Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
File: CxsxjlBXocEDQWB83d2ttG1xq_U.mft (raw, json)
Hash identifier: JYyBQaT0jWo/KGBnsHiXz9bg+iiClOktpkuIHxj+E3k=
Subject key identifier: 63:CD:BC:49:D8:73:0D:77:E1:A9:B6:71:11:64:21:B1:32:ED:45:61
Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
Certificate issuer: /CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Certificate serial: 019E1D594AEA0A8C2466C0EC33B7951290E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 18:00:51 +0000
Manifest this update: Tue 12 May 2026 18:00:51 +0000
Manifest next update: Wed 13 May 2026 18:00:51 +0000
Files and hashes: 1: AyjB4EHPCDq9p7LZ4QxN-ryxrkM.roa (hash: TjTKp2DaLx4thRMtFk13G01LVFaqUeVARGlNcCmXfhM=)
2: CxsxjlBXocEDQWB83d2ttG1xq_U.crl (hash: qB1W5ZblH+4KM7YUJ2lz/sJ9/T01A2ZxeZmjpGUYVgA=)
3: NjX_-QFT-KYIQb8IhhsWdmtYmIs.roa (hash: alZ0M56XHk3ZVrQNYJTxZZ2onR/AK2JyEOwbu/Z8qYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:4a:ea:0a:8c:24:66:c0:ec:33:b7:95:12:90:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Validity
Not Before: May 12 18:00:51 2026 GMT
Not After : May 13 18:00:51 2026 GMT
Subject: CN=63cdbc49d8730d77e1a9b671116421b132ed4561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:fc:34:d4:ab:cd:e8:6f:3d:bd:8b:1f:19:
c5:b7:2c:b6:5c:3a:44:3a:3a:cb:53:ee:3d:3c:b8:
6b:60:ca:36:d9:55:1f:46:c8:e6:6c:70:58:d5:83:
8d:d1:9e:e7:e9:95:89:bc:07:71:d7:0c:37:47:e4:
99:44:a4:57:e5:32:74:4b:11:f6:0b:54:56:47:4f:
7b:e7:7e:43:ff:b2:ce:b3:35:ed:90:7e:96:fa:0f:
a6:b9:63:39:3b:b2:54:3d:ae:16:6e:ef:43:18:79:
a9:8b:fc:c6:3f:62:79:40:66:3d:58:b1:5f:c9:3d:
f7:40:54:74:37:db:98:bc:39:2c:68:e1:b3:46:93:
67:0c:a5:52:fb:f2:c7:58:20:14:02:23:08:21:ec:
77:58:6a:8d:fa:1d:f8:b0:a8:28:97:b0:fd:ad:04:
74:43:2e:a3:23:8c:c9:24:89:21:c2:df:38:24:a8:
c7:01:dd:f0:8a:75:a5:d9:e4:97:1e:08:8a:c1:20:
88:fb:7b:8b:f4:a3:0b:b6:73:5f:93:55:52:70:48:
be:6a:cb:c9:20:b5:5a:dd:13:ff:d6:ce:fd:14:8a:
3a:a8:52:f9:ee:7a:7a:74:93:ba:0a:15:fd:81:9a:
8a:e9:51:27:ec:8a:19:ca:9b:a1:fc:5c:a4:fd:7d:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CD:BC:49:D8:73:0D:77:E1:A9:B6:71:11:64:21:B1:32:ED:45:61
X509v3 Authority Key Identifier:
keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:23:e3:bc:cc:7c:1d:3d:a1:ca:44:cc:e5:df:c9:37:07:f7:
a2:1f:a3:27:b2:b8:03:8f:0b:b1:6f:18:24:91:a9:52:20:0d:
8e:cb:48:72:63:c9:99:18:76:94:fc:58:9a:ff:13:4b:c2:a9:
74:1d:05:79:81:a5:01:25:14:0e:3d:71:c5:81:d2:bf:34:1e:
24:5d:ad:d0:6b:07:23:1d:a9:84:58:ba:56:cc:f4:32:b1:4c:
81:65:3b:f6:2a:a3:02:1e:66:ac:54:f9:fa:c5:93:d8:52:73:
c0:98:13:65:5e:5d:ea:a4:eb:0c:99:74:17:88:d4:87:d4:eb:
45:0d:d4:d4:14:3b:0e:6b:89:c5:5b:3d:e9:0c:54:c1:76:e0:
e4:d9:dc:53:de:a7:51:9e:1e:5f:42:5f:6f:40:83:82:66:c1:
bd:68:5d:46:ec:67:ee:08:53:b1:8c:73:af:98:30:55:66:b8:
49:dd:70:97:d1:52:af:39:af:16:03:b4:17:85:28:9b:f9:90:
6a:b6:5f:61:20:1f:72:db:7f:12:b0:d1:f4:a4:52:ca:f2:7d:
4b:72:69:a0:2c:cc:f0:fd:68:95:29:59:34:76:8e:26:5a:98:
8e:69:1d:fa:19:40:e6:72:4f:45:af:9e:28:48:1b:2f:a0:83:
dc:cb:7e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:57 2026 by rpki-client