Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
File: Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft (raw, json)
Hash identifier: WBU3/9tyDS5ByHBxKT3bbHgBj1ZH6oU2m31orLmH8lI=
Subject key identifier: 26:70:CF:14:F6:67:EB:0E:0C:7B:B6:8E:A3:4E:E7:64:A9:AC:8F:04
Authority key identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
Certificate issuer: /CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Certificate serial: 01A13F39CBDB858DC3957CB80DCD1443AF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
Manifest number: 0A65
Signing time: Thu 15 Oct 2026 11:01:54 +0000
Manifest this update: Thu 15 Oct 2026 11:01:54 +0000
Manifest next update: Fri 16 Oct 2026 11:01:54 +0000
Files and hashes: 1: Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl (hash: fwc/mwqoV19Ioo/JSs66Lsm2jWJdNS1m6P1SUwv/JVE=)
2: pGFwy3aEV2qhiZhwH7yaMrR8fo0.roa (hash: KW1x50QC1Ci4rIl9Ru/vbiHcwzJviAGG+0QbXfYDiO8=)
3: qlxYIa3PjXKqV7hlzapOlNgcm0I.roa (hash: 1ZBb0ZiezUactfqIZmt39M9PRVHG48Yw9HnDmIgNQw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:cb:db:85:8d:c3:95:7c:b8:0d:cd:14:43:af:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Validity
Not Before: Oct 15 11:01:54 2026 GMT
Not After : Oct 16 11:01:54 2026 GMT
Subject: CN=2670cf14f667eb0e0c7bb68ea34ee764a9ac8f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:67:02:e6:3d:07:b6:b1:12:64:96:96:3e:c6:
cd:3e:89:b6:be:1f:81:21:53:13:84:6d:21:70:62:
7b:f7:f5:8b:61:92:4a:4e:b1:91:ee:28:a0:5a:a8:
fb:f7:70:a3:a3:6e:0a:97:7b:54:48:14:45:19:c8:
d2:bb:f6:c1:fa:15:3d:26:33:b1:0f:3e:ce:d5:14:
6b:22:8a:33:a6:41:25:1e:b2:ed:e2:52:bd:e1:38:
74:86:02:47:32:c6:6f:e1:37:77:bc:15:f8:a4:d6:
d4:27:e1:17:4a:10:e5:46:58:8f:b1:35:87:4f:11:
ee:fd:ac:34:b3:bb:f1:c0:57:e2:f3:2e:02:84:9e:
b9:20:58:fd:0a:db:e2:8e:ca:8b:68:49:46:b7:d7:
d3:04:31:fe:f8:80:5e:f9:a9:44:2d:02:76:dd:83:
5c:ec:21:2e:9d:7a:57:f4:12:56:7b:10:d6:98:78:
e4:07:83:ea:97:da:c8:71:88:2d:47:ab:f5:b2:c0:
e6:b2:e9:bb:da:da:7b:09:82:d5:bd:65:ad:9d:8f:
01:0e:68:af:7b:dc:09:a2:28:5b:e1:2a:76:b5:39:
53:80:47:37:94:9e:2a:67:b6:87:d8:c6:a4:ec:f0:
23:db:e5:cf:58:70:8b:7c:d8:e8:4c:2a:1c:59:dc:
b8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:70:CF:14:F6:67:EB:0E:0C:7B:B6:8E:A3:4E:E7:64:A9:AC:8F:04
X509v3 Authority Key Identifier:
keyid:0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:61:7a:8f:93:9b:5e:44:08:dc:16:33:ed:88:27:13:8d:bc:
68:72:b8:fa:85:f8:ee:6c:ad:99:fc:fd:0f:0b:84:1c:c9:34:
01:c0:12:6c:6c:e4:b9:06:cb:b5:2b:87:83:3d:b2:b2:be:e5:
71:ea:91:33:cb:65:83:a7:75:29:53:6a:72:4d:ea:bc:53:cc:
b2:bb:88:13:a0:b6:96:72:1d:ca:f1:7a:89:96:1d:c8:f0:50:
14:be:c7:30:71:a7:47:25:c4:e7:14:d3:6e:92:38:1d:e7:71:
9c:ff:04:39:35:f9:e2:25:56:a4:84:20:98:d4:76:1a:ad:61:
8f:5c:fb:9f:64:71:30:0e:6a:37:1c:7b:55:8e:50:93:03:0a:
4e:b9:11:8a:c5:17:0b:73:d2:7f:16:ac:d5:51:44:eb:c0:e6:
31:64:a2:b4:9b:8f:03:d6:86:f4:d7:b9:53:30:66:06:81:80:
b4:4a:42:d7:82:cc:70:03:78:29:f2:85:fe:5a:a9:1d:b9:59:
66:0e:f2:a5:d1:48:95:1f:e9:c4:ae:ce:7a:51:e2:b2:2e:87:
ba:cb:20:db:05:51:08:c6:1d:73:e3:3d:67:81:44:da:06:19:
52:ae:44:69:16:c3:97:59:3a:0d:ae:e3:0e:7c:8a:c6:80:ab:
39:aa:b6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:05 2026 by rpki-client