Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
File: CXa-2b-5b_oZgiBViqPVuMj5zT0.mft (raw, json)
Hash identifier: STqRgtXXNeBBXfOdCmOe5ZHvsdz+/x8BFh3j9NDGIJM=
Subject key identifier: CF:17:E1:BF:DF:F4:88:44:11:94:FE:D0:EF:F6:D9:A6:61:D9:9B:E3
Authority key identifier: 09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D
Certificate issuer: /CN=0976bed9bfb96ffa198220558aa3d5b8c8f9cd3d
Certificate serial: 019D27DFF99FB137CF8788624CCE29DBC84E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
Manifest number: 02EE
Signing time: Thu 26 Mar 2026 02:01:23 +0000
Manifest this update: Thu 26 Mar 2026 02:01:23 +0000
Manifest next update: Fri 27 Mar 2026 02:01:23 +0000
Files and hashes: 1: 81erH1PyFfVJ8_cg3A4J-xcuYbw.roa (hash: NaAy63sjfoCM4Pl3nqIIgQyKV92LR17H8Jx3JG7KMKc=)
2: CXa-2b-5b_oZgiBViqPVuMj5zT0.crl (hash: ehWJxbl9tK98C6aGdnO1Ad0DezTe5OZbfv/8mHiXUhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:f9:9f:b1:37:cf:87:88:62:4c:ce:29:db:c8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0976bed9bfb96ffa198220558aa3d5b8c8f9cd3d
Validity
Not Before: Mar 26 02:01:23 2026 GMT
Not After : Mar 27 02:01:23 2026 GMT
Subject: CN=cf17e1bfdff488441194fed0eff6d9a661d99be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:39:96:a1:fe:9f:5b:04:72:49:02:61:91:
c7:eb:3b:f8:f3:fa:11:45:0c:ae:60:61:0f:e3:1e:
74:69:7e:68:78:73:79:15:64:9e:fa:be:7f:09:06:
2e:1a:cc:0b:df:e8:31:07:32:7b:f1:25:b8:7a:1d:
c1:b6:d7:1d:01:41:f6:ae:75:a0:53:49:f5:fb:cb:
7c:90:7c:48:4e:92:39:4f:79:86:7d:01:96:c2:4c:
3b:58:dc:14:2a:41:cc:8d:b9:f6:61:bd:3b:9d:65:
71:d2:25:62:c0:eb:9d:0b:40:4e:d4:58:3d:85:56:
6a:6a:33:16:93:23:4c:09:35:07:6a:96:3b:be:b4:
df:b8:c2:72:65:ab:1d:97:98:a5:4b:44:d7:8e:ea:
30:34:10:e3:54:ea:0e:70:42:9d:6c:2d:41:37:5f:
d7:73:c9:a3:c3:81:a2:9f:df:97:07:bc:72:70:f1:
bd:20:e5:df:66:54:8f:83:a7:60:3d:69:61:49:7a:
55:b4:3c:d9:34:b2:14:56:6e:9e:a3:1c:66:e6:c2:
c1:c5:fa:7f:61:19:d6:5d:c3:57:01:e0:12:42:16:
c3:b6:4d:2c:bc:95:2b:94:63:b3:5b:eb:a1:0a:52:
d1:6c:e7:e3:15:97:fd:f9:7d:80:6d:f5:19:01:b9:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:17:E1:BF:DF:F4:88:44:11:94:FE:D0:EF:F6:D9:A6:61:D9:9B:E3
X509v3 Authority Key Identifier:
keyid:09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d0:9d:5b:54:ee:39:f8:c0:71:87:a5:9c:ac:09:4b:2b:83:
7c:98:e2:af:a0:b4:64:1a:f0:60:7a:5d:25:66:45:9a:b8:b6:
09:d7:16:59:53:fa:5e:48:11:cc:e1:f0:53:d4:f1:52:c5:b6:
02:cf:ae:66:3e:1c:f4:41:e1:b4:d1:48:20:46:67:39:6a:8b:
ad:ec:94:1f:11:e4:da:7e:d9:94:7c:18:86:b9:46:5a:9a:ad:
c0:78:75:33:d7:11:07:ac:b7:17:4f:2a:d0:d0:45:47:6b:92:
9a:8d:7f:f0:a5:82:ba:3f:b3:b9:f2:94:59:a0:4e:e6:4b:96:
21:21:d3:97:04:86:16:d7:88:9f:dc:af:b2:32:10:f2:23:06:
0a:81:77:f5:b1:c4:f1:10:57:e1:f8:2a:f6:57:a5:d1:8f:1c:
c3:43:10:e3:fd:3e:84:2b:54:28:9c:a9:94:0e:52:12:0e:89:
81:6a:49:8c:55:16:41:5d:60:dd:62:a9:f4:fb:af:93:af:1b:
fc:e1:cf:8b:95:5b:66:f5:56:d3:85:97:2c:83:ae:db:d8:09:
b0:69:e4:6f:30:47:71:23:44:1e:9d:72:c4:36:57:0f:22:c3:
05:c1:4f:31:b0:c8:82:00:0c:b7:55:9c:a4:56:f8:24:aa:5c:
92:0f:8e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:37:22 2026 by rpki-client