4a:cb:f8:
f7:e5:8a:02:36:cc:9b:d6:0d:b2:fe:18:84:b0:d6:61:a4:e8:
68:ac:30:f7:f9:5c:58:f5:4a:53:c7:f0:9c:94:9c:13:ff:35:
ed:50:ab:dd:db:5e:44:1d:82:ad:6c:87:ab:6a:b6:ea:e2:a5:
f2:c5:fa:bf:cc:35:c5:44:08:bf:f9:af:9d:f6:ab:10:ae:f9:
2a:8f:ba:05:ad:28:ff:7c:e0:ca:70:b9:4c:e2:d7:82:da:d1:
54:33:a1:34:68:77:a3:69:48:78:ff:d2:33:74:5a:da:32:9d:
e8:36:ff:d2:23:c9:04:d8:93:3a:87:d0:b3:c6:37:d0:77:df:
77:6a:85:ee:ee:b3:da:f8:14:1d:ed:7a:ab:6d:52:a1:bf:b6:
95:c8:14:18:f1:58:cf:b8:f9:9f:52:07:92:37:8c:ea:0f:70:
f5:cf:87:86:50:d9:5b:0f:e8:c0:d4:60:e8:4c:94:d3:06:80:
43:3a:c4:a6:e1:52:48:21:53:88:17:95:df:86:ed:00:7b:d2:
85:18:38:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:36 2026 by rpki-client