Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
File: CxsxjlBXocEDQWB83d2ttG1xq_U.mft (raw, json)
Hash identifier: ZGstSwtdOnpuxifWCjnP8JGBTnIF/8HD5GrPZsXNK2w=
Subject key identifier: 66:6F:CC:E5:6E:10:24:5A:04:33:A4:EE:07:18:05:68:55:2B:04:DD
Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
Certificate issuer: /CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Certificate serial: 019E30A9232977669375090941B1C4CB594D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 12:00:51 +0000
Manifest this update: Sat 16 May 2026 12:00:51 +0000
Manifest next update: Sun 17 May 2026 12:00:51 +0000
Files and hashes: 1: AyjB4EHPCDq9p7LZ4QxN-ryxrkM.roa (hash: TjTKp2DaLx4thRMtFk13G01LVFaqUeVARGlNcCmXfhM=)
2: CxsxjlBXocEDQWB83d2ttG1xq_U.crl (hash: 6+zqTBtOE+wKkkEiV3mrhW3J5hz/tegdKQoVlmnKO9s=)
3: NjX_-QFT-KYIQb8IhhsWdmtYmIs.roa (hash: alZ0M56XHk3ZVrQNYJTxZZ2onR/AK2JyEOwbu/Z8qYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:23:29:77:66:93:75:09:09:41:b1:c4:cb:59:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Validity
Not Before: May 16 12:00:51 2026 GMT
Not After : May 17 12:00:51 2026 GMT
Subject: CN=666fcce56e10245a0433a4ee07180568552b04dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:37:3d:84:44:73:f7:d4:1e:92:c7:5b:66:
8e:d4:e7:7c:81:9c:08:1f:5f:b6:fd:f0:09:61:01:
91:f3:44:3c:37:77:10:67:17:8a:47:54:2b:3f:e9:
ff:2f:70:43:b5:04:f2:e7:9a:e8:a5:ad:c2:05:ef:
b2:e4:0e:7c:21:1f:74:fb:54:1d:67:e5:41:14:6e:
f1:cd:10:a3:e1:2a:ed:e2:b3:21:85:02:25:69:93:
5c:77:4f:f5:b2:a7:71:03:77:48:53:98:84:7e:a8:
45:af:9d:63:3f:2e:db:09:aa:97:b3:0a:0a:e3:aa:
cb:6b:62:d8:2f:b0:9a:69:1c:f4:72:f8:9e:e2:44:
84:e7:6c:90:f4:b9:40:59:6b:19:3e:4a:48:18:26:
ca:62:d5:29:c6:69:50:26:8a:17:0e:27:be:01:1e:
70:e1:52:67:aa:53:db:b4:d4:ba:cb:1d:67:9a:9e:
bf:85:cd:d0:92:6a:a0:9b:79:1b:8a:c4:19:9b:a8:
aa:38:4e:2a:bd:ce:37:e7:94:d7:89:4b:5f:59:20:
06:bc:9d:9f:9a:03:0a:6b:9f:70:32:f6:74:6f:61:
a8:60:5e:69:d9:a2:62:80:fc:3d:0c:17:c5:a1:ee:
f7:7e:bc:7c:92:fc:01:62:c5:71:94:8d:91:e5:f6:
96:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6F:CC:E5:6E:10:24:5A:04:33:A4:EE:07:18:05:68:55:2B:04:DD
X509v3 Authority Key Identifier:
keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:83:90:40:6b:db:3d:5e:4f:be:fb:f9:97:a5:94:bd:a5:90:
e7:98:79:d3:72:cc:e3:a6:4d:ec:4e:00:46:96:28:cd:c6:d5:
01:7f:b8:ea:9e:3b:3b:eb:44:f5:9a:a0:1c:e3:24:e6:da:53:
89:33:02:7f:04:e4:5e:c3:95:61:4e:b8:bd:a0:51:8d:6c:98:
54:ab:ec:03:86:74:f2:e7:92:d7:37:83:d1:13:6b:f2:22:5f:
cc:ff:d3:48:e8:99:81:b4:08:9f:58:c9:2e:46:2e:d0:fe:fe:
7a:c6:8f:f5:7e:e0:74:76:4e:4f:ad:7a:c7:bf:7b:fe:d8:d3:
b7:47:85:ba:c2:c9:30:a1:ec:37:76:44:b2:75:d4:3e:97:6a:
40:58:46:d4:ec:05:90:10:e7:f4:2a:8e:98:97:ad:44:60:94:
00:7c:49:15:f1:da:a3:e7:ff:7e:1e:12:af:8f:f8:e7:8a:e6:
6e:48:de:f3:47:c4:3b:d6:23:99:8e:ba:eb:4a:97:68:ff:17:
4d:51:e3:bc:16:88:38:be:95:ac:9b:59:aa:8b:0b:6c:49:10:
43:68:00:9f:7c:98:66:12:d3:60:93:a4:12:33:ea:66:22:b8:
7c:2e:60:89:97:c4:56:d9:b0:0b:b3:a8:f5:76:39:9b:c9:6a:
65:cc:96:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:31:21 2026 by rpki-client