Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
File: Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft (raw, json)
Hash identifier: x5fzXf2DeCvXoWkrADCH2WkhtFXOO+3jNakWrz0v1YE=
Subject key identifier: 54:75:C0:C0:AF:AE:D0:9B:E3:03:AE:3E:26:5E:3A:45:DB:FB:93:5D
Authority key identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
Certificate issuer: /CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Certificate serial: 01A000937DB9C23A1A44C587FDD7D8A5C653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
Manifest number: 09C0
Signing time: Fri 14 Aug 2026 14:01:00 +0000
Manifest this update: Fri 14 Aug 2026 14:01:00 +0000
Manifest next update: Sat 15 Aug 2026 14:01:00 +0000
Files and hashes: 1: Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl (hash: e6FWckeTJoF9rptyizgtCPcn5vRp5S+MlU+NQVX26lM=)
2: pGFwy3aEV2qhiZhwH7yaMrR8fo0.roa (hash: KW1x50QC1Ci4rIl9Ru/vbiHcwzJviAGG+0QbXfYDiO8=)
3: qlxYIa3PjXKqV7hlzapOlNgcm0I.roa (hash: 1ZBb0ZiezUactfqIZmt39M9PRVHG48Yw9HnDmIgNQw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:7d:b9:c2:3a:1a:44:c5:87:fd:d7:d8:a5:c6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Validity
Not Before: Aug 14 14:01:00 2026 GMT
Not After : Aug 15 14:01:00 2026 GMT
Subject: CN=5475c0c0afaed09be303ae3e265e3a45dbfb935d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:6f:34:62:47:42:9c:7d:5d:12:ed:1b:5e:
6b:ea:3b:86:67:28:93:f6:46:25:1c:90:9b:b2:0f:
e6:48:f5:97:5b:bf:01:8b:24:41:95:00:b0:51:71:
73:29:3a:7b:19:2e:a3:db:ae:1c:93:87:96:ea:be:
58:53:88:38:9e:1e:cd:1a:77:f1:8c:d3:ac:88:0b:
c3:bc:6e:62:0c:a9:23:de:47:14:fa:cd:b8:eb:7d:
9b:53:fb:77:9a:23:b3:44:b4:5a:74:c1:88:6e:e4:
a3:38:62:6b:0e:fe:ec:dc:a9:ac:01:d3:02:b7:4e:
a2:e6:21:82:16:0f:c9:ac:cd:8e:34:36:98:fc:ed:
4d:ac:4c:04:74:ea:12:f5:b6:7d:eb:a6:2e:13:96:
46:6c:68:c9:d5:b5:e9:d2:77:5b:ab:37:81:79:d8:
58:88:15:0c:8a:52:ea:9a:95:d9:ff:8e:1f:43:c8:
37:28:ee:50:cc:e6:0d:4f:3a:13:28:fe:fb:40:f3:
5f:a2:7c:c5:bd:95:81:f4:96:ee:98:4f:88:ff:0d:
23:3a:69:fc:a1:57:f3:39:00:1f:f9:aa:44:eb:8f:
5b:06:af:91:4f:92:42:a3:58:b5:89:02:a4:4a:86:
3b:0a:59:da:9c:ba:64:df:e1:90:97:8e:c5:e0:e3:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:75:C0:C0:AF:AE:D0:9B:E3:03:AE:3E:26:5E:3A:45:DB:FB:93:5D
X509v3 Authority Key Identifier:
keyid:0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:70:2d:45:30:b5:b0:09:13:be:17:74:83:78:98:83:1e:b7:
