Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
File: cxkAeiit4HgdMS2NSUcts2dnBBY.mft (raw, json)
Hash identifier: PN6Wb8QUode3svOyYgrlf5n+PwGk3yqyCWjfCvIimt0=
Subject key identifier: 6A:01:4F:09:50:94:38:D9:5C:9C:39:2B:7B:CB:38:1F:36:A3:0C:03
Authority key identifier: 73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
Certificate issuer: /CN=7319007a28ade0781d312d8d49472db367670416
Certificate serial: 01A103243EBB6B9425443BC670A175CF11EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
Manifest number: 0D02
Signing time: Sat 03 Oct 2026 19:01:09 +0000
Manifest this update: Sat 03 Oct 2026 19:01:09 +0000
Manifest next update: Sun 04 Oct 2026 19:01:09 +0000
Files and hashes: 1: Le8K7qSkEZ1_FmI_JNvcQwDT3kM.roa (hash: YPGYe40UQA7fHzeXPlUUiQ7ZZraM1bL1CPz1T+qTDdY=)
2: cxkAeiit4HgdMS2NSUcts2dnBBY.crl (hash: BPAIEN4MAUcwgdWHb6gY+UjWMCBp5d0eo3h844sBi/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:24:3e:bb:6b:94:25:44:3b:c6:70:a1:75:cf:11:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319007a28ade0781d312d8d49472db367670416
Validity
Not Before: Oct 3 19:01:09 2026 GMT
Not After : Oct 4 19:01:09 2026 GMT
Subject: CN=6a014f09509438d95c9c392b7bcb381f36a30c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:0d:f0:0d:f9:52:c9:72:d8:2f:bb:ec:38:
d8:71:10:1a:b8:7a:1d:f8:23:1b:eb:0b:ee:51:2b:
6b:c8:d5:f2:5f:30:67:01:a3:cf:d3:ee:f7:30:f8:
f6:d0:c8:a3:22:5b:50:59:4f:cb:aa:77:ab:55:e8:
ff:0e:e9:b5:04:ec:6d:64:fd:08:f8:ba:08:7f:82:
a2:fe:5f:02:c4:e7:7e:05:82:a5:8e:59:33:4a:c3:
86:6c:02:ce:14:da:45:9b:7e:93:88:fc:ff:c4:15:
64:53:50:a1:01:47:87:54:4d:b2:f1:a2:12:02:4f:
c0:03:e9:3d:50:a9:b9:fd:3f:22:3f:48:1d:23:92:
78:02:09:64:1c:94:73:13:77:86:09:bc:01:a9:5a:
76:64:e6:22:77:23:2a:ff:35:cd:45:86:b3:20:1f:
34:3f:9e:54:a2:5b:d7:64:ae:10:0a:ed:bd:99:0b:
33:53:73:7f:39:dc:5f:81:e7:1f:16:ba:f4:bb:f3:
3b:8f:09:ea:fe:84:0d:12:87:3b:8a:58:16:83:9e:
00:bc:35:b5:ba:03:74:c7:df:89:c3:e1:09:e3:29:
79:93:37:8a:56:65:78:b6:59:dd:3e:8b:2c:e4:ef:
e9:5c:62:81:a6:f8:12:a7:3d:9b:50:40:d8:b5:82:
d0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:01:4F:09:50:94:38:D9:5C:9C:39:2B:7B:CB:38:1F:36:A3:0C:03
X509v3 Authority Key Identifier:
keyid:73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9e:d1:6c:d1:08:62:9b:2b:dc:76:50:20:81:75:23:d6:2a:
b3:96:b9:c6:07:fe:0a:a2:ec:45:38:30:97:76:c4:11:29:19:
