Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
File: CXa-2b-5b_oZgiBViqPVuMj5zT0.mft (raw, json)
Hash identifier: 939i/UoDJgH1yje2sjq9xeSnpTKDuQvkkgauRbiZUrA=
Subject key identifier: B8:76:6B:10:5F:E4:DD:C0:B1:E3:86:34:06:F9:49:B8:AA:AB:FA:01
Authority key identifier: 09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D
Certificate issuer: /CN=0976bed9bfb96ffa198220558aa3d5b8c8f9cd3d
Certificate serial: 019F8FEC122B81C2D4D24FC5331487D41C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
Manifest number: 042D
Signing time: Thu 23 Jul 2026 17:00:40 +0000
Manifest this update: Thu 23 Jul 2026 17:00:40 +0000
Manifest next update: Fri 24 Jul 2026 17:00:40 +0000
Files and hashes: 1: 81erH1PyFfVJ8_cg3A4J-xcuYbw.roa (hash: NaAy63sjfoCM4Pl3nqIIgQyKV92LR17H8Jx3JG7KMKc=)
2: CXa-2b-5b_oZgiBViqPVuMj5zT0.crl (hash: g2+BsxI8KW57LwWPeEp1frog8Iqiuxi1vhmO4lyYrVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:12:2b:81:c2:d4:d2:4f:c5:33:14:87:d4:1c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0976bed9bfb96ffa198220558aa3d5b8c8f9cd3d
Validity
Not Before: Jul 23 17:00:40 2026 GMT
Not After : Jul 24 17:00:40 2026 GMT
Subject: CN=b8766b105fe4ddc0b1e3863406f949b8aaabfa01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bc:b5:08:91:9d:f3:96:77:3e:61:90:42:da:
3a:9c:0a:65:28:99:72:15:4f:0d:9e:5c:be:b1:f0:
ef:44:c9:66:ec:4a:0d:bd:18:86:c1:23:ff:12:15:
58:85:fb:c1:49:9c:2b:2f:df:26:d6:71:fa:51:21:
5b:ed:36:61:87:89:19:74:49:0f:b0:b5:9a:2c:8f:
42:83:48:77:2a:b3:92:2b:b4:19:c1:42:17:ff:0d:
d1:d4:38:89:e8:36:c6:c7:95:99:47:42:30:3d:08:
d6:3f:a7:9c:28:1d:02:22:e2:7f:8a:64:cb:c3:33:
fd:56:55:84:fe:ae:79:4e:9a:7e:8b:33:ed:d6:24:
43:cb:c3:79:a0:f3:a5:70:67:4b:11:91:61:7f:60:
8c:13:8b:ad:2a:5b:20:6f:f2:a2:16:17:a6:fc:fb:
c8:a6:80:21:34:8b:ce:2e:33:6b:c4:5f:3d:61:3b:
1e:b2:45:90:10:9d:f6:ac:af:d7:86:1b:33:4c:eb:
00:59:75:80:91:88:ba:e9:f3:72:09:0a:09:3b:d4:
23:f9:db:df:c9:93:eb:44:68:70:97:16:51:b1:3e:
76:69:d1:d3:fa:dd:74:05:8e:8f:45:5d:3b:98:12:
c5:07:72:cd:d7:cc:5b:14:f6:86:c8:6d:5d:f5:e8:
6f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:76:6B:10:5F:E4:DD:C0:B1:E3:86:34:06:F9:49:B8:AA:AB:FA:01
X509v3 Authority Key Identifier:
keyid:09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1c:29:00:d9:4e:5a:93:fa:e4:d9:cc:44:89:40:5a:0a:f3:
7e:68:58:34:09:10:50:29:50:33:60:fe:9f:73:2a:86:33:c8:
54:21:2a:ee:a0:de:37:72:20:79:92:b9:79:3c:fc:86:c1:95:
15:c6:ab:36:b8:8b:8a:5f:4e:47:80:b8:f2:1d:14:47:47:db:
cd:a8:32:5e:2b:60:94:88:ac:b8:89:d1:d0:e3:36:a5:e9:ba:
cd:0a:0a:1a:87:08:38:c4:45:a7:1e:ad:c2:16:be:29:6c:ab:
b6:97:69:53:85:b3:f1:b1:09:d1:75:10:51:e8:a9:b9:e2:de:
03:77:b1:97:9b:db:ec:75:5b:17:f0:44:eb:fa:1b:3c:59:d4:
df:4e:08:97:d1:7d:31:68:46:27:de:cc:00:e8:a3:d5:c7:c7:
e5:e6:ae:e9:e2:74:2a:cf:35:46:00:05:b0:19:34:2b:01:1f:
b9:02:50:a1:1b:08:ec:03:da:06:c8:c2:80:c1:fb:d4:be:2a:
c8:e1:d0:6c:e9:a1:46:cf:85:56:b7:b2:66:d7:b4:72:9f:a4:
a9:86:ee:4e:0f:4a:dd:4a:1c:4b:91:fb:9f:32:bd:a8:95:d1:
34:12:62:e7:d3:99:66:07:0f:66:3e:52:2f:fd:6d:42:3e:b2:
29:86:95:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:57:38 2026 by rpki-client