fc:14:12:94:08:42:3b:26:dc:72:94:98:8f:c6:4f:a1:d1:15:
4d:e7:9a:be:8f:83:af:a7:e9:47:15:0d:f5:fb:ac:ce:b2:bf:
6a:a2:63:09:06:57:8b:fe:af:73:e9:da:92:e7:00:a6:ce:1b:
27:dc:43:44:4c:9c:67:d7:79:2b:28:92:05:53:de:be:7f:fb:
1c:15:00:18:cf:96:7f:3f:c0:37:ac:ed:6a:62:2a:db:b1:96:
ca:45:c9:ba:1e:00:1c:6a:26:e2:bf:e7:eb:bb:8a:fd:f4:95:
2f:58:12:1c:65:04:5d:d2:75:1b:41:59:da:9d:5c:ea:b1:26:
89:25:92:f9:84:bb:c7:a8:c0:39:8d:02:bf:93:e0:06:cf:e6:
05:29:6d:31:3a:4b:e3:b4:0c:f3:b1:71:0d:64:42:03:14:f5:
a0:1b:7d:a9:d9:bb:c5:0a:e1:ff:b1:cc:1a:a9:9e:5f:9e:8c:
c9:10:3c:34:fa:ae:df:b7:2d:2d:40:3f:61:7c:29:71:d4:23:
68:ba:1b:a5:27:09:8d:28:48:55:b9:d4:4b:f1:db:7c:cd:22:
c5:c0:44:c6:60:73:6c:34:a6:37:4b:0b:a8:13:1a:1f:ff:75:
28:74:df:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAk325wjoaRMWH/dfYpcZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMTkzNjI4MWI4NjcwN2EwNWQ1NWEwMWY4OGIyZTY1M2Q3
YjNlZTkwHhcNMjYwODE0MTQwMTAwWhcNMjYwODE1MTQwMTAwWjAzMTEwLwYDVQQD
Eyg1NDc1YzBjMGFmYWVkMDliZTMwM2FlM2UyNjVlM2E0NWRiZmI5MzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7xvNGJHQpx9XRLtG15r6juGZyiT
9kYlHJCbsg/mSPWXW78BiyRBlQCwUXFzKTp7GS6j264ck4eW6r5YU4g4nh7NGnfx
jNOsiAvDvG5iDKkj3kcU+s24632bU/t3miOzRLRadMGIbuSjOGJrDv7s3KmsAdMC
t06i5iGCFg/JrM2ONDaY/O1NrEwEdOoS9bZ966YuE5ZGbGjJ1bXp0ndbqzeBedhY
iBUMilLqmpXZ/44fQ8g3KO5QzOYNTzoTKP77QPNfonzFvZWB9JbumE+I/w0jOmn8
oVfzOQAf+apE649bBq+RT5JCo1i1iQKkSoY7ClnanLpk3+GQl47F4OPu1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFR1wMCvrtCb4wOuPiZeOkXb+5NdMB8GA1UdIwQY
MBaAFAsZNigbhnB6BdVaAfiLLmU9ez7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3hrMktCdUdjSG9GMVZvQi1Jc3VaVDE3UHVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84NWVlMDItNmY0My00OTI3LWFiNWQt
ZWQ1N2IyNGI0NDY1LzEvQ3hrMktCdUdjSG9GMVZvQi1Jc3VaVDE3UHVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84NWVlMDItNmY0My00OTI3LWFiNWQtZWQ1N2IyNGI0NDY1
LzEvQ3hrMktCdUdjSG9GMVZvQi1Jc3VaVDE3UHVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXAtRTC1
sAkTvhd0g3iYgx63/BQSlAhCOybccpSYj8ZPodEVTeeavo+Dr6fpRxUN9fuszrK/
aqJjCQZXi/6vc+nakucAps4bJ9xDREycZ9d5KyiSBVPevn/7HBUAGM+Wfz/AN6zt
amIq27GWykXJuh4AHGom4r/n67uK/fSVL1gSHGUEXdJ1G0FZ2p1c6rEmiSWS+YS7
x6jAOY0Cv5PgBs/mBSltMTpL47QM87FxDWRCAxT1oBt9qdm7xQrh/7HMGqmeX56M
yRA8NPqu37ctLUA/YXwpcdQjaLobpScJjShIVbnUS/HbfM0ixcBExmBzbDSmN0sL
qBMaH/91KHTfxw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:20:55 2026 by rpki-client