Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
File: Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft (raw, json)
Hash identifier: AwiRWmU2U1ezSdyzh0hdx6t7z0/nuIJOdfsQaotvoYs=
Subject key identifier: F1:80:B8:35:D9:E0:05:55:59:1A:6E:28:AE:DE:BB:54:2C:A6:C4:C6
Authority key identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
Certificate issuer: /CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Certificate serial: 019F18D6C280B340CFFCBB0EFC98AC8E2643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
Manifest number: 0948
Signing time: Tue 30 Jun 2026 14:02:35 +0000
Manifest this update: Tue 30 Jun 2026 14:02:35 +0000
Manifest next update: Wed 01 Jul 2026 14:02:35 +0000
Files and hashes: 1: Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl (hash: 1jsoLiv7EFY3KwUwj7trqWQtCIniMCKUf9goec1/D5M=)
2: pGFwy3aEV2qhiZhwH7yaMrR8fo0.roa (hash: KW1x50QC1Ci4rIl9Ru/vbiHcwzJviAGG+0QbXfYDiO8=)
3: qlxYIa3PjXKqV7hlzapOlNgcm0I.roa (hash: 1ZBb0ZiezUactfqIZmt39M9PRVHG48Yw9HnDmIgNQw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:c2:80:b3:40:cf:fc:bb:0e:fc:98:ac:8e:26:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Validity
Not Before: Jun 30 14:02:35 2026 GMT
Not After : Jul 1 14:02:35 2026 GMT
Subject: CN=f180b835d9e00555591a6e28aedebb542ca6c4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:06:b5:b1:eb:70:f2:53:b2:d2:f6:24:ea:de:
1a:44:72:87:fe:b2:25:82:ac:8f:a7:74:28:78:b4:
73:31:7c:ea:f5:f5:be:43:c5:01:c2:04:6b:94:be:
36:3e:e6:18:13:f6:7e:3c:0d:0c:2f:7c:eb:4c:e2:
b7:e4:9b:c3:dc:8e:d5:c2:5a:9f:60:dd:b6:92:e8:
b1:0d:98:a2:32:2e:8f:b4:26:a4:2b:39:34:ce:d2:
9e:7c:89:bc:9f:58:f4:b5:5e:f8:2a:c8:c9:6a:70:
c7:5d:ec:28:2d:9f:10:b5:63:c3:72:09:f4:1f:82:
cf:d9:d0:01:3c:77:3c:61:ce:df:ec:9c:3a:be:bb:
24:c2:13:32:10:41:66:2b:57:85:ed:e0:1e:f4:8e:
53:bf:29:2a:af:68:04:ff:c3:59:1f:92:ca:a2:ce:
3a:b9:85:c6:f3:16:3e:a0:b6:ca:7f:20:ad:b9:91:
78:0e:26:e8:13:7a:0e:89:ba:20:41:f2:be:0e:aa:
c6:32:b5:88:b2:35:89:5f:a4:5d:73:52:ab:53:1d:
59:c2:c4:94:1f:1e:9b:8b:79:bf:dd:25:f2:13:6a:
d4:58:05:7f:91:6a:86:b6:f4:91:6a:fb:0a:78:f0:
8f:db:9b:8b:84:62:8d:c1:a2:83:88:da:2f:53:13:
38:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:80:B8:35:D9:E0:05:55:59:1A:6E:28:AE:DE:BB:54:2C:A6:C4:C6
X509v3 Authority Key Identifier:
keyid:0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f8:8c:ed:1c:17:47:31:7d:6f:2a:0d:6f:5f:75:ae:54:33:
0a:a4:75:e2:6a:65:63:49:42:10:c4:e6:e4:e1:d0:e8:34:48:
19:30:e8:8a:26:e0:aa:fd:f1:9c:14:b1:7a:82:32:8a:17:19:
3b:9c:f2:1f:0e:1b:b6:9a:ac:09:0c:b1:a9:c9:c7:e4:57:24:
85:e9:7c:ea:b6:4f:73:0d:d3:ad:64:71:4b:89:4c:01:f0:52:
00:f2:7d:e1:1c:5a:b8:7f:67:3a:5f:9a:b9:97:1e:74:d4:05:
44:0c:a0:6e:0c:61:0d:22:00:c1:a1:07:c9:15:13:49:fa:00:
7e:96:68:44:e6:6b:46:6d:38:ba:74:bd:22:4f:33:66:f8:48:
ea:cf:55:4d:f1:f3:2c:4f:1f:b3:da:01:8b:27:e2:76:dc:69:
64:57:68:e0:f5:99:76:19:36:d7:45:29:b8:1f:f9:7d:f3:77:
2b:0d:c9:e7:4e:c7:16:10:8e:dc:81:87:b7:00:1f:3c:b8:fd:
a9:d8:89:1a:7a:30:cf:47:e0:4c:9a:5e:a8:7e:e7:97:5c:0c:
b7:59:df:fa:16:75:fc:28:fe:3d:01:1f:59:03:bf:76:4c:9a:
e5:80:1f:d2:79:4c:71:32:1f:81:ba:65:45:80:e7:d8:82:af:
3b:50:39:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:12:43 2026 by rpki-client