Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
File: CXa-2b-5b_oZgiBViqPVuMj5zT0.mft (raw, json)
Hash identifier: 6LoEWVc85Dd4bkg2CIJKvBTuk4RX57v+WK+isUtIJYY=
Subject key identifier: AC:54:6E:AD:E4:15:29:75:49:60:F6:E1:4A:4B:F9:C9:DB:8E:BF:CC
Authority key identifier: 09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D
Certificate issuer: /CN=0976bed9bfb96ffa198220558aa3d5b8c8f9cd3d
Certificate serial: 01A0CE910BE96B0DF5DC93F884A034CEFB0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
Manifest number: 04D2
Signing time: Wed 23 Sep 2026 14:00:06 +0000
Manifest this update: Wed 23 Sep 2026 14:00:06 +0000
Manifest next update: Thu 24 Sep 2026 14:00:06 +0000
Files and hashes: 1: 81erH1PyFfVJ8_cg3A4J-xcuYbw.roa (hash: NaAy63sjfoCM4Pl3nqIIgQyKV92LR17H8Jx3JG7KMKc=)
2: CXa-2b-5b_oZgiBViqPVuMj5zT0.crl (hash: FUmh5reiyrUPJfiQdzjGWrm+ues5QRq8oSWku1Cs2aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:0b:e9:6b:0d:f5:dc:93:f8:84:a0:34:ce:fb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0976bed9bfb96ffa198220558aa3d5b8c8f9cd3d
Validity
Not Before: Sep 23 14:00:06 2026 GMT
Not After : Sep 24 14:00:06 2026 GMT
Subject: CN=ac546eade41529754960f6e14a4bf9c9db8ebfcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5f:02:85:cc:88:d7:51:32:a6:c9:43:42:7b:
ec:1f:74:9d:f5:38:ca:ea:78:74:84:b0:60:1f:df:
61:1e:94:8c:36:33:74:e8:bb:38:7c:87:f9:ba:10:
2f:db:5f:2c:e4:3d:e6:7a:37:b3:b0:75:6d:38:fe:
2b:54:f3:08:b8:f3:3a:fe:6e:e3:a7:dd:75:02:1c:
cb:f7:b4:12:f7:c6:3c:1b:c8:e1:d8:1d:7e:d4:66:
b6:4f:37:3e:a9:11:35:df:76:1a:d4:74:d4:19:c3:
fa:c4:ae:01:3a:a0:ef:70:c8:e2:eb:1b:e7:2b:12:
93:2b:49:77:41:da:e5:38:44:49:d0:de:99:8c:9a:
25:1c:77:b8:28:6c:fb:a9:2e:39:b9:eb:e4:a9:f5:
4e:06:a0:80:7c:cf:de:56:bf:3c:55:4e:a7:7f:19:
e3:4d:3d:bb:7a:76:81:1f:d2:38:f6:44:7f:d4:f8:
f9:54:bf:0c:12:f4:58:b8:3c:47:07:43:21:c1:f1:
8a:0f:40:25:53:8e:73:8a:5a:6e:ef:90:c9:a2:be:
57:d4:6b:a4:50:01:59:68:90:c6:2f:48:69:82:f7:
11:b1:5c:e9:b0:c7:1b:a0:96:d1:de:ab:b2:91:f1:
41:94:4e:b3:16:d6:72:82:df:7d:da:22:b7:1b:bd:
bf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:54:6E:AD:E4:15:29:75:49:60:F6:E1:4A:4B:F9:C9:DB:8E:BF:CC
X509v3 Authority Key Identifier:
keyid:09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:80:17:70:13:52:dc:2c:d1:a5:d1:e4:04:7d:00:87:e6:35:
0f:ba:ba:42:38:ae:e5:f5:ff:72:3d:c1:18:98:25:55:3c:1e:
