Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
File: CXa-2b-5b_oZgiBViqPVuMj5zT0.mft (raw, json)
Hash identifier: vfL1de8apwZ6SmW4NY16bUxdHFglzBBC48faxwq0XKE=
Subject key identifier: 93:E0:A0:78:99:CE:56:C7:1A:DC:AA:79:1C:18:E3:01:EA:4A:83:BB
Authority key identifier: 09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D
Certificate issuer: /CN=0976bed9bfb96ffa198220558aa3d5b8c8f9cd3d
Certificate serial: 01A03FA9644274FF5A256A16DB7AC814C491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
Manifest number: 0488
Signing time: Wed 26 Aug 2026 20:01:00 +0000
Manifest this update: Wed 26 Aug 2026 20:01:00 +0000
Manifest next update: Thu 27 Aug 2026 20:01:00 +0000
Files and hashes: 1: 81erH1PyFfVJ8_cg3A4J-xcuYbw.roa (hash: NaAy63sjfoCM4Pl3nqIIgQyKV92LR17H8Jx3JG7KMKc=)
2: CXa-2b-5b_oZgiBViqPVuMj5zT0.crl (hash: qoHSweZsPIg1mXNKrdIvhWRk/d0JoCwIp40D8xZO8t0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:64:42:74:ff:5a:25:6a:16:db:7a:c8:14:c4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0976bed9bfb96ffa198220558aa3d5b8c8f9cd3d
Validity
Not Before: Aug 26 20:01:00 2026 GMT
Not After : Aug 27 20:01:00 2026 GMT
Subject: CN=93e0a07899ce56c71adcaa791c18e301ea4a83bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:57:33:8c:68:d0:10:e5:7d:23:20:55:85:a8:
05:79:d3:f1:d5:da:9c:27:a7:05:fe:0d:a6:13:35:
ff:ac:37:4d:35:c0:68:38:b2:0e:86:48:2e:9d:2a:
da:ea:72:eb:0f:58:75:ab:f7:3e:18:03:7e:fb:18:
db:47:63:e8:a9:ee:d9:2b:10:6a:5b:d2:51:a3:17:
5c:14:2d:79:94:52:af:cb:52:a1:87:e1:3f:e8:8a:
74:b0:33:33:f9:ec:46:9e:2d:23:72:4d:bb:f5:df:
4e:65:28:67:f0:65:0e:74:ea:a3:c8:ec:2e:6d:f7:
ca:e5:f7:56:6f:80:7a:80:6a:ec:93:14:af:4a:1c:
37:44:c1:9d:1a:b7:08:07:f0:b9:bb:78:37:43:92:
06:49:79:71:16:17:84:3c:48:14:6d:4e:fd:8d:cc:
92:6b:f8:54:1c:e8:bc:cb:75:c2:d3:3d:84:a4:2a:
a2:22:0d:a5:d7:51:7c:7a:35:50:e2:1b:19:7a:6b:
fc:3a:b4:2d:8c:fc:d4:32:15:2c:52:ae:10:28:00:
27:de:8d:26:b1:14:21:ae:92:ee:b6:46:bb:b2:5e:
9e:26:57:16:62:34:3b:1a:3e:5c:e1:6a:3c:ba:7e:
27:ee:1a:2f:6d:ad:35:93:2f:cb:0d:d4:8d:00:57:
54:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E0:A0:78:99:CE:56:C7:1A:DC:AA:79:1C:18:E3:01:EA:4A:83:BB
X509v3 Authority Key Identifier:
keyid:09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cb:eb:59:da:25:88:1d:65:1b:80:5a:0e:56:bc:be:b1:2f:
6f:0d:63:a3:19:9e:14:08:cd:0a:01:4a:c7:74:f8:be:01:5d:
ad:3e:dc:7d:f2:d4:f2:c4:26:da:b5:56:a7:55:30:f0:a5:71:
7c:44:a1:b7:79:ce:18:e3:ce:cc:51:5a:97:6c:f7:6c:1e:06:
07:3c:2f:a8:bd:19:ca:cb:69:b5:6d:83:44:87:96:cd:a6:63:
00:e3:42:df:a8:5a:c1:e3:09:ac:1b:25:fd:12:0b:43:5c:fa:
9d:2f:cb:ea:4a:a5:0c:83:79:21:4e:d6:69:f2:43:70:db:9c:
40:5e:e1:7f:ad:bd:77:45:94:f1:e3:33:57:cf:4b:44:73:1d:
5f:1c:98:fb:01:c8:24:e0:90:f4:94:b1:ce:de:11:b8:a3:e8:
2f:b1:e2:90:f3:d5:26:db:73:69:68:52:44:85:bf:d5:5c:86:
cb:de:3b:57:d1:08:26:9b:f2:22:fd:ba:e9:51:c3:b2:5a:db:
0b:48:36:39:8d:04:1b:28:07:5d:f6:31:94:f4:12:e1:65:eb:
a8:e0:f8:a4:f1:5b:57:71:8f:b1:13:3d:62:c3:78:3b:92:70:
00:7b:45:e0:2d:7e:30:35:33:2b:91:42:4b:6c:14:80:62:b7:
96:ff:4b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:51:38 2026 by rpki-client