d1:0a:b2:8b:a1:1f:9e:50:e4:c7:e9:92:b0:5a:b3:37:fe:52:
91:f3:49:4b:ef:11:d7:98:41:94:0e:46:95:a2:32:a5:d1:9b:
7c:b7:fd:e5:fe:9e:32:f4:d9:43:e2:5f:86:b3:3e:67:83:46:
b8:f1:4f:b5:bd:8d:5e:b8:af:50:ba:b6:7c:5b:f2:b4:76:d6:
7b:22:0f:4a:6c:f0:23:ab:8c:e7:ff:b7:d4:0b:2d:49:3f:49:
a4:b3:87:5a:79:43:c0:49:ca:c0:eb:b1:f6:0a:27:37:cd:5c:
ff:4f:c0:d7:d7:3d:ac:42:17:98:38:9e:67:58:26:4c:23:c7:
68:80:73:16:e8:fd:15:7f:7a:ba:a1:41:fc:06:22:20:08:27:
af:68:06:aa:c2:39:4c:8c:b7:6e:19:5b:4d:64:4f:06:c9:e5:
48:f9:01:51:33:50:06:fb:4a:23:cb:b9:eb:92:db:f9:d1:d6:
5a:fe:78:b2:e3:88:10:2d:ef:67:d1:4a:e2:b8:76:7e:a9:76:
33:e1:a7:b3:0b:f6:26:a6:8b:45:7f:a7:00:61:9d:80:e6:73:
58:dc:e0:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEDJD67a5QlRDvGcKF1zxHvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMTkwMDdhMjhhZGUwNzgxZDMxMmQ4ZDQ5NDcyZGIzNjc2
NzA0MTYwHhcNMjYxMDAzMTkwMTA5WhcNMjYxMDA0MTkwMTA5WjAzMTEwLwYDVQQD
Eyg2YTAxNGYwOTUwOTQzOGQ5NWM5YzM5MmI3YmNiMzgxZjM2YTMwYzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqEN8A35Usly2C+77DjYcRAauHod
+CMb6wvuUStryNXyXzBnAaPP0+73MPj20MijIltQWU/LqnerVej/Dum1BOxtZP0I
+LoIf4Ki/l8CxOd+BYKljlkzSsOGbALOFNpFm36TiPz/xBVkU1ChAUeHVE2y8aIS
Ak/AA+k9UKm5/T8iP0gdI5J4AglkHJRzE3eGCbwBqVp2ZOYidyMq/zXNRYazIB80
P55UolvXZK4QCu29mQszU3N/OdxfgecfFrr0u/M7jwnq/oQNEoc7ilgWg54AvDW1
ugN0x9+Jw+EJ4yl5kzeKVmV4tlndPoss5O/pXGKBpvgSpz2bUEDYtYLQQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoBTwlQlDjZXJw5K3vLOB82owwDMB8GA1UdIwQY
MBaAFHMZAHooreB4HTEtjUlHLbNnZwQWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3hrQWVpaXQ0SGdkTVMyTlNVY3RzMmRuQkJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9mOGM3ZTItMzI4Mi00ZWJiLTg1MDgt
OWY5NDk0OTY2YzU0LzEvY3hrQWVpaXQ0SGdkTVMyTlNVY3RzMmRuQkJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9mOGM3ZTItMzI4Mi00ZWJiLTg1MDgtOWY5NDk0OTY2YzU0
LzEvY3hrQWVpaXQ0SGdkTVMyTlNVY3RzMmRuQkJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZ7RbNEI
Ypsr3HZQIIF1I9Yqs5a5xgf+CqLsRTgwl3bEESkZ0Qqyi6EfnlDkx+mSsFqzN/5S
kfNJS+8R15hBlA5GlaIypdGbfLf95f6eMvTZQ+JfhrM+Z4NGuPFPtb2NXrivULq2
fFvytHbWeyIPSmzwI6uM5/+31AstST9JpLOHWnlDwEnKwOux9gonN81c/0/A19c9
rEIXmDieZ1gmTCPHaIBzFuj9FX96uqFB/AYiIAgnr2gGqsI5TIy3bhlbTWRPBsnl
SPkBUTNQBvtKI8u565Lb+dHWWv54suOIEC3vZ9FK4rh2fql2M+Gnswv2JqaLRX+n
AGGdgOZzWNzgEQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 07:04:41 2026 by rpki-client