62:da:8c:4a:bf:49:b6:1a:f0:53:71:aa:20:38:26:43:f6:0e:
9d:b2:12:fe:60:35:a5:aa:6b:ea:69:f3:bd:70:29:ff:82:2b:
de:96:48:62:93:81:f3:ab:ce:83:f0:6c:b9:02:a9:3c:e8:d4:
fd:b6:67:73:f7:93:db:94:c1:63:f7:cf:4c:05:34:fe:b3:df:
1c:eb:52:fd:af:16:5e:78:15:2e:da:24:bd:86:3a:50:09:48:
90:27:90:21:4a:c2:5a:89:78:54:81:dc:9a:3f:35:b5:d5:a1:
46:90:99:f2:52:ab:61:12:79:6d:6e:86:5a:43:b8:c9:8a:41:
8c:5b:2d:10:ce:14:34:4c:bd:6b:08:48:55:7d:7f:e0:e8:74:
ad:0f:f3:1c:4e:aa:d4:73:eb:6e:23:c7:25:f0:50:ab:8b:bf:
a7:13:34:33:d6:e8:69:36:c0:94:4f:f7:97:79:45:1b:a5:ea:
fd:f4:90:e6:c1:bd:f8:23:58:8f:a6:01:ca:eb:71:58:38:9b:
13:8c:bc:4d:21:c1:fc:5e:64:5a:48:89:38:30:28:99:93:1b:
bb:aa:3b:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOkQvpaw313JP4hKA0zvsKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NzZiZWQ5YmZiOTZmZmExOTgyMjA1NThhYTNkNWI4Yzhm
OWNkM2QwHhcNMjYwOTIzMTQwMDA2WhcNMjYwOTI0MTQwMDA2WjAzMTEwLwYDVQQD
EyhhYzU0NmVhZGU0MTUyOTc1NDk2MGY2ZTE0YTRiZjljOWRiOGViZmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F8ChcyI11EypslDQnvsH3Sd9TjK
6nh0hLBgH99hHpSMNjN06Ls4fIf5uhAv218s5D3mejezsHVtOP4rVPMIuPM6/m7j
p911AhzL97QS98Y8G8jh2B1+1Ga2Tzc+qRE133Ya1HTUGcP6xK4BOqDvcMji6xvn
KxKTK0l3QdrlOERJ0N6ZjJolHHe4KGz7qS45uevkqfVOBqCAfM/eVr88VU6nfxnj
TT27enaBH9I49kR/1Pj5VL8MEvRYuDxHB0MhwfGKD0AlU45zilpu75DJor5X1Guk
UAFZaJDGL0hpgvcRsVzpsMcboJbR3quykfFBlE6zFtZygt992iK3G72/TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxUbq3kFSl1SWD24UpL+cnbjr/MMB8GA1UdIwQY
MBaAFAl2vtm/uW/6GYIgVYqj1bjI+c09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1hhLTJiLTViX29aZ2lCVmlxUFZ1TWo1elQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lY2MyY2YtZWNjMC00Y2JiLTk2MzUt
MTY2YzZhM2QzZWNmLzEvQ1hhLTJiLTViX29aZ2lCVmlxUFZ1TWo1elQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9lY2MyY2YtZWNjMC00Y2JiLTk2MzUtMTY2YzZhM2QzZWNm
LzEvQ1hhLTJiLTViX29aZ2lCVmlxUFZ1TWo1elQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYAXcBNS
3CzRpdHkBH0Ah+Y1D7q6Qjiu5fX/cj3BGJglVTweYtqMSr9JthrwU3GqIDgmQ/YO
nbIS/mA1papr6mnzvXAp/4Ir3pZIYpOB86vOg/BsuQKpPOjU/bZnc/eT25TBY/fP
TAU0/rPfHOtS/a8WXngVLtokvYY6UAlIkCeQIUrCWol4VIHcmj81tdWhRpCZ8lKr
YRJ5bW6GWkO4yYpBjFstEM4UNEy9awhIVX1/4Oh0rQ/zHE6q1HPrbiPHJfBQq4u/
pxM0M9boaTbAlE/3l3lFG6Xq/fSQ5sG9+CNYj6YByutxWDibE4y8TSHB/F5kWkiJ
ODAomZMbu6o7wA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:17:17 2026 by rpki-client