Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
File: CXa-2b-5b_oZgiBViqPVuMj5zT0.mft (raw, json)
Hash identifier: 1lv2qQvsM7x7FdlFZ+TIrBh1K3zMTWoC3vEbzkRaXps=
Subject key identifier: F4:E4:62:A4:2B:0D:23:2B:B0:3D:96:B4:73:29:73:29:EE:4A:48:DA
Authority key identifier: 09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D
Certificate issuer: /CN=0976bed9bfb96ffa198220558aa3d5b8c8f9cd3d
Certificate serial: 019E1D22D7A8EB8B881EF174BAE5912945B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
Manifest number: 036D
Signing time: Tue 12 May 2026 17:01:23 +0000
Manifest this update: Tue 12 May 2026 17:01:23 +0000
Manifest next update: Wed 13 May 2026 17:01:23 +0000
Files and hashes: 1: 81erH1PyFfVJ8_cg3A4J-xcuYbw.roa (hash: NaAy63sjfoCM4Pl3nqIIgQyKV92LR17H8Jx3JG7KMKc=)
2: CXa-2b-5b_oZgiBViqPVuMj5zT0.crl (hash: 6qRgjP1AqlfDl2aEDS/9PZjB3EbA6ODGWVTrvi9AyJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:d7:a8:eb:8b:88:1e:f1:74:ba:e5:91:29:45:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0976bed9bfb96ffa198220558aa3d5b8c8f9cd3d
Validity
Not Before: May 12 17:01:23 2026 GMT
Not After : May 13 17:01:23 2026 GMT
Subject: CN=f4e462a42b0d232bb03d96b473297329ee4a48da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:40:a4:3b:59:04:a6:ad:ef:04:a2:09:aa:81:
cd:8d:a5:a3:76:a6:ff:b1:a0:5e:43:e6:fa:d5:0f:
08:19:5e:3f:62:10:96:1f:c8:71:a8:a4:76:58:d9:
59:2c:81:dd:3d:b0:dd:4c:03:65:fb:54:64:72:28:
a3:b0:1a:50:0c:ec:81:6e:80:f5:fb:34:80:76:af:
32:59:2a:1b:ac:74:40:2e:6c:3a:7d:2a:4a:53:76:
60:0a:ba:aa:6e:2f:61:c3:df:e7:36:56:6f:65:48:
eb:02:14:d4:03:ce:2d:82:5c:78:fe:7d:ea:7d:82:
86:16:63:9a:b1:8f:e0:45:57:c2:af:1e:b1:51:8f:
5e:1f:79:cb:e0:43:e9:02:5a:66:8f:b5:10:ec:44:
10:2f:24:63:5e:38:cf:af:3c:d2:f6:e0:18:2a:a2:
6d:30:ae:44:36:c9:ae:39:ba:b8:12:73:73:fc:ba:
f9:28:df:fa:6a:82:5c:b2:b2:49:3d:87:60:55:e5:
cc:5b:10:bb:7d:cc:97:1c:ff:a5:0a:83:d8:7f:dd:
a5:4f:fc:60:d5:ec:43:11:fe:d7:46:cc:fc:77:78:
f5:a9:a8:0e:64:0a:00:71:4e:a1:69:9a:75:86:a0:
45:93:c8:bf:dc:8f:88:2d:6b:6b:7f:97:37:1e:41:
ba:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E4:62:A4:2B:0D:23:2B:B0:3D:96:B4:73:29:73:29:EE:4A:48:DA
X509v3 Authority Key Identifier:
keyid:09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:63:1c:a3:5a:38:3c:c3:8e:97:75:25:d7:e5:f2:98:02:73:
cd:17:89:58:bb:44:49:9f:2f:b9:9b:fa:cb:4d:6b:1c:b4:f2:
7a:09:d9:16:03:94:63:16:a9:13:a4:d0:9d:b0:5e:de:6f:91:
10:8e:2a:53:b7:d8:9b:2a:36:d4:c9:de:33:a8:0e:aa:bb:3d:
d3:35:93:77:ed:53:a1:ee:e3:85:2c:ea:d3:7e:67:4f:4b:92:
f7:73:75:8a:47:7d:e3:1d:66:98:f0:6f:d2:ad:88:f0:93:e3:
f5:cb:00:06:07:64:3d:3e:dd:88:8d:19:78:3a:26:b8:71:33:
09:8e:51:42:d8:04:91:ac:46:e3:2b:91:c1:a9:4b:05:4f:73:
d7:16:6b:c3:66:52:c1:18:58:0c:ca:57:32:af:bd:cf:e4:8c:
56:b8:bb:dc:dc:73:d0:76:37:d0:43:14:98:02:aa:1b:10:46:
53:55:73:21:af:f2:9b:23:4d:08:9e:84:1b:37:6b:cc:23:34:
ec:fb:70:28:a6:9c:2e:65:bd:b8:92:cb:6a:e3:22:1b:4f:4f:
06:1f:23:09:66:6f:68:03:8e:21:70:7f:39:0e:be:2b:73:e3:
61:85:7e:cc:c0:2c:1f:91:be:bc:44:df:57:58:38:31:14:b0:
22:e7:3b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:57:06 2026 by rpki-client