Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
File: Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft (raw, json)
Hash identifier: QbGFTkTz1F0GJmFlh5ksSFUmGbGUIb5CPcbYa42d9rE=
Subject key identifier: E5:2F:E4:D2:D4:01:A1:41:DA:AF:B2:00:43:2A:F1:CD:8C:15:49:F8
Authority key identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
Certificate issuer: /CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Certificate serial: 019E311782E56B2C61D00AC5A54132CE6B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
Manifest number: 08D0
Signing time: Sat 16 May 2026 14:01:24 +0000
Manifest this update: Sat 16 May 2026 14:01:24 +0000
Manifest next update: Sun 17 May 2026 14:01:24 +0000
Files and hashes: 1: Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl (hash: cSdLlyVYydJCzLkponcWWBE6gyaIou4WvlCOWU7fKcQ=)
2: pGFwy3aEV2qhiZhwH7yaMrR8fo0.roa (hash: KW1x50QC1Ci4rIl9Ru/vbiHcwzJviAGG+0QbXfYDiO8=)
3: qlxYIa3PjXKqV7hlzapOlNgcm0I.roa (hash: 1ZBb0ZiezUactfqIZmt39M9PRVHG48Yw9HnDmIgNQw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:82:e5:6b:2c:61:d0:0a:c5:a5:41:32:ce:6b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Validity
Not Before: May 16 14:01:24 2026 GMT
Not After : May 17 14:01:24 2026 GMT
Subject: CN=e52fe4d2d401a141daafb200432af1cd8c1549f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:cc:51:88:37:b5:0e:de:51:18:9c:02:93:
39:4b:8e:08:ee:c7:3b:34:4b:be:8e:ca:ae:58:4c:
6b:21:4a:94:55:d1:00:b4:99:2e:1d:58:0b:e9:24:
ce:7e:17:d9:ce:a5:d0:e2:72:84:57:dd:39:fc:1c:
be:69:ca:96:53:93:be:da:96:01:51:5c:3a:b2:63:
02:e6:c5:07:17:d7:6e:41:72:c1:6b:dd:9a:84:d4:
24:9c:66:49:cb:01:85:e1:b4:51:4d:19:cf:26:f1:
c5:5e:e6:39:22:7e:eb:fe:9c:7c:9d:6d:89:e5:ff:
0b:2b:e1:f7:83:33:c9:38:c3:cd:cc:12:79:47:14:
58:cd:3c:a2:ef:72:8b:ed:b7:a6:7c:5f:11:5e:53:
56:1e:82:99:60:e1:c1:c5:a1:79:35:2f:34:22:db:
b8:1b:b1:3a:26:e9:0d:ef:f3:2f:75:44:3a:04:cb:
d5:99:38:e8:0a:95:d4:12:ea:0b:dc:3b:0c:76:34:
f6:7e:b9:69:85:5a:82:e2:bf:ea:65:fe:17:8b:7f:
3f:68:55:7a:b0:8a:4d:53:c3:81:24:88:bd:ef:22:
f8:aa:0e:0a:63:60:dd:38:88:83:00:e6:f2:8a:a5:
d5:19:f8:dd:65:c7:3f:b5:c3:c1:d4:25:61:44:29:
6c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2F:E4:D2:D4:01:A1:41:DA:AF:B2:00:43:2A:F1:CD:8C:15:49:F8
X509v3 Authority Key Identifier:
keyid:0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:33:0c:31:f7:31:00:c4:25:de:9c:9e:09:4a:e2:15:58:2f:
4e:bf:6c:ef:ae:3f:fe:5d:f4:76:5b:8a:dd:26:0d:f1:eb:4f:
86:a2:02:c6:35:47:5a:a9:76:f4:b2:1d:01:61:b1:81:96:2f:
be:f1:b5:1c:3f:de:42:f0:57:e3:db:5c:10:64:5f:5f:66:f6:
e8:2c:73:7c:63:f1:7b:0a:ea:ad:83:dc:e5:22:8f:30:d7:8b:
51:57:1f:b2:2b:86:e2:06:d5:0c:db:01:19:d9:e9:c7:81:2b:
de:35:ad:9d:d8:eb:77:64:c7:66:35:fc:3c:88:3f:17:8c:f9:
d4:6c:31:33:cf:6c:56:58:2f:2f:a3:28:f3:a1:80:15:6a:13:
e2:04:3e:a5:d5:3b:f7:ee:d5:a4:49:d3:3f:fa:ef:09:d9:d6:
df:6e:c7:38:26:a8:47:74:c1:2c:e0:11:4c:c6:50:d4:49:35:
ea:ca:54:11:2f:69:3f:e3:27:00:a9:b4:c8:65:b3:14:03:6d:
66:75:30:4e:a4:77:46:4d:ff:08:cc:ae:64:9d:33:0a:77:83:
3b:43:fd:a3:a4:ae:df:a3:fd:9c:f9:f0:e7:78:13:7f:b2:bb:
33:b3:5d:13:f3:e2:ea:fd:33:b3:45:34:74:f3:f7:a8:c1:9c:
60:89:29:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:10 2026 by rpki-client