Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
File: Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft (raw, json)
Hash identifier: evG9Wrff6u5pB1FviRe3Rg4+JTrtHUb2OWyLLjeZAgM=
Subject key identifier: 97:10:A3:AD:A7:3D:B2:0C:FC:4B:3A:B2:2D:89:C1:CF:FD:64:B5:0E
Authority key identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
Certificate issuer: /CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Certificate serial: 019D26964FA70B7F3F9839A742AD0D043A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
Manifest number: 0846
Signing time: Wed 25 Mar 2026 20:01:18 +0000
Manifest this update: Wed 25 Mar 2026 20:01:18 +0000
Manifest next update: Thu 26 Mar 2026 20:01:18 +0000
Files and hashes: 1: Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl (hash: RMdQQ/ti4fzAsf09ehTxv7RKfJUBg/dMoe9F6Ga2MOg=)
2: pGFwy3aEV2qhiZhwH7yaMrR8fo0.roa (hash: KW1x50QC1Ci4rIl9Ru/vbiHcwzJviAGG+0QbXfYDiO8=)
3: qlxYIa3PjXKqV7hlzapOlNgcm0I.roa (hash: 1ZBb0ZiezUactfqIZmt39M9PRVHG48Yw9HnDmIgNQw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:4f:a7:0b:7f:3f:98:39:a7:42:ad:0d:04:3a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Validity
Not Before: Mar 25 20:01:18 2026 GMT
Not After : Mar 26 20:01:18 2026 GMT
Subject: CN=9710a3ada73db20cfc4b3ab22d89c1cffd64b50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:5b:40:ee:86:3b:a3:84:dd:be:ee:8b:c4:
e1:e2:1e:e8:b6:b5:e7:e8:5b:84:25:05:75:01:21:
42:e2:87:e0:2a:2f:9b:c2:63:e5:f3:02:84:8c:e7:
fc:98:e8:76:ae:b3:dc:5f:d3:b8:29:84:5f:04:99:
87:d3:aa:82:d9:29:42:b9:f3:5e:0b:10:d0:9a:51:
90:51:64:b5:d5:8b:b2:cf:3b:44:d1:d6:55:08:0e:
41:c5:c8:4e:f8:56:15:b2:a5:55:e0:50:0a:50:ac:
d6:0f:00:1d:0e:4e:45:50:c7:97:b6:e8:87:d4:fc:
31:ef:2a:67:ac:00:c0:13:7a:71:ba:59:e7:2f:96:
6f:05:a5:f6:fe:27:31:de:4e:18:48:3f:2c:b8:f7:
94:f6:06:e1:a3:58:15:bf:80:b6:3a:7a:34:e7:b3:
b0:e3:56:9b:3e:4a:5b:ee:84:4e:9e:61:63:9e:94:
6c:04:ff:c0:4b:93:1f:41:e3:6b:5a:67:b0:67:22:
12:e9:87:18:12:61:ec:c2:ce:89:ee:f3:e4:24:2b:
b0:05:ac:61:2c:0c:ab:07:06:93:7d:92:87:a5:48:
0b:23:eb:d1:f9:02:99:aa:46:0c:6a:f0:5f:17:f6:
38:9d:3b:cf:2e:5f:5e:96:f3:0f:c1:2d:56:61:c6:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:10:A3:AD:A7:3D:B2:0C:FC:4B:3A:B2:2D:89:C1:CF:FD:64:B5:0E
X509v3 Authority Key Identifier:
keyid:0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:66:3a:f8:bc:0d:ed:5b:36:f0:47:80:9d:d1:0a:c6:82:82:
b0:b1:08:09:d6:91:45:92:4b:a4:a9:ea:69:aa:8b:73:5c:e2:
f3:65:ed:86:aa:7c:41:0b:6c:9c:7f:3b:e0:1f:c9:82:d7:76:
1f:aa:84:5e:d6:6d:93:65:17:b3:fd:97:b2:5b:8d:18:5d:aa:
79:48:32:9a:26:7f:f1:13:f6:b5:f5:c3:c6:cd:75:a3:37:d9:
e3:2a:7a:ab:65:ea:ab:5f:4e:c5:24:0e:5c:af:a9:08:cf:47:
74:06:24:7b:0f:dc:d8:c5:ce:e4:6f:43:96:ce:b4:13:9b:7d:
c6:8f:ea:be:ff:65:be:fd:aa:46:8c:74:6a:ae:62:3c:33:e6:
30:58:da:7c:05:87:de:cc:f3:82:ac:f6:75:f1:f7:c4:f4:80:
df:a4:d3:d3:88:e6:6c:42:7a:e9:b6:a4:55:bb:67:05:45:67:
34:8d:f6:6e:63:24:31:a1:fb:fe:4a:4c:7a:c9:3e:99:25:76:
70:2b:f0:f6:54:19:68:f6:31:af:2e:c4:76:c6:0a:2c:20:5b:
09:5c:bb:a4:d3:86:c5:e1:4d:83:99:7c:f2:c9:a7:cf:b3:7f:
af:c5:04:9e:f8:d6:89:f2:4a:0d:5f:8b:26:a2:31:05:6a:c8:
08:e2:4f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:53 2026 by rpki-client