Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
File: CFl4byJsttSQv7VClOYRp9Uajx4.mft (raw, json)
Hash identifier: 4m/m9n0m4/CYWYbt4k6meYFKqOHHUbWKAAw6qfok2g0=
Subject key identifier: 7C:FC:B8:E2:0C:0B:DA:72:5D:5B:63:3B:69:A7:11:56:A6:1E:B1:97
Authority key identifier: 08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
Certificate issuer: /CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Certificate serial: 019E213690777198DD9C76DB338BF9FAF865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
Manifest number: 190C
Signing time: Wed 13 May 2026 12:01:24 +0000
Manifest this update: Wed 13 May 2026 12:01:24 +0000
Manifest next update: Thu 14 May 2026 12:01:24 +0000
Files and hashes: 1: CFl4byJsttSQv7VClOYRp9Uajx4.crl (hash: 9lMGdpHkNfVpMui10TReEodj+BeAvFoyNGngB2PF8a4=)
2: Ut0-uMPrTscTaYNN4M5f0UoNfFM.roa (hash: Q8bHgGbUawg5ahVwAK4zt6L7o0niif+XBKxRalI2OOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:36:90:77:71:98:dd:9c:76:db:33:8b:f9:fa:f8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Validity
Not Before: May 13 12:01:24 2026 GMT
Not After : May 14 12:01:24 2026 GMT
Subject: CN=7cfcb8e20c0bda725d5b633b69a71156a61eb197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:39:19:45:5b:f7:b4:22:40:99:f6:ce:b9:84:
ef:5d:19:31:19:5e:8f:3b:87:cd:50:6a:6d:35:23:
cd:7b:21:32:91:e3:22:a2:63:9c:5f:73:f6:f1:be:
c9:1c:49:a0:6a:19:79:da:43:95:b4:d5:a0:9e:da:
ca:32:96:a6:f9:8b:85:4c:1f:bd:a1:a5:f3:93:7e:
da:ca:69:45:dc:45:37:cd:79:34:9f:0f:69:c4:90:
af:8f:99:4f:05:25:18:bd:fb:cf:20:57:86:1a:a4:
72:1f:6c:62:07:56:77:86:1d:5c:67:ae:88:7d:7a:
28:86:db:fb:a8:fa:89:de:75:20:c1:e1:08:bc:a9:
6e:7b:e8:20:ab:0d:b0:e2:9c:23:b2:3b:4f:c0:6b:
44:cc:79:fd:9a:82:d1:a9:31:eb:65:16:4b:b5:41:
b3:d0:72:2f:b4:1e:77:e0:07:52:67:52:28:dc:be:
38:b1:f4:56:bb:9c:0e:2c:98:5f:67:cd:f2:92:01:
38:37:ba:30:b3:4e:ca:5d:1f:7c:6f:74:d1:19:27:
2d:ad:9e:22:46:9d:b6:ef:c5:28:b2:b9:0b:df:e1:
ef:f8:09:13:e3:60:95:7a:85:9d:69:57:ea:7c:77:
9d:70:18:6e:fc:12:00:cc:0f:cf:db:b1:8b:68:f8:
35:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FC:B8:E2:0C:0B:DA:72:5D:5B:63:3B:69:A7:11:56:A6:1E:B1:97
X509v3 Authority Key Identifier:
keyid:08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5e:a8:02:88:7a:a4:68:b3:92:56:5a:5d:75:97:f2:f6:99:
8e:3a:0a:6c:e1:9a:74:39:f3:54:0a:88:1b:50:e8:71:2b:21:
1b:c4:05:42:49:19:14:40:c8:e6:78:65:5d:7d:32:15:5c:6a:
22:d1:2f:12:04:f3:b8:31:cd:50:e8:b9:07:2f:5f:0d:53:0a:
dd:ed:ff:8a:39:0c:a5:a3:a5:ce:9f:78:8a:1d:16:2c:df:64:
ee:8a:4b:43:3b:46:92:d2:44:93:2a:10:20:bb:8a:2c:03:09:
b8:3d:9f:8f:6f:d3:bd:82:cd:68:63:76:22:44:10:dc:78:1f:
27:f3:db:11:2a:1d:2d:8f:62:60:35:c9:41:c4:ff:bf:35:b1:
d7:2a:82:ff:22:8a:75:06:9b:e4:ae:58:e0:83:d1:a0:75:b6:
73:0e:0c:05:94:ca:3f:be:af:33:50:fb:a9:f8:05:45:69:c5:
a7:ec:20:92:2f:f7:4a:7f:28:e2:b9:58:01:30:09:55:70:95:
43:fb:2a:67:4c:bb:48:d4:b2:65:4a:c3:fd:b6:b6:95:50:66:
1c:94:2d:93:6a:cd:a9:8b:d0:cc:c4:6c:35:e4:fb:d8:f2:3e:
48:4a:59:79:7e:d3:b8:7d:48:92:4d:e8:b7:51:a1:d9:a0:4c:
82:2d:bf:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:13:33 2026 by rpki-client