Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
File: cxkAeiit4HgdMS2NSUcts2dnBBY.mft (raw, json)
Hash identifier: M0X4+i8/Jw+5Jw03mhEJP2LadMiALEp2C5mxrIiIGnk=
Subject key identifier: C8:D3:A1:B0:AB:32:61:C9:36:2B:34:DD:83:8C:57:E1:B7:CB:81:99
Authority key identifier: 73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
Certificate issuer: /CN=7319007a28ade0781d312d8d49472db367670416
Certificate serial: 01A116738FB3C9F1E64E0F10D2991323A5F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
Manifest number: 0D0C
Signing time: Wed 07 Oct 2026 13:00:34 +0000
Manifest this update: Wed 07 Oct 2026 13:00:34 +0000
Manifest next update: Thu 08 Oct 2026 13:00:34 +0000
Files and hashes: 1: Le8K7qSkEZ1_FmI_JNvcQwDT3kM.roa (hash: YPGYe40UQA7fHzeXPlUUiQ7ZZraM1bL1CPz1T+qTDdY=)
2: cxkAeiit4HgdMS2NSUcts2dnBBY.crl (hash: ZjJkDjlPP0r+WRvfledpCcmwa8jFLyCqXY9eYKrzwlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:73:8f:b3:c9:f1:e6:4e:0f:10:d2:99:13:23:a5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319007a28ade0781d312d8d49472db367670416
Validity
Not Before: Oct 7 13:00:34 2026 GMT
Not After : Oct 8 13:00:34 2026 GMT
Subject: CN=c8d3a1b0ab3261c9362b34dd838c57e1b7cb8199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9d:a5:6c:5e:ca:da:0f:de:e6:24:58:32:fd:
a0:16:a9:7d:a5:9b:c7:2a:b1:28:5d:d3:8d:3f:a5:
16:c1:2a:50:d3:f0:3d:92:1d:eb:6a:3a:fd:28:ac:
7b:46:e0:28:95:c3:b8:41:c2:d1:e2:d5:7f:d0:30:
bf:40:fe:64:ba:a9:07:53:94:e9:f5:52:2b:f7:66:
40:ca:3c:06:9b:f6:57:50:48:7d:07:b9:44:e5:6f:
cf:7c:94:d0:d4:bc:7f:4b:9f:85:a5:e3:c1:c3:62:
56:e1:1e:e8:c7:54:b8:83:c5:53:a4:2e:98:c6:da:
4d:15:6c:18:1e:98:6b:56:5e:52:83:89:fa:bd:c0:
a7:d2:d7:3e:4a:9a:8e:03:d6:b6:96:2d:1d:06:99:
67:3a:9b:fd:3e:62:bd:cd:77:7d:f2:b5:21:cd:2a:
73:a1:4c:d5:67:49:b9:0e:40:4d:29:b0:6a:4e:b8:
02:f0:70:e3:ff:90:4b:d6:44:7d:c4:61:32:49:89:
ad:05:12:40:e0:3c:27:d8:a0:0c:02:af:5a:ad:ef:
9c:c7:cb:b7:d2:e2:6f:b0:78:a8:60:3d:be:6d:d8:
b8:63:e4:84:81:77:3f:77:43:e4:2c:17:88:55:b1:
4f:93:41:32:10:85:13:71:bd:95:d5:2d:0f:91:5b:
b0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D3:A1:B0:AB:32:61:C9:36:2B:34:DD:83:8C:57:E1:B7:CB:81:99
X509v3 Authority Key Identifier:
keyid:73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b0:26:6b:e8:78:0f:da:5b:d4:c4:24:a1:e3:52:a4:5a:6e:
f8:7f:2a:d7:0b:ea:b4:75:ea:65:65:28:e6:ed:45:1b:36:95:
28:af:a1:4c:f7:45:47:d9:a7:54:d7:e7:24:17:1e:e6:27:ea:
65:54:f8:60:02:a9:17:fb:3e:c5:11:77:8a:3a:43:b9:eb:1a:
a4:7e:5b:0a:b3:94:6d:ce:c6:29:e5:e9:9f:79:e6:c1:1c:f8:
5b:63:4b:c9:34:de:a4:2c:7f:f6:96:c1:a4:3c:2c:d2:bd:4b:
ce:1b:d9:53:70:16:55:f9:49:4f:82:6e:ed:17:70:ca:da:ce:
67:06:b6:2d:1d:1e:68:67:81:86:d7:90:8f:f4:99:b5:58:14:
a1:33:4a:48:35:df:ce:14:e1:2e:0e:2b:12:d8:ad:e1:06:6b:
4f:f1:fd:4e:ac:6e:70:ec:6f:70:94:d3:11:9c:76:06:f7:87:
e2:1e:75:e5:bb:4e:18:7a:d7:b9:b5:3c:c0:00:a3:cd:7d:28:
70:68:25:f8:9d:1a:1c:6f:a6:fd:03:80:85:18:31:19:11:0a:
c7:1e:ff:f1:62:b2:a8:9b:00:91:ea:d1:a1:d7:45:9c:2b:ea:
58:2c:ba:08:76:44:aa:e1:67:73:5e:0c:45:2f:ea:ec:68:d8:
a1:5c:b0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:17:25 2026 by rpki-client