Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
File: CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft (raw, json)
Hash identifier: VWreFiLQsMvUMWapAc1XJ65CQeDSXN6EEc6RpXVKSjk=
Subject key identifier: 57:F0:41:51:BC:00:74:0C:EF:D4:15:BC:F8:AA:84:B7:8C:63:C5:B0
Authority key identifier: 0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
Certificate issuer: /CN=0b1027ace17f0067f697c65361488192eaf64138
Certificate serial: 01A001DCD1439D7D03FC458D908EFE65CB75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 20:00:43 +0000
Manifest this update: Fri 14 Aug 2026 20:00:43 +0000
Manifest next update: Sat 15 Aug 2026 20:00:43 +0000
Files and hashes: 1: CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl (hash: 45jPR3cYcUYE9nW2oc4PKcZD0x27cOsctEAIy+gTBKI=)
2: olOPnaLLnIT6RL2jFeXy_mY0R1U.roa (hash: WWXON9JXIV3ioE2DMW0bmhdUFZ19nV5gUDCVfyMR3to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:d1:43:9d:7d:03:fc:45:8d:90:8e:fe:65:cb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1027ace17f0067f697c65361488192eaf64138
Validity
Not Before: Aug 14 20:00:43 2026 GMT
Not After : Aug 15 20:00:43 2026 GMT
Subject: CN=57f04151bc00740cefd415bcf8aa84b78c63c5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:61:51:88:75:80:39:6a:68:e6:0a:b7:ff:
ee:e1:b6:ba:75:75:82:1e:2d:19:76:f7:c6:a2:38:
e7:60:3a:ec:50:8b:d7:e9:73:73:cd:91:57:8c:70:
d1:c0:e2:ea:8c:ff:b9:1d:f3:bb:69:72:c4:3c:93:
7f:de:6a:11:d5:b4:cc:2b:e9:b3:95:6e:4b:f6:a4:
39:31:b5:f1:c0:77:ea:68:0e:79:da:d7:eb:80:81:
33:5b:08:3b:4b:1f:64:98:01:10:ba:46:e5:0b:42:
af:e0:06:bc:03:e2:b1:78:48:d4:e2:b4:ec:d7:2f:
d9:84:87:ae:bc:86:4d:6f:1b:72:7b:03:f3:78:d5:
0a:b0:3a:75:97:ae:90:d8:e6:69:1c:90:b4:e9:3d:
f8:3d:5f:f6:96:1e:67:d6:33:f2:1a:fa:94:71:a2:
07:85:37:57:ab:2c:21:7c:ee:cd:d6:37:fd:8f:b9:
ab:da:02:f9:a1:8e:ba:8f:16:2c:48:e5:7b:36:4a:
b4:37:0e:a2:56:66:af:46:73:92:b7:4f:bd:65:bc:
a2:e8:b0:2a:ce:8e:c2:3e:69:5a:fd:24:74:80:ff:
9f:55:3a:04:8f:63:02:db:30:c4:7a:b8:e1:b2:f2:
ac:6b:eb:10:65:08:32:82:af:c3:9d:08:19:32:1c:
33:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F0:41:51:BC:00:74:0C:EF:D4:15:BC:F8:AA:84:B7:8C:63:C5:B0
X509v3 Authority Key Identifier:
keyid:0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b1:d8:64:06:7f:39:8c:14:b0:7e:13:10:be:ff:0b:75:5f:
c7:5e:24:87:1b:7e:3a:6b:8a:ce:ed:92:dd:6a:8a:ff:01:c4:
a9:92:b2:03:66:02:08:60:b7:b1:b1:44:3d:60:72:ed:cd:18:
d6:42:0e:12:ff:42:aa:ea:3a:df:c7:e7:78:e1:20:c5:c5:22:
9d:7e:69:f5:d5:9a:93:be:a4:b9:1f:7c:1e:8d:a2:1f:b1:c8:
1e:2b:0e:f4:45:62:30:f4:0d:54:83:61:b0:cb:2c:81:0c:d2:
17:d9:9a:69:d6:ba:58:f7:40:1c:0e:27:a2:9d:64:7d:b0:1e:
0f:15:e3:d1:50:8f:26:f0:82:22:6a:4e:88:86:3f:b3:61:ae:
0f:b5:0e:53:bd:19:8e:bc:ea:52:cd:84:ef:33:95:e6:76:bb:
12:9e:e3:b9:22:7a:04:83:ff:0b:3c:1a:8b:3b:de:6a:69:7e:
b6:6a:9d:e2:e4:30:81:e9:7f:74:9d:0e:6d:37:ac:3c:e3:11:
26:d8:ef:a1:52:46:e7:a3:20:f4:21:d3:d0:36:2a:12:61:99:
0f:d1:a9:44:f9:f7:b2:fd:c8:e7:75:3b:f6:df:4f:cc:c2:a1:
cb:9e:ff:a3:86:11:03:69:05:f9:14:f8:f0:47:49:7b:f4:a3:
95:5d:c5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:06 2026 by rpki-client