Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
File: Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft (raw, json)
Hash identifier: QPIJIPWyDqp1Z1br6HfGnMtYNtoRLp0T7v/qMNuDGGE=
Subject key identifier: 0C:91:2E:88:87:66:D9:CB:BB:1B:66:25:7C:0F:EA:D1:16:F0:EE:DA
Authority key identifier: 09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
Certificate issuer: /CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Certificate serial: 019F905A617BCB05A560B1BE8F3CF469BC20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 19:01:09 +0000
Manifest this update: Thu 23 Jul 2026 19:01:09 +0000
Manifest next update: Fri 24 Jul 2026 19:01:09 +0000
Files and hashes: 1: Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl (hash: 0sPf0d42fyrS6ZIy6vscDoBe4537XcJR9FMHFG82FLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:61:7b:cb:05:a5:60:b1:be:8f:3c:f4:69:bc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Validity
Not Before: Jul 23 19:01:09 2026 GMT
Not After : Jul 24 19:01:09 2026 GMT
Subject: CN=0c912e888766d9cbbb1b66257c0fead116f0eeda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:ab:b9:f0:cf:38:63:a7:2d:1b:51:79:e0:
71:47:ad:68:8b:9e:c3:04:39:3b:47:d5:29:65:b6:
ad:38:a6:69:67:91:c2:17:50:0d:b0:1d:12:3d:53:
c4:b2:ba:69:0e:79:cb:15:2a:f2:eb:b9:1e:8c:9e:
1e:1c:5b:0e:b6:4e:8b:11:1a:f6:d0:ca:dc:75:ab:
f7:45:0e:dd:8f:5f:19:52:75:5f:fd:17:a0:4f:4d:
0d:f0:9e:ad:8e:e4:e2:73:a4:b7:5e:91:51:f2:96:
d3:c7:91:d1:2f:f4:95:37:cc:2b:df:f9:9f:bc:ff:
fe:89:a8:90:e6:de:d4:f1:d5:6b:29:be:b8:bb:61:
e6:bf:30:13:89:fa:73:1e:f6:fe:55:fb:f6:c8:59:
44:a8:84:6c:2b:32:90:b7:e0:3a:1f:16:41:53:0e:
dd:c3:d1:50:23:06:18:bf:01:31:fd:a1:aa:d8:f9:
86:50:21:8b:56:e0:a2:89:7a:9c:6f:ae:86:58:0c:
62:69:fe:69:4f:b2:8d:09:f7:9c:64:a3:e8:01:1d:
4a:7f:a0:54:21:84:3c:d0:2e:83:ee:76:80:ab:9f:
5f:40:a6:a0:c1:85:78:0c:21:b2:54:3e:6d:35:92:
d7:a3:17:cb:ff:e1:40:c6:2d:2d:15:fb:b5:c2:c1:
84:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:91:2E:88:87:66:D9:CB:BB:1B:66:25:7C:0F:EA:D1:16:F0:EE:DA
X509v3 Authority Key Identifier:
keyid:09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:fc:71:a9:22:c7:18:5c:3c:71:0f:0d:fb:6b:42:e9:ec:82:
74:42:12:47:95:27:89:b5:8b:d0:86:a9:6b:7c:8c:96:fd:5e:
fb:8b:84:22:55:d5:70:58:7a:2c:ed:a2:94:23:99:28:0d:4a:
d8:55:d2:7a:be:64:ba:77:b1:ac:55:54:f4:92:a9:b7:b1:8e:
99:bc:fe:d8:f6:18:29:93:01:0c:ec:07:2e:67:0d:cd:57:c5:
0a:02:e8:23:db:3a:36:1a:18:b8:ef:8e:b3:53:15:95:e5:bc:
42:af:8c:76:f3:04:3f:e4:54:89:3a:55:fc:28:11:28:06:05:
ee:1c:63:8c:61:46:63:f1:96:45:e0:59:ba:4a:76:97:75:19:
e2:a8:d8:b8:f5:94:82:30:1f:d8:b5:c5:20:28:83:98:17:ec:
f4:15:b7:fc:51:65:b0:4b:1d:3b:7f:14:65:95:18:78:e8:5d:
84:6d:93:bb:fa:f4:34:b6:31:39:3f:2b:e0:ab:cc:ce:39:34:
a3:92:d2:0b:47:28:90:de:ed:38:82:d3:64:63:46:01:bc:42:
a6:9b:0c:3e:28:4a:50:5c:c4:07:98:6e:15:86:50:a2:c8:b9:
e2:c1:02:5b:7d:a2:af:9f:23:e4:9c:5e:63:7a:d3:19:ac:04:
d9:b6:de:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:35:37 2026 by rpki-client