Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
File: cxkAeiit4HgdMS2NSUcts2dnBBY.mft (raw, json)
Hash identifier: UcxH34bUlxUUx86YN1WgSaAXhFT+O5vI4MtqMuxG370=
Subject key identifier: 67:10:55:F9:BE:02:B7:0A:4D:E1:74:F5:60:6A:32:32:63:21:A4:2F
Authority key identifier: 73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
Certificate issuer: /CN=7319007a28ade0781d312d8d49472db367670416
Certificate serial: 019D3006C7307F7AD18F595261F6E57C5DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
Manifest number: 0B07
Signing time: Fri 27 Mar 2026 16:00:43 +0000
Manifest this update: Fri 27 Mar 2026 16:00:43 +0000
Manifest next update: Sat 28 Mar 2026 16:00:43 +0000
Files and hashes: 1: Le8K7qSkEZ1_FmI_JNvcQwDT3kM.roa (hash: YPGYe40UQA7fHzeXPlUUiQ7ZZraM1bL1CPz1T+qTDdY=)
2: cxkAeiit4HgdMS2NSUcts2dnBBY.crl (hash: V9YbtzFHlvgELS7Sw685fjw/x/Xmuttr6EWxXFnraS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 15:47:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:30:06:c7:30:7f:7a:d1:8f:59:52:61:f6:e5:7c:5d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319007a28ade0781d312d8d49472db367670416
Validity
Not Before: Mar 27 16:00:43 2026 GMT
Not After : Mar 28 16:00:43 2026 GMT
Subject: CN=671055f9be02b70a4de174f5606a32326321a42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a4:1e:4b:ba:3a:e6:d4:71:3c:e0:ff:45:10:
5c:f6:23:ad:68:3d:8a:d9:e6:7c:2d:67:0b:00:7a:
a4:09:12:55:9d:22:a1:bc:cd:1d:8c:1c:87:78:5f:
34:40:83:f5:4e:0b:d6:75:f6:62:bb:50:af:52:1d:
a3:d8:5e:ef:fb:90:07:38:6d:fa:8a:13:ce:b9:bd:
41:26:4a:09:88:6a:6a:ed:2e:77:a6:9e:96:61:32:
b6:f3:c6:49:77:7e:92:8a:37:f1:fc:6d:f0:f3:6c:
63:aa:aa:04:87:54:09:eb:02:d9:2a:e7:b6:d1:c8:
19:b3:23:91:fa:b4:32:4d:ba:6b:1b:f4:3f:b3:1f:
0a:65:0e:17:d9:61:d9:9d:45:d4:01:9d:27:ab:a2:
d0:23:d9:29:b8:4d:fe:b4:59:ab:28:ab:b8:02:45:
3e:88:23:f3:f8:31:a1:30:6d:88:73:4b:c1:e8:e7:
9a:7d:5c:d7:e2:85:75:f1:ff:c6:b6:e2:6b:ac:2c:
e8:ff:e1:2d:e6:03:65:29:1b:f2:38:41:8e:f2:39:
fd:41:f2:fb:eb:e9:b5:3b:01:2d:c7:37:08:33:c0:
b5:81:27:69:39:76:af:cc:d2:31:41:5d:7a:44:7f:
27:a8:4b:cf:79:d4:3d:f6:ae:e3:11:4a:64:ff:38:
b9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:10:55:F9:BE:02:B7:0A:4D:E1:74:F5:60:6A:32:32:63:21:A4:2F
X509v3 Authority Key Identifier:
keyid:73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2e:01:18:57:a6:28:f2:a0:45:7e:49:0a:f0:86:14:92:24:
11:e6:46:35:28:9e:48:c9:1e:84:0e:07:a7:db:18:71:e6:57:
88:0a:53:b2:46:fb:e7:08:ac:e1:a9:32:cf:36:01:3f:78:4f:
ed:b9:6f:2e:f9:aa:aa:ef:9a:1b:47:54:0b:97:17:43:74:1a:
1e:23:ab:cd:11:01:36:eb:72:8d:4e:96:ac:5b:bb:f7:a2:86:
77:8b:0a:52:07:bf:9c:4c:dd:69:7c:73:81:35:2b:e1:a0:e1:
c0:15:94:ce:65:06:94:9c:68:2b:d0:c1:16:18:ed:6a:51:1d:
ea:6c:c0:6d:8a:69:f8:bd:13:0e:1d:fe:cf:be:32:a9:11:35:
89:8c:63:13:71:93:ad:f7:9e:dc:d0:49:f4:f9:bf:8e:f0:7a:
d9:4a:55:9a:1f:db:2e:29:2e:ec:ef:85:c9:e4:a4:fe:39:2a:
c4:31:3d:f5:e5:9d:60:30:54:c6:d8:4a:36:e5:8a:cd:24:f8:
46:2a:d3:9c:af:ea:01:2b:d3:e4:db:87:6d:e8:b4:29:15:f4:
9c:99:90:c1:bd:d4:5d:a1:0e:40:a0:2e:fd:77:ea:58:20:50:
d3:5d:fd:0f:87:97:bf:04:ec:01:48:55:21:1e:c2:e6:9d:83:
8e:db:5e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 22:24:17 2026 by rpki-client