Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
File: Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft (raw, json)
Hash identifier: Y4CItReKYY4xkJJFg2vivyt6ZIk3WgLn3Tn2iFStxfk=
Subject key identifier: 81:27:14:70:D3:75:55:8F:8A:1A:4F:C9:95:16:06:29:2B:D8:F9:CE
Authority key identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
Certificate issuer: /CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Certificate serial: 019F90910AC53E5384CCA209714ABB0BF7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
Manifest number: 0986
Signing time: Thu 23 Jul 2026 20:00:52 +0000
Manifest this update: Thu 23 Jul 2026 20:00:52 +0000
Manifest next update: Fri 24 Jul 2026 20:00:52 +0000
Files and hashes: 1: Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl (hash: dAHpcNjU1LyrglgFHK8Lz9pJeu681r7RAi0rtHeGxXQ=)
2: pGFwy3aEV2qhiZhwH7yaMrR8fo0.roa (hash: KW1x50QC1Ci4rIl9Ru/vbiHcwzJviAGG+0QbXfYDiO8=)
3: qlxYIa3PjXKqV7hlzapOlNgcm0I.roa (hash: 1ZBb0ZiezUactfqIZmt39M9PRVHG48Yw9HnDmIgNQw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:0a:c5:3e:53:84:cc:a2:09:71:4a:bb:0b:f7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Validity
Not Before: Jul 23 20:00:52 2026 GMT
Not After : Jul 24 20:00:52 2026 GMT
Subject: CN=81271470d375558f8a1a4fc9951606292bd8f9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2a:a7:de:32:41:36:c3:56:4b:31:50:c4:42:
fa:0d:ad:22:21:cb:56:96:5f:26:e1:c0:a8:2e:f2:
df:40:27:36:6d:24:29:8f:71:6a:53:f9:06:f7:f3:
01:db:19:87:4a:f2:f1:1d:d5:c8:f6:01:7b:80:fc:
1e:5b:fd:4d:22:36:7a:e1:64:bf:20:7b:c0:a4:77:
06:03:d6:c8:63:5d:ab:19:ce:c2:78:57:92:43:41:
87:61:ce:7d:8a:5b:d6:7c:26:a1:7d:de:3c:e4:50:
59:d4:24:55:d5:d6:1a:3c:9c:a6:dd:2d:04:90:38:
2d:a6:4d:e2:9c:7a:18:fc:ba:28:d9:41:c9:1c:8c:
0b:cf:96:15:03:f8:53:5f:80:57:59:44:2c:8d:68:
a9:94:72:b1:a5:24:6a:53:4a:a6:3d:80:7b:f3:c3:
2c:27:6f:07:f3:88:86:4f:6e:53:b7:16:b2:8b:ba:
62:f1:19:91:55:bf:3e:a7:92:e1:ca:89:87:49:23:
ca:06:7e:51:cb:28:aa:2f:72:fc:c3:ad:7c:0b:c7:
26:c6:3d:9c:99:7d:da:a2:e7:a2:19:00:20:91:f1:
ff:1c:5a:d1:f2:11:bf:58:f4:27:f6:6f:bc:39:3c:
fc:06:71:e3:59:18:23:4a:6a:f0:e8:5f:0c:8e:af:
27:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:27:14:70:D3:75:55:8F:8A:1A:4F:C9:95:16:06:29:2B:D8:F9:CE
X509v3 Authority Key Identifier:
keyid:0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:71:4a:89:50:bf:37:3d:b1:99:71:ef:cf:8e:9e:13:69:3b:
bb:95:2e:7b:36:e4:53:08:a8:a2:f9:fb:f4:32:35:b5:3b:5f:
d0:e8:d7:69:fa:45:51:74:be:ec:d2:04:a1:e5:26:c7:72:ac:
f2:bc:a8:08:44:6d:0d:fa:4e:19:0a:19:98:02:1c:fd:1b:58:
55:46:c7:d9:73:09:92:ed:ac:aa:7d:9e:ff:1d:72:9f:7d:19:
59:2e:bd:d4:56:3a:71:8b:75:34:70:04:06:60:9f:04:85:14:
6d:5f:65:34:2c:97:8f:7e:2a:0a:5b:9b:0d:82:f0:e1:3f:c9:
dd:b1:9d:0d:53:67:a1:17:dd:e2:cb:3d:3d:5d:0d:ff:77:a6:
90:d8:60:1b:f4:7d:bd:65:75:8a:b7:35:dd:6c:40:32:53:7e:
e7:98:04:03:54:5f:66:42:e7:11:7a:8a:bd:61:b9:aa:b6:d8:
38:41:3f:de:9c:34:89:1a:90:87:e1:e1:ba:9a:02:85:de:cc:
f8:9c:2a:cb:2c:e7:ff:73:a9:74:61:7d:74:54:e0:15:29:29:
15:d2:2f:0f:bb:2c:9f:d3:9f:37:22:f7:e2:16:b1:ba:34:41:
cc:7b:a3:a1:c5:b3:2d:30:fb:36:c3:d3:af:d2:38:f7:cc:fb:
d7:34:5d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:18:37 2026 by rpki-client