Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
File: Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft (raw, json)
Hash identifier: kbhPMj3iZT4uRYuJnMRXZtZy9PvNGGkvyE2FVtfpgdw=
Subject key identifier: 5A:8E:95:7F:D5:06:7D:AF:3C:17:1B:4D:46:5F:DA:45:F4:7C:E7:A3
Authority key identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
Certificate issuer: /CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Certificate serial: 019E1BD88D27C233DAB7144B250014720D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
Manifest number: 08C5
Signing time: Tue 12 May 2026 11:00:36 +0000
Manifest this update: Tue 12 May 2026 11:00:36 +0000
Manifest next update: Wed 13 May 2026 11:00:36 +0000
Files and hashes: 1: Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl (hash: VVd+OZjHqbXj973J/kf/aLOLQTAFvXlPWUAnq4L8jFo=)
2: pGFwy3aEV2qhiZhwH7yaMrR8fo0.roa (hash: KW1x50QC1Ci4rIl9Ru/vbiHcwzJviAGG+0QbXfYDiO8=)
3: qlxYIa3PjXKqV7hlzapOlNgcm0I.roa (hash: 1ZBb0ZiezUactfqIZmt39M9PRVHG48Yw9HnDmIgNQw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:8d:27:c2:33:da:b7:14:4b:25:00:14:72:0d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Validity
Not Before: May 12 11:00:36 2026 GMT
Not After : May 13 11:00:36 2026 GMT
Subject: CN=5a8e957fd5067daf3c171b4d465fda45f47ce7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:8c:75:9a:2b:a0:dc:e1:44:54:50:8a:03:
f1:5f:16:5f:b0:69:7c:88:82:7d:9f:1f:6c:ba:2d:
58:01:a7:36:76:7c:64:c1:63:ea:2c:22:75:b8:68:
5d:ca:c9:2f:51:1f:91:3b:fe:b5:fe:a6:90:99:e7:
dc:42:67:2f:fe:25:ec:c4:75:da:e2:35:84:4f:f6:
10:59:ed:4a:7a:69:d9:8d:f7:da:72:05:9d:4f:48:
21:c2:63:bf:2f:c8:df:89:da:7d:62:ad:8b:2c:b1:
90:dc:d0:c2:6b:ac:eb:ff:c2:4e:fe:e5:99:46:ab:
98:59:e8:84:6b:5c:f7:ef:81:82:e0:bc:8b:e9:9c:
c2:d2:3f:1a:de:e7:5f:b6:2f:11:9f:95:b9:b1:21:
13:5d:0a:2c:3c:3b:ea:32:80:98:66:5e:80:2b:2a:
24:1b:80:2d:f8:a7:30:0a:ff:75:90:3d:ed:98:58:
24:84:a8:b8:50:c6:d1:2e:d7:f5:19:f7:8d:98:25:
61:c7:e6:2d:e4:a2:bf:cb:fb:ae:be:14:08:1e:3a:
4c:38:7e:31:76:bf:ad:91:73:a4:87:b2:e8:cc:f0:
4f:e2:36:87:14:a0:3e:27:17:b4:c3:2f:d5:2d:cf:
35:d0:6a:01:9d:8b:4c:1f:7f:10:30:ee:30:06:ca:
64:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8E:95:7F:D5:06:7D:AF:3C:17:1B:4D:46:5F:DA:45:F4:7C:E7:A3
X509v3 Authority Key Identifier:
keyid:0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:06:6c:b4:5b:db:2b:57:da:54:18:d5:5e:da:42:e0:0e:f0:
