Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
File: Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft (raw, json)
Hash identifier: E+Z5eo4SgULtowqW5CzB2+bt+cgVkZtGD2ufyGS/wBU=
Subject key identifier: BB:6C:8D:18:6B:F1:8C:D2:AF:36:CF:CB:82:B1:7B:90:68:65:1D:FF
Authority key identifier: 09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
Certificate issuer: /CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Certificate serial: 019E1D90DE5591474022E9F307B3C1457329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 19:01:33 +0000
Manifest this update: Tue 12 May 2026 19:01:33 +0000
Manifest next update: Wed 13 May 2026 19:01:33 +0000
Files and hashes: 1: Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl (hash: LMr5/5+4AKHq9iohJPZOw1SBYLzl79XNXyDTQUBMOSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:de:55:91:47:40:22:e9:f3:07:b3:c1:45:73:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Validity
Not Before: May 12 19:01:33 2026 GMT
Not After : May 13 19:01:33 2026 GMT
Subject: CN=bb6c8d186bf18cd2af36cfcb82b17b9068651dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:02:a2:6a:0b:62:81:95:d5:f2:ab:e2:07:
86:03:74:b2:b2:c0:3c:8c:c8:18:ca:ab:b6:4b:98:
49:c9:29:57:8d:ca:cf:3e:3b:d7:dc:cd:ef:46:30:
a9:e7:4a:75:cb:d1:dd:9d:65:d4:01:11:f5:d3:a5:
11:4e:06:4b:5e:50:cc:a3:a8:e6:74:6f:9b:11:9b:
92:47:ec:95:06:ed:2e:5a:1f:5a:18:f8:ff:4a:ae:
63:6e:6e:a0:39:8f:16:1f:f6:a7:2a:70:b6:d1:32:
d0:c5:65:41:71:7d:96:f1:02:57:6b:16:02:9e:8c:
dd:bd:a1:b6:24:48:08:e4:f3:3d:15:8e:9f:3e:68:
45:bc:2c:67:2f:f5:36:35:24:c4:83:bd:b9:0d:02:
e3:65:bd:db:d0:15:78:03:a8:92:4a:23:fe:ae:5d:
31:f4:8c:2e:64:f0:85:1b:9b:f8:4d:fa:22:00:a5:
f5:5e:04:c0:5d:e9:ee:49:9d:25:42:8a:6d:3a:91:
08:1a:41:bf:e3:20:26:2e:8f:51:a0:f7:24:e5:2a:
52:e6:f9:8d:8e:9c:90:53:b8:6c:94:7d:5e:51:dd:
e2:04:d4:77:f7:b8:5e:55:b4:f1:45:5f:00:09:7d:
52:f9:ba:8d:af:ba:ad:65:07:6a:9a:71:60:da:08:
a2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6C:8D:18:6B:F1:8C:D2:AF:36:CF:CB:82:B1:7B:90:68:65:1D:FF
X509v3 Authority Key Identifier:
keyid:09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:99:01:3f:36:ca:f5:64:85:ef:65:be:f4:b7:26:68:13:2e:
38:9e:be:a3:fc:b8:02:f1:92:7c:48:e6:b8:0c:f4:f8:e7:78:
a2:23:7b:90:6e:6a:de:0b:52:7e:47:3c:c3:03:4b:ab:8a:72:
82:13:91:7b:d0:b1:ae:94:5d:f3:af:cc:94:a3:7a:94:21:ee:
ae:33:3f:c1:89:7c:61:36:f0:d0:4b:da:3f:ed:3d:0c:aa:bd:
9e:fc:d4:8e:55:44:d3:9d:d0:ad:42:c8:ad:23:06:9b:34:22:
e2:12:4e:80:ec:72:ab:59:53:fe:34:12:05:e9:f2:38:0f:8b:
3e:00:06:2d:1a:90:98:99:93:da:3a:8f:6e:25:48:61:99:62:
eb:29:af:fe:e7:a0:12:eb:e8:e7:0a:f9:80:7a:f1:3a:ca:97:
6c:f3:e4:24:e3:77:c7:16:74:7b:6e:44:2e:ca:e1:12:8b:bd:
21:6d:60:6c:07:46:33:45:a6:07:9b:06:f1:96:50:17:71:01:
ab:f6:f6:89:41:c6:f7:6f:05:3d:71:cc:81:e5:77:02:07:5b:
f2:5a:5a:60:47:4b:c1:d1:85:ac:f4:48:9c:10:46:64:8c:e1:
20:02:fe:e1:d8:16:55:3a:b7:4e:a1:00:1e:39:a2:17:6b:93:
47:15:14:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkN5VkUdAIunzB7PBRXMpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZmQ4YTM1YjUwYjZiNjVhMTBjMDQzOTczOTk2ZTk2YjBm
NWFkNWQwHhcNMjYwNTEyMTkwMTMzWhcNMjYwNTEzMTkwMTMzWjAzMTEwLwYDVQQD
EyhiYjZjOGQxODZiZjE4Y2QyYWYzNmNmY2I4MmIxN2I5MDY4NjUxZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2YComoLYoGV1fKr4geGA3SyssA8
jMgYyqu2S5hJySlXjcrPPjvX3M3vRjCp50p1y9HdnWXUARH106URTgZLXlDMo6jm
dG+bEZuSR+yVBu0uWh9aGPj/Sq5jbm6gOY8WH/anKnC20TLQxWVBcX2W8QJXaxYC
nozdvaG2JEgI5PM9FY6fPmhFvCxnL/U2NSTEg725DQLjZb3b0BV4A6iSSiP+rl0x
9IwuZPCFG5v4TfoiAKX1XgTAXenuSZ0lQoptOpEIGkG/4yAmLo9RoPck5SpS5vmN
jpyQU7hslH1eUd3iBNR397heVbTxRV8ACX1S+bqNr7qtZQdqmnFg2gii5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtsjRhr8YzSrzbPy4Kxe5BoZR3/MB8GA1UdIwQY
MBaAFAn9ijW1C2tloQwEOXOZbpaw9a1dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2YyS05iVUxhMldoREFRNWM1bHVsckQxclYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lMTRkOTEtZWYwZi00ZWRjLWFmZTUt
NmE5ZmJjNWRjNmM4LzEvQ2YyS05iVUxhMldoREFRNWM1bHVsckQxclYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lMTRkOTEtZWYwZi00ZWRjLWFmZTUtNmE5ZmJjNWRjNmM4
LzEvQ2YyS05iVUxhMldoREFRNWM1bHVsckQxclYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5kBPzbK
9WSF72W+9LcmaBMuOJ6+o/y4AvGSfEjmuAz0+Od4oiN7kG5q3gtSfkc8wwNLq4py
ghORe9CxrpRd86/MlKN6lCHurjM/wYl8YTbw0EvaP+09DKq9nvzUjlVE053QrULI
rSMGmzQi4hJOgOxyq1lT/jQSBenyOA+LPgAGLRqQmJmT2jqPbiVIYZli6ymv/ueg
Euvo5wr5gHrxOsqXbPPkJON3xxZ0e25ELsrhEou9IW1gbAdGM0WmB5sG8ZZQF3EB
q/b2iUHG928FPXHMgeV3Agdb8lpaYEdLwdGFrPRInBBGZIzhIAL+4dgWVTq3TqEA
HjmiF2uTRxUUCw==
-----END CERTIFICATE-----
Generated at Wed May 13 00:47:08 2026 by rpki-client