Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
File: Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft (raw, json)
Hash identifier: PsvohmJohfXOvCTtOfNTQVTqvdRXflZ6yl+OnpS/y1o=
Subject key identifier: 1C:A0:67:5C:94:13:1C:7A:5E:71:6B:88:80:29:F0:59:DC:84:B5:54
Authority key identifier: 09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
Certificate issuer: /CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Certificate serial: 01A0CEFF4D19860AF00B4703CCD6C28B78E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 16:00:32 +0000
Manifest this update: Wed 23 Sep 2026 16:00:32 +0000
Manifest next update: Thu 24 Sep 2026 16:00:32 +0000
Files and hashes: 1: Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl (hash: 6cD42HdZmJ4T3pJGNKQ56ufwAeHB3eSApIe74AbvsPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:4d:19:86:0a:f0:0b:47:03:cc:d6:c2:8b:78:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Validity
Not Before: Sep 23 16:00:32 2026 GMT
Not After : Sep 24 16:00:32 2026 GMT
Subject: CN=1ca0675c94131c7a5e716b888029f059dc84b554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:47:dc:25:d3:a0:05:92:66:26:f6:7d:61:
61:0e:75:6f:ab:75:8b:eb:47:28:4a:55:d9:32:12:
89:54:ab:d2:b0:ba:b6:89:30:d1:97:75:6e:ba:43:
f8:65:92:cc:f7:94:fb:37:b6:59:af:19:d3:70:ac:
89:7c:80:92:37:c9:fa:86:2b:a0:01:9e:4d:f5:0f:
9a:63:c7:8e:4d:eb:98:a4:77:75:18:a0:e2:94:ce:
40:95:2a:d4:0c:85:77:1e:bc:fb:2b:6c:5e:a8:c9:
9c:71:3d:64:1d:3f:4a:de:12:4f:81:6e:6c:b4:9f:
40:0d:69:97:57:91:67:72:56:86:47:d0:47:b3:2d:
b4:cf:63:95:25:46:96:4a:2d:5f:e0:e9:9e:f9:4d:
fa:28:d2:d8:0d:f5:15:cc:b4:51:cd:66:da:6c:b0:
73:58:59:6e:4c:e7:f0:6c:49:43:31:b8:e9:0e:8a:
3e:04:29:09:58:f2:60:61:2b:ec:ca:77:ff:de:5d:
87:44:b4:e3:95:5f:b2:0c:4b:a5:22:59:2a:67:33:
2b:44:98:6d:6e:27:d6:a1:5e:5d:79:0e:73:3b:13:
62:b4:06:8f:28:fd:82:99:3c:c5:42:5d:74:13:67:
ad:dc:9b:0c:52:41:70:f7:0b:eb:9d:d4:36:fd:81:
b4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A0:67:5C:94:13:1C:7A:5E:71:6B:88:80:29:F0:59:DC:84:B5:54
X509v3 Authority Key Identifier:
keyid:09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b3:77:24:6d:db:e0:1a:3e:26:8b:01:d9:3e:d8:cf:8b:41:
10:5b:d3:b4:4a:b0:c0:1d:92:c2:5b:7d:e6:f9:9f:5f:5e:a6:
f2:1a:4c:49:fd:4c:41:a0:97:7d:17:fc:2c:3b:b8:26:71:da:
8b:01:e6:cc:91:c0:1b:74:e7:2f:d3:5b:a7:d1:e7:7c:46:d5:
de:9b:d9:33:0f:de:45:e7:87:c4:88:5a:3e:a1:ee:7c:45:6b:
53:2b:77:93:a1:e5:ad:ad:5c:f5:fb:d1:f6:47:b4:79:a7:d4:
e8:bc:00:c9:ed:b4:38:1a:99:fe:01:62:63:bd:ec:5d:87:b9:
d2:f1:5c:9e:2a:18:eb:04:70:4a:4e:6a:e0:4f:32:b2:7d:88:
d5:b8:83:72:28:9c:f9:47:bc:95:65:4b:f3:75:2b:b5:83:a4:
8c:ce:1b:96:6f:3d:05:6d:5c:7a:a7:3f:cc:96:51:d8:97:06:
e2:99:69:0a:6e:73:77:d0:08:6e:55:75:e9:ca:1c:c4:4a:c0:
c2:c5:45:33:d3:5a:d5:9e:f0:ab:22:d7:ab:6e:22:02:19:c8:
3a:25:68:5b:3f:31:29:99:46:c4:5c:6b:81:fc:34:c6:56:4b:
ba:8b:25:7e:92:4d:b1:fc:55:89:23:22:a4:71:f2:da:db:1f:
56:42:7c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:56:02 2026 by rpki-client