ef:29:90:4d:e7:06:16:23:45:bc:df:bf:43:77:c8:df:8d:d3:
ab:9a:98:ab:b1:40:9c:55:fd:c7:d4:53:a6:be:cc:d4:91:d6:
e1:5e:b4:74:c4:30:b3:80:a5:8e:56:4d:46:a1:12:82:d3:3a:
05:aa:eb:b2:47:7c:ab:07:a5:9c:49:a6:5a:43:85:c7:14:ba:
90:cf:8c:df:67:8b:3a:73:f7:f1:dd:71:92:03:9d:f5:9a:ae:
3b:85:af:94:64:32:57:7f:07:00:4b:8d:72:e2:97:d8:d8:db:
29:ed:65:01:63:c7:4f:7a:cf:1a:f9:be:fe:09:37:9b:cd:36:
69:4a:03:8b:19:aa:52:c1:ec:51:8c:b2:e8:44:a8:91:58:03:
f4:4e:a8:14:a9:31:59:72:53:0e:65:14:c1:a1:04:f2:87:b2:
bc:d9:91:0e:61:78:d1:2c:03:13:50:59:73:f5:8d:c0:68:79:
93:04:b8:00:20:5d:88:92:12:c9:4e:92:a0:77:e1:1e:c9:b7:
c6:42:c5:80:f7:c5:3d:e7:3d:b9:59:5d:e0:98:53:81:e5:93:
53:11:29:b5:e4:fc:dd:a2:23:7f:b4:66:c9:e3:08:b1:a5:65:
f1:82:79:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2I0nwjPatxRLJQAUcg00MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMTkzNjI4MWI4NjcwN2EwNWQ1NWEwMWY4OGIyZTY1M2Q3
YjNlZTkwHhcNMjYwNTEyMTEwMDM2WhcNMjYwNTEzMTEwMDM2WjAzMTEwLwYDVQQD
Eyg1YThlOTU3ZmQ1MDY3ZGFmM2MxNzFiNGQ0NjVmZGE0NWY0N2NlN2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FeMdZoroNzhRFRQigPxXxZfsGl8
iIJ9nx9sui1YAac2dnxkwWPqLCJ1uGhdyskvUR+RO/61/qaQmefcQmcv/iXsxHXa
4jWET/YQWe1KemnZjffacgWdT0ghwmO/L8jfidp9Yq2LLLGQ3NDCa6zr/8JO/uWZ
RquYWeiEa1z374GC4LyL6ZzC0j8a3udfti8Rn5W5sSETXQosPDvqMoCYZl6AKyok
G4At+KcwCv91kD3tmFgkhKi4UMbRLtf1GfeNmCVhx+Yt5KK/y/uuvhQIHjpMOH4x
dr+tkXOkh7LozPBP4jaHFKA+Jxe0wy/VLc810GoBnYtMH38QMO4wBspkjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqOlX/VBn2vPBcbTUZf2kX0fOejMB8GA1UdIwQY
MBaAFAsZNigbhnB6BdVaAfiLLmU9ez7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3hrMktCdUdjSG9GMVZvQi1Jc3VaVDE3UHVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84NWVlMDItNmY0My00OTI3LWFiNWQt
ZWQ1N2IyNGI0NDY1LzEvQ3hrMktCdUdjSG9GMVZvQi1Jc3VaVDE3UHVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84NWVlMDItNmY0My00OTI3LWFiNWQtZWQ1N2IyNGI0NDY1
LzEvQ3hrMktCdUdjSG9GMVZvQi1Jc3VaVDE3UHVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAZstFvb
K1faVBjVXtpC4A7w7ymQTecGFiNFvN+/Q3fI343Tq5qYq7FAnFX9x9RTpr7M1JHW
4V60dMQws4CljlZNRqESgtM6Barrskd8qwelnEmmWkOFxxS6kM+M32eLOnP38d1x
kgOd9ZquO4WvlGQyV38HAEuNcuKX2NjbKe1lAWPHT3rPGvm+/gk3m802aUoDixmq
UsHsUYyy6ESokVgD9E6oFKkxWXJTDmUUwaEE8oeyvNmRDmF40SwDE1BZc/WNwGh5
kwS4ACBdiJISyU6SoHfhHsm3xkLFgPfFPec9uVld4JhTgeWTUxEpteT83aIjf7Rm
yeMIsaVl8YJ5kA==
-----END CERTIFICATE-----
Generated at Tue May 12 22:14:24 2026 by rpki-client