Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File: CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier: VbJYmtXWno5tx3CJeP8RmuBPVd3ito5gbAWWvjymtJA=
Subject key identifier: D8:1B:F8:9F:2A:6F:F8:EB:EE:22:12:03:EC:E0:9E:65:0D:B5:0B:E4
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial: 01A1DF15572E68242FB1F40611F72DA68E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number: 0A68
Signing time: Sun 15 Nov 2026 12:01:20 +0000
Manifest this update: Sun 15 Nov 2026 12:01:20 +0000
Manifest next update: Mon 16 Nov 2026 12:01:20 +0000
Files and hashes: 1: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: Fb4d+ilDsbFFFLm3wotgV9R7v95htJF5mMJAONL9G1Q=)
2: u8VLd__LhC89PUm-bBou8g1XjCk.roa (hash: FAOfHdJRje+Re0ts4CPoL2wF4WdKlrbROQeiewEd2a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:57:2e:68:24:2f:b1:f4:06:11:f7:2d:a6:8e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Validity
Not Before: Nov 15 12:01:20 2026 GMT
Not After : Nov 16 12:01:20 2026 GMT
Subject: CN=d81bf89f2a6ff8ebee221203ece09e650db50be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a0:0f:71:46:47:42:76:92:f1:22:30:da:51:
77:d3:cf:94:e7:b6:70:fd:a4:a0:5b:8c:04:89:81:
87:50:de:1b:a8:27:b2:3f:a2:ad:d5:fa:ec:f6:82:
82:89:82:1d:df:7a:9e:f5:7e:de:1b:e9:c1:50:57:
dc:6e:14:6c:e4:d2:39:61:8e:6d:8d:40:da:a0:21:
2f:6f:2c:af:8f:b2:f3:f1:2a:cb:4c:28:0f:af:51:
50:eb:4f:48:3e:41:24:5b:f1:4b:bb:53:05:6b:bd:
37:43:98:f7:35:2c:81:1f:8c:28:52:a6:cf:9a:cc:
2a:36:1d:94:68:42:6d:8f:fa:ef:1f:0e:02:fd:99:
b1:0c:71:8f:cb:d2:ee:3a:ca:95:9b:a0:88:db:cd:
a9:cc:05:19:a6:a6:52:b6:9f:bb:aa:6d:64:8d:af:
e3:ba:a2:4b:49:c5:7d:0d:08:fe:85:75:5e:a4:39:
9e:8c:0f:21:59:28:40:33:e8:e9:bc:d0:ba:60:a1:
e6:a0:9a:25:5c:cc:d0:f8:6a:c4:f3:9e:55:3b:03:
13:08:08:8c:ae:ff:f4:27:31:92:a4:08:21:17:67:
ee:66:1c:0c:10:95:2f:d1:67:8e:eb:57:9d:44:34:
9c:eb:c3:8a:61:af:3e:09:e5:9c:aa:00:65:ea:d7:
34:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1B:F8:9F:2A:6F:F8:EB:EE:22:12:03:EC:E0:9E:65:0D:B5:0B:E4
X509v3 Authority Key Identifier:
keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:29:1f:d5:24:3e:51:e3:b6:e1:1e:31:76:94:5a:53:aa:3a:
98:c8:1c:95:ce:3d:64:1f:10:18:58:f1:31:8a:2c:03:bb:53:
72:76:7f:95:a7:f5:be:d3:8a:d0:1a:f9:65:cc:22:1c:3a:65:
b0:6d:31:29:42:28:f8:63:ab:7e:33:0c:69:a9:18:72:4a:e3:
8e:4f:b0:83:cb:0b:78:76:3e:69:d9:d9:af:0e:01:2d:9e:63:
5d:1a:bb:2d:ca:eb:32:1d:11:9f:60:86:c1:73:a5:e4:ad:97:
df:db:d3:f1:d3:09:32:3e:40:0d:95:b5:10:f6:e1:a1:05:e9:
e8:38:62:95:70:7b:75:d4:90:fa:a7:1a:14:7b:3f:59:99:68:
64:4a:5f:fe:13:b9:27:c8:e6:6d:32:d7:51:b7:79:49:d0:cc:
57:bf:3d:dc:b3:b1:12:98:da:f7:08:c5:05:5f:62:6e:e3:7a:
57:16:7b:3b:c1:10:f6:bd:e0:d9:63:28:a3:5c:ae:e9:27:48:
41:3c:7d:1d:4b:86:ea:39:60:09:d6:24:32:47:d6:1b:cf:e9:
04:27:b0:ac:d0:e9:ab:8d:18:94:ab:02:bb:ba:50:dd:64:c5:
2c:cd:8f:bf:7c:9d:74:44:4c:5d:8e:8d:fc:f6:56:b9:51:d9:
0b:3b:9e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:24:19 2026 by rpki-client