Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
File: cxkAeiit4HgdMS2NSUcts2dnBBY.mft (raw, json)
Hash identifier: PYT/15EL6N5JvE8nftfpsXvOkTUPn1TEqpxdgjsfvrI=
Subject key identifier: 26:D9:14:0A:34:D9:2D:39:18:5B:44:9D:F1:97:76:39:6A:76:30:83
Authority key identifier: 73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
Certificate issuer: /CN=7319007a28ade0781d312d8d49472db367670416
Certificate serial: 019FF8A39F83EE93C9E2F0420538764C457A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
Manifest number: 0C78
Signing time: Thu 13 Aug 2026 01:01:40 +0000
Manifest this update: Thu 13 Aug 2026 01:01:40 +0000
Manifest next update: Fri 14 Aug 2026 01:01:40 +0000
Files and hashes: 1: Le8K7qSkEZ1_FmI_JNvcQwDT3kM.roa (hash: YPGYe40UQA7fHzeXPlUUiQ7ZZraM1bL1CPz1T+qTDdY=)
2: cxkAeiit4HgdMS2NSUcts2dnBBY.crl (hash: ryzJfIgq1SIGWV1oDsnV9vQWaxo4ObVFwkqlhnr2UkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:a3:9f:83:ee:93:c9:e2:f0:42:05:38:76:4c:45:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319007a28ade0781d312d8d49472db367670416
Validity
Not Before: Aug 13 01:01:40 2026 GMT
Not After : Aug 14 01:01:40 2026 GMT
Subject: CN=26d9140a34d92d39185b449df19776396a763083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ee:95:e1:ad:a6:fe:b8:a6:65:3a:57:58:ad:
8a:84:2e:ae:d0:7b:2d:dc:5e:29:ad:83:50:46:00:
81:93:4e:9c:04:bf:ce:74:99:42:34:2b:cd:0f:9e:
ca:0f:cf:8b:e5:30:e5:a5:38:02:b0:8b:42:b6:72:
69:26:62:99:3d:78:9b:98:de:02:ed:57:0d:63:e2:
0f:ff:6f:4e:9b:08:19:e3:23:ec:12:0a:4b:6c:6a:
6b:7d:20:90:8a:bc:73:38:b6:a6:69:87:1b:e6:31:
a1:74:d5:42:a3:f4:fc:5b:1c:91:0a:28:11:8b:35:
fd:2b:93:4a:f0:da:43:59:14:a7:69:ba:8e:ae:2b:
17:c1:5b:35:4a:8c:6a:d9:53:a5:f2:ed:4b:23:fa:
0a:0e:37:52:0f:17:46:09:83:ed:24:76:2e:25:06:
72:cc:d4:81:b1:9c:93:85:50:3e:7f:3e:62:1b:6d:
c6:8e:5d:2f:84:8c:3b:3d:d7:a6:70:0a:f1:63:79:
a4:d9:86:f8:fd:2d:76:3e:2e:12:12:f4:fb:44:75:
5c:ca:14:61:8b:62:79:9f:f4:84:7f:b6:41:1e:ae:
75:3f:ea:5c:2c:cd:0a:a1:ee:d7:8f:d0:b2:70:b6:
ab:38:e5:e6:43:4c:f3:71:26:b9:d2:bb:0e:b7:47:
6f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D9:14:0A:34:D9:2D:39:18:5B:44:9D:F1:97:76:39:6A:76:30:83
X509v3 Authority Key Identifier:
keyid:73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:dc:f4:c0:4f:ee:2f:5e:80:cb:e7:7c:31:5d:bd:ea:b6:41:
f5:d2:04:68:d9:14:5b:b6:17:cc:d2:54:b3:c1:2c:cf:77:50:
11:91:6c:13:2e:6d:7f:3e:0c:66:3f:6e:51:b8:16:87:4b:e6:
dc:e3:46:a9:ae:bd:82:cb:52:47:62:42:dd:9d:cb:17:6d:dd:
85:ae:e7:11:2a:15:da:68:56:a4:f9:01:fb:cc:8a:44:8f:6d:
31:15:56:51:8d:5e:a3:c5:74:42:d2:32:50:83:dc:4b:d9:be:
b7:9b:d8:84:b8:c5:7b:70:a6:13:6c:c6:38:28:02:d3:74:fc:
38:42:dc:ba:cf:a7:6d:4c:db:1b:16:4b:ef:d6:95:4a:9a:f7:
a8:e2:85:41:02:32:70:f6:7e:b0:5a:2b:6c:8c:f5:a3:a4:dd:
f7:88:ed:d1:53:74:a1:f8:a6:94:e4:cc:24:ea:ee:1b:8b:9d:
24:1c:9f:eb:72:8d:f3:b2:a7:56:77:12:4e:b7:09:6b:0b:b3:
5d:09:25:c7:42:ab:20:38:3c:41:eb:76:52:31:23:57:7f:6d:
37:f8:28:4c:97:ba:f0:3b:d4:21:35:34:29:df:ba:fd:e9:66:
ab:bb:19:83:a8:20:d1:fe:bf:99:2a:69:0a:76:94:9e:5a:81:
35:14:42:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 04:58:12 2026 by rpki-client