Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
File: cxkAeiit4HgdMS2NSUcts2dnBBY.mft (raw, json)
Hash identifier: Cxy2LXNhQs0/s05xiy/ENUDiexm9rhJ32fho9KjcnQY=
Subject key identifier: 48:04:CC:DC:67:A2:1E:F0:C7:7E:E1:B8:A7:9D:23:9A:99:B7:E6:A3
Authority key identifier: 73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
Certificate issuer: /CN=7319007a28ade0781d312d8d49472db367670416
Certificate serial: 019F0B1A11F7FC92F8DC2D065D56F8650D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
Manifest number: 0BFD
Signing time: Sat 27 Jun 2026 22:01:25 +0000
Manifest this update: Sat 27 Jun 2026 22:01:25 +0000
Manifest next update: Sun 28 Jun 2026 22:01:25 +0000
Files and hashes: 1: Le8K7qSkEZ1_FmI_JNvcQwDT3kM.roa (hash: YPGYe40UQA7fHzeXPlUUiQ7ZZraM1bL1CPz1T+qTDdY=)
2: cxkAeiit4HgdMS2NSUcts2dnBBY.crl (hash: NkqG7YbTjoIi+zW6Vw/n/F0qfdM1v9cKLiD8h6BxLXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0b:1a:11:f7:fc:92:f8:dc:2d:06:5d:56:f8:65:0d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319007a28ade0781d312d8d49472db367670416
Validity
Not Before: Jun 27 22:01:25 2026 GMT
Not After : Jun 28 22:01:25 2026 GMT
Subject: CN=4804ccdc67a21ef0c77ee1b8a79d239a99b7e6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:be:d3:54:16:d3:09:ef:6e:2a:4e:b0:8a:
0b:fb:30:ba:0a:45:98:26:b8:a6:8d:2b:13:d1:49:
9c:2d:50:37:03:3c:90:bf:22:2b:b7:e0:60:bf:fc:
cf:bb:3b:36:c4:f9:2e:2b:d9:01:7c:f1:0c:44:ad:
b1:26:c2:b2:e0:3b:57:10:53:25:84:d0:45:60:15:
1f:00:fa:8a:bb:68:57:af:26:b5:22:c2:fb:b0:9e:
03:5e:aa:7f:19:65:c5:f9:54:ea:7f:e9:6a:5c:e3:
01:9c:24:29:43:14:d3:18:b6:c9:7a:7a:d3:98:e3:
9b:dc:c2:f7:7c:4f:95:19:bf:e6:9a:48:97:48:a6:
9b:41:d4:6e:8e:a9:b6:49:71:32:a5:2f:73:2a:54:
6e:ab:42:2c:33:5e:3e:4f:2c:97:03:61:50:7e:16:
ce:91:72:3a:df:93:6e:63:e8:80:f7:d5:d8:73:cf:
af:37:87:35:45:bb:6c:6a:40:ae:f1:fe:45:8f:c5:
ee:1b:a7:3c:e8:1c:67:00:10:44:5c:e3:f8:c5:56:
68:21:17:02:2f:3d:a5:8b:4b:b1:88:34:71:ee:f5:
c2:ec:41:5e:89:ca:a0:64:a3:fe:77:b8:cf:56:ef:
c1:1c:2c:c1:d5:2b:cb:71:c7:bf:42:4b:76:b3:7b:
66:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:04:CC:DC:67:A2:1E:F0:C7:7E:E1:B8:A7:9D:23:9A:99:B7:E6:A3
X509v3 Authority Key Identifier:
keyid:73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:74:ae:f9:d8:d8:96:77:90:57:1b:a1:e9:ea:35:55:4f:12:
fd:21:d7:c5:83:a7:39:9b:85:a5:04:9f:d3:47:e2:43:47:73:
43:19:f0:65:66:8f:04:8a:c2:8b:f4:62:53:aa:ba:06:fe:bf:
a4:16:a8:bd:1f:a7:bc:5c:40:5f:5a:50:9b:71:47:ce:1a:ec:
d9:39:4f:7e:15:75:d3:63:48:71:ca:7c:c5:b0:4b:50:2b:17:
f0:42:fa:c6:b9:09:2b:66:19:e0:54:40:5d:85:b4:49:5a:5c:
b3:25:e8:ae:29:a9:6c:eb:23:ca:70:19:2d:05:9d:79:1c:ce:
ec:9b:92:ba:55:4f:58:34:1d:97:9f:c6:f9:1b:08:2c:a5:35:
10:59:67:c4:86:57:0e:38:dd:45:60:29:7a:28:20:6b:a6:08:
e9:43:1f:e4:d0:c3:41:ac:49:9b:d1:c2:4a:e5:2c:8c:51:91:
7b:d0:f3:ba:c7:64:fc:6c:60:a3:a2:cf:51:2d:6e:be:b1:e2:
e0:b5:cc:4a:f8:46:ad:06:c8:b3:e7:df:cd:ae:7c:aa:4a:f6:
3e:9b:de:d3:74:94:5b:f7:b3:d2:48:62:dc:a4:48:45:f4:4b:
9a:45:47:0f:9a:0d:93:b3:f3:b9:bb:6d:dc:57:8b:43:85:eb:
6c:f7:16:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 03:55:48 2026 by rpki-client