Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
File: Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft (raw, json)
Hash identifier: kL6pDT86MOw9uzXK+POLT9TeCXnAXWWSfc+5yy5lvIM=
Subject key identifier: 5F:30:E1:41:EE:44:AE:EC:44:0D:18:06:7D:9D:B8:A6:F9:2F:59:D8
Authority key identifier: 09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
Certificate issuer: /CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Certificate serial: 019D284E2213459863375B516BAE3CE12532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 04:01:42 +0000
Manifest this update: Thu 26 Mar 2026 04:01:42 +0000
Manifest next update: Fri 27 Mar 2026 04:01:42 +0000
Files and hashes: 1: Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl (hash: pBf4O0tNWOLeSDAeww3HSuJz7EirqniSgf1sAIEFo+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:22:13:45:98:63:37:5b:51:6b:ae:3c:e1:25:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Validity
Not Before: Mar 26 04:01:42 2026 GMT
Not After : Mar 27 04:01:42 2026 GMT
Subject: CN=5f30e141ee44aeec440d18067d9db8a6f92f59d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ab:84:fe:33:7e:56:62:a7:75:26:87:06:7a:
f5:32:32:23:5e:dc:5e:77:bb:8c:06:aa:9a:0d:7d:
00:fd:fc:3f:14:fa:c4:dd:bb:91:78:27:cf:41:db:
2d:bb:1f:0c:98:8c:e1:e7:95:6e:f6:f7:53:42:49:
4c:dc:f9:6a:10:5f:99:0f:65:7f:75:45:fc:39:a1:
51:f9:f9:2d:0d:d6:bd:d0:97:74:12:4b:fb:8b:b6:
2e:16:04:db:f9:1d:e6:ea:34:4e:18:a6:6a:74:3e:
49:b7:49:57:93:dc:90:af:48:ad:9e:a8:de:88:d2:
ae:01:ed:44:e2:f4:4e:64:29:ad:e4:f9:90:a4:f4:
f2:60:c8:cd:67:fe:97:2c:f1:4b:d6:52:3e:fe:11:
87:a9:85:51:6e:0b:34:a1:bc:cc:cd:a6:f8:9a:08:
af:40:db:db:2e:36:3c:28:0d:93:6b:a1:d7:54:8c:
29:e8:53:10:47:77:bf:b4:bf:d3:68:08:a7:53:8d:
cd:8f:c7:2b:8d:e1:12:66:30:5b:f1:c4:e9:65:2e:
6c:ab:ff:9a:35:19:d5:c1:4f:3c:cf:ad:28:84:7b:
eb:ea:a3:5e:e0:8b:84:f7:33:e1:dc:e0:3e:22:8d:
cf:81:29:c7:3a:f3:9d:ce:27:19:bf:e4:1e:e8:62:
9b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:30:E1:41:EE:44:AE:EC:44:0D:18:06:7D:9D:B8:A6:F9:2F:59:D8
X509v3 Authority Key Identifier:
keyid:09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e9:17:e2:6b:da:97:4a:b2:c7:6c:ac:db:97:7b:ed:cc:74:
15:fe:e2:16:74:fa:32:a9:fc:05:fe:ec:d6:3e:4a:08:8a:9f:
d5:d0:bd:e7:fd:15:dd:88:a6:5d:aa:fc:27:59:b1:e3:70:71:
74:be:15:5e:e7:14:a4:78:f8:37:f7:c2:b0:85:3f:b2:75:ca:
fa:ba:46:96:a8:f3:db:28:9f:da:68:6e:65:36:17:16:4d:7e:
9e:d5:4d:8e:d0:58:64:9c:46:91:0a:ac:67:b6:f6:9d:bc:6f:
7c:6a:ba:de:0b:7d:94:01:a4:85:98:fd:ce:88:d9:20:5e:70:
3d:08:0c:f9:f3:89:96:14:48:e9:08:10:1d:73:17:ea:e1:7f:
5f:85:28:0e:8f:5f:f2:07:54:eb:71:4c:b0:63:1b:9e:6f:45:
17:22:c9:1f:5c:6c:30:21:3c:b0:15:59:3e:ff:0f:63:b1:1b:
9a:60:61:d2:c3:ca:d5:0e:06:da:e1:35:ca:a4:f3:f5:b9:04:
45:19:87:1c:69:c2:c0:83:f8:69:b6:56:f4:3b:fb:96:29:15:
c7:fb:82:30:ed:08:02:01:75:3d:7d:b4:8c:ca:d5:78:3d:1e:
40:1b:c7:29:81:6a:74:7c:8f:bb:d4:9a:60:9d:31:e5:6e:f5:
89:cf:6c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:45 2026 by rpki-client