Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
File: CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft (raw, json)
Hash identifier: 09yDSKNr8Ei/Hnk6lIa539AFbQ8LIJvLqPScdkxO+GM=
Subject key identifier: 1D:1C:93:1E:EF:BE:2F:D8:A1:E8:67:1E:E6:79:19:F0:BE:6B:B5:6E
Authority key identifier: 0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
Certificate issuer: /CN=0b1027ace17f0067f697c65361488192eaf64138
Certificate serial: 019D37526B883077A1768EF1DA6C7374248C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 02:00:41 +0000
Manifest this update: Sun 29 Mar 2026 02:00:41 +0000
Manifest next update: Mon 30 Mar 2026 02:00:41 +0000
Files and hashes: 1: CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl (hash: hYn8UToERm8MKK8ejTZNpUez4TcVHg+GbVyxKC3b0Bs=)
2: olOPnaLLnIT6RL2jFeXy_mY0R1U.roa (hash: WWXON9JXIV3ioE2DMW0bmhdUFZ19nV5gUDCVfyMR3to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:6b:88:30:77:a1:76:8e:f1:da:6c:73:74:24:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1027ace17f0067f697c65361488192eaf64138
Validity
Not Before: Mar 29 02:00:41 2026 GMT
Not After : Mar 30 02:00:41 2026 GMT
Subject: CN=1d1c931eefbe2fd8a1e8671ee67919f0be6bb56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:b7:57:a5:5a:6e:60:fe:d8:ce:85:cc:ba:
f9:9a:56:4f:33:0d:73:27:81:8d:91:8f:6b:5e:40:
3e:87:0c:a5:86:b2:97:24:bf:5c:bd:c4:7d:a9:32:
9a:cf:a4:d1:0f:a8:bf:cc:63:6a:9d:93:17:1a:b0:
31:27:e3:bf:e6:38:ec:dd:91:c0:72:43:a4:3c:8d:
b0:f2:29:a2:d0:eb:7c:0c:0c:63:83:08:4a:9c:66:
de:c4:12:5c:64:fd:5b:a4:ac:5c:5c:5c:e9:c5:ac:
94:ad:1c:a9:d5:4d:53:f4:70:23:f7:3b:7b:a2:6c:
ad:23:73:70:64:e8:12:5b:a9:89:50:0f:9f:74:da:
4d:78:79:0a:fe:ea:4e:14:59:b3:f7:40:5e:4b:4d:
c3:73:36:8b:8c:ca:02:aa:a8:e3:a2:09:42:ff:33:
cb:83:3d:74:a4:93:29:04:a3:40:15:2c:f1:fb:76:
06:d1:30:84:05:83:bb:0a:76:8e:c1:72:e0:5c:6b:
e7:9b:6d:b4:2c:0d:b6:bd:66:45:3b:2c:76:01:c2:
0b:81:5d:ba:69:f5:25:03:06:6a:46:53:e8:ef:e0:
2a:90:b3:85:77:f2:b6:82:4e:79:d6:aa:18:38:c2:
61:35:24:2d:a0:bb:5a:39:11:fd:7c:6d:c8:04:49:
70:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1C:93:1E:EF:BE:2F:D8:A1:E8:67:1E:E6:79:19:F0:BE:6B:B5:6E
X509v3 Authority Key Identifier:
keyid:0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:17:e3:01:33:aa:5d:89:15:18:49:00:da:e0:ea:10:96:cd:
86:15:0c:fa:7d:59:99:dc:f3:27:34:25:58:81:b3:14:6a:36:
1a:9f:2f:38:b6:71:cc:8e:ae:63:d7:39:f5:75:d5:a9:b7:c1:
4d:2c:68:0b:f4:3a:43:a9:69:79:06:4f:1a:a2:05:9f:9d:14:
5d:a4:79:d5:04:eb:ce:a9:f7:31:d9:58:80:80:45:7d:de:cc:
41:fd:dc:9d:77:a7:42:0d:8f:44:43:15:47:60:55:27:f5:bc:
52:91:97:bc:74:1a:3b:a3:fb:74:90:b7:af:dc:1f:f7:94:4a:
21:3c:6f:9a:fd:7d:db:4d:6e:ba:ce:5b:f2:2e:6f:23:e4:87:
55:7b:14:69:b3:8a:66:03:b3:2b:2d:22:ad:1d:f6:36:f3:21:
de:f2:52:2f:0d:fe:df:35:76:22:46:0e:18:4e:ff:cb:e7:ce:
88:c6:47:b8:56:72:bf:86:d1:e4:27:e8:dd:8c:b7:6f:9f:75:
2a:ac:87:fb:9b:f0:10:2e:aa:51:26:bb:fd:2a:2a:87:db:08:
34:70:cd:4b:1b:4e:48:48:0f:3c:f8:df:c9:14:c3:77:f2:e5:
ae:d2:c5:99:7c:b6:89:c0:2a:e8:f4:2d:3a:bd:dc:93:75:de:
67:db:1e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:43 2026 by rpki-client