Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File: CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier: NlATRM4g7HUa1loZQXUULL4zwRr9l5P+joOPWPt/SSA=
Subject key identifier: 8B:F7:93:07:F6:D6:71:44:72:5F:70:C3:84:10:B3:B4:B6:9A:EA:F4
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial: 019F9022B15128F8EDA372C21117529AA35A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number: 0936
Signing time: Thu 23 Jul 2026 18:00:20 +0000
Manifest this update: Thu 23 Jul 2026 18:00:20 +0000
Manifest next update: Fri 24 Jul 2026 18:00:20 +0000
Files and hashes: 1: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: 2T3poxjgNaiJFWGRSsSzspb30wsEmX7nZNZ+REmB8zw=)
2: u8VLd__LhC89PUm-bBou8g1XjCk.roa (hash: FAOfHdJRje+Re0ts4CPoL2wF4WdKlrbROQeiewEd2a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:b1:51:28:f8:ed:a3:72:c2:11:17:52:9a:a3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Validity
Not Before: Jul 23 18:00:20 2026 GMT
Not After : Jul 24 18:00:20 2026 GMT
Subject: CN=8bf79307f6d67144725f70c38410b3b4b69aeaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:0e:c3:1e:73:5e:79:1e:ff:6d:f9:c3:00:
63:bf:ce:95:d4:1b:7b:96:7e:ee:83:d1:00:d3:b9:
f9:dd:37:c9:7e:9f:28:ce:92:ae:b8:82:49:c6:33:
f5:fb:76:a7:bd:7a:62:3e:e4:42:a8:4b:0a:57:fe:
66:29:84:22:2a:30:55:30:88:6c:cd:3a:c6:6d:4b:
de:47:d4:5f:d5:b9:15:a1:e2:46:b7:63:af:dc:77:
1d:9a:bb:a2:0b:2a:86:76:78:33:05:9a:a3:28:62:
76:29:f8:93:4a:0f:ef:2d:28:37:66:75:f9:a7:7e:
6a:c2:b6:71:13:f6:9b:eb:c2:c3:bb:9f:94:62:98:
d3:5b:c9:1b:30:ff:63:96:b9:e0:ad:34:66:15:fc:
43:c1:4f:26:ef:b5:ae:4e:87:14:5e:42:4f:c8:38:
aa:fa:c5:b9:8c:02:6b:f6:f7:12:01:24:4a:a7:57:
88:dd:4c:42:dd:3f:f9:0b:ca:52:72:40:aa:eb:14:
40:e6:8b:5d:18:5f:5c:0f:54:a2:e2:80:a9:81:28:
b3:08:8f:b2:b3:94:80:93:91:97:86:66:de:80:18:
19:e7:a3:ef:84:78:e3:18:a5:17:a1:99:b1:aa:44:
2b:c3:8a:6d:20:64:db:4e:c2:57:24:7e:0a:f8:73:
8c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F7:93:07:F6:D6:71:44:72:5F:70:C3:84:10:B3:B4:B6:9A:EA:F4
X509v3 Authority Key Identifier:
keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:22:3f:02:b4:4f:9d:fc:d6:70:97:3d:a8:16:8a:ec:9f:1a:
24:1f:e1:f1:3b:49:5e:ec:ce:8b:85:4f:ca:56:3b:2c:20:7d:
a1:7d:37:e1:d5:ec:b9:05:3f:e1:ad:15:da:8d:ac:e4:5b:b1:
6e:be:96:78:24:0e:b8:9e:5d:61:dd:e3:58:77:60:7d:a9:0a:
02:34:80:61:78:29:72:0e:14:cc:69:e9:ed:55:f6:53:e0:a9:
57:c9:db:bd:de:a2:27:50:e4:78:e6:81:36:bd:19:53:b0:d4:
a6:c6:72:11:a6:bf:ea:d2:32:97:08:c7:32:39:7e:1d:0e:f0:
78:be:44:4b:b7:51:4e:b5:f8:50:8b:76:8e:49:f4:c6:c7:5f:
8a:4f:89:e2:e4:d5:ce:38:1a:0d:a9:36:5a:16:80:f3:d3:29:
df:79:f5:06:8b:d9:32:95:de:86:5e:a0:21:b1:a5:12:db:da:
0a:9d:c0:7c:87:88:95:5a:7c:8f:ef:24:76:83:ba:2f:32:82:
71:8c:4b:cd:60:27:1d:a0:4b:32:08:c3:06:0b:2a:f5:3b:12:
5b:0a:32:cc:3f:f1:8b:de:15:91:d6:73:ac:b4:fa:e8:32:0f:
de:85:89:69:be:15:13:3d:dc:a1:28:9c:91:49:83:06:d4:05:
30:aa:44:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:24 2026 by rpki-client