Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
File: CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft (raw, json)
Hash identifier: qBMow9SXF8Y6I2ErZe+QNz3rUX5MmcKixKBL/gMJMAY=
Subject key identifier: 89:4F:0E:D7:ED:6A:DF:57:AF:89:20:6A:B2:56:2F:EC:48:2C:53:AB
Authority key identifier: 0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
Certificate issuer: /CN=0b1027ace17f0067f697c65361488192eaf64138
Certificate serial: 01A140838F409629D1861207D1842C85A193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 17:02:06 +0000
Manifest this update: Thu 15 Oct 2026 17:02:06 +0000
Manifest next update: Fri 16 Oct 2026 17:02:06 +0000
Files and hashes: 1: CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl (hash: qLPYIFx655PBOwx3U72pNZgE50wmdO56wN3OeLSaB3I=)
2: olOPnaLLnIT6RL2jFeXy_mY0R1U.roa (hash: WWXON9JXIV3ioE2DMW0bmhdUFZ19nV5gUDCVfyMR3to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:83:8f:40:96:29:d1:86:12:07:d1:84:2c:85:a1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1027ace17f0067f697c65361488192eaf64138
Validity
Not Before: Oct 15 17:02:06 2026 GMT
Not After : Oct 16 17:02:06 2026 GMT
Subject: CN=894f0ed7ed6adf57af89206ab2562fec482c53ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:89:89:6b:91:cc:ec:32:d5:f3:72:fd:af:
11:3a:84:df:6a:63:7b:85:63:bb:ba:68:21:68:d1:
f7:e9:7e:08:c8:5c:cd:92:bc:12:89:64:19:a2:51:
5f:3f:94:37:7c:5e:19:04:9b:20:ec:03:10:5f:62:
b8:3c:00:f0:4d:3f:f8:ae:a0:8e:ea:01:71:b6:70:
a1:3d:22:3d:80:17:8a:7f:97:a1:9b:cf:fe:91:de:
28:30:b1:b8:bf:5c:8b:64:d1:cd:c0:97:08:6d:db:
9a:54:08:64:e9:b2:3d:70:13:ef:81:6a:5c:5c:85:
25:4c:94:fe:03:93:4a:a0:9b:e7:db:e9:c3:6d:5f:
ba:84:8e:06:30:08:db:a6:ae:37:65:07:52:c4:c8:
d6:fb:82:ad:a5:de:2e:99:aa:50:37:68:d5:a7:20:
55:60:8f:2a:b7:90:3a:55:d1:f5:2a:70:dd:55:72:
10:72:13:ce:c0:22:8e:61:e7:4f:c1:bd:2d:6d:f8:
6b:0b:ab:0b:57:e3:a3:25:46:9a:89:3f:09:cc:92:
dc:97:8a:4c:80:db:f7:f4:ea:d6:ff:bb:62:52:1a:
54:69:d5:d5:c6:d1:8f:8c:00:ba:16:62:33:a8:36:
82:bb:d1:d2:45:85:fd:cc:05:d8:b0:34:d4:b3:84:
12:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4F:0E:D7:ED:6A:DF:57:AF:89:20:6A:B2:56:2F:EC:48:2C:53:AB
X509v3 Authority Key Identifier:
keyid:0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4d:eb:d8:02:bf:af:b1:b9:b1:b5:a4:75:d8:4e:1b:c2:77:
1c:95:25:10:f7:be:54:fe:c1:a4:a1:e7:f3:78:08:93:2e:ce:
2c:12:84:63:a8:84:16:46:29:6a:73:23:9f:e0:66:a3:2a:ef:
dd:cf:29:db:61:3f:43:e2:1c:1a:1e:20:9f:67:06:99:2b:2d:
9a:f0:a5:3e:a0:66:77:1d:cd:ff:e6:4d:7a:52:98:3d:32:85:
18:10:f8:ad:e8:c7:92:d4:22:68:93:f2:2e:8f:7e:86:59:0e:
75:7e:a6:29:63:ad:31:c7:9a:33:34:33:8f:3b:9f:1d:12:c1:
ac:02:70:f6:c0:9a:f3:d6:bf:be:e3:dd:25:99:c6:a0:c1:6a:
6b:c4:f0:14:b6:6c:61:7f:4a:a1:9b:c2:24:8f:95:fe:3a:40:
39:64:08:1a:c7:c4:3a:d5:a3:06:d4:70:88:a4:f5:a3:d7:c1:
c3:69:d3:82:64:82:fb:87:6e:23:b9:9a:6f:4b:c9:02:7a:93:
16:7e:94:f4:f6:7f:0d:07:09:cd:21:6e:85:9e:f2:31:8b:53:
89:6e:a3:48:39:de:8b:7b:42:54:76:ee:db:b9:ae:63:84:e9:
47:24:9a:b8:64:7a:1f:94:4a:e0:56:50:d1:88:c4:08:f6:af:
f8:d4:82:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:51:39 2026 by rpki-client