Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
File: CNXrapaGTfosUbLiVsUYCrkiKc0.mft (raw, json)
Hash identifier: Jh30KuS0rqTvRQXguZ4LHbUu+sfkZApuLXArdC8/CJQ=
Subject key identifier: D6:CD:A7:A7:B9:79:99:A6:A9:68:18:C7:E5:85:C1:7F:D9:94:BB:62
Authority key identifier: 08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
Certificate issuer: /CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Certificate serial: 019E1D224C9A7C91247278D37761EF14D004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
Manifest number: 05FB
Signing time: Tue 12 May 2026 17:00:47 +0000
Manifest this update: Tue 12 May 2026 17:00:47 +0000
Manifest next update: Wed 13 May 2026 17:00:47 +0000
Files and hashes: 1: CNXrapaGTfosUbLiVsUYCrkiKc0.crl (hash: PwiAypIV7Glxk2yOm4NM2VVBiZ1YpkpVoM1SGFmFZZc=)
2: tbvYOvb5SVTVJR3EbU70Kzk3qVo.roa (hash: 4N/4Cs97VSolZG2uH4kNH6VCwjqzoA3qCO8vzH4tvd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:4c:9a:7c:91:24:72:78:d3:77:61:ef:14:d0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Validity
Not Before: May 12 17:00:47 2026 GMT
Not After : May 13 17:00:47 2026 GMT
Subject: CN=d6cda7a7b97999a6a96818c7e585c17fd994bb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1f:ef:17:9b:06:1c:2e:6c:f6:6e:81:e3:48:
04:e3:29:42:e6:7f:d2:f1:4c:28:b6:aa:a9:d1:02:
b2:8d:79:40:d6:a8:1d:cb:64:6f:7b:72:82:5d:07:
34:a2:94:c7:a3:4e:70:90:37:49:73:da:71:9e:39:
e8:91:2b:58:23:2a:d7:77:90:5f:99:b9:23:2d:15:
83:f0:cf:31:d6:a7:d5:b3:41:6c:f9:0a:01:68:83:
2a:8d:aa:bb:af:d6:53:18:2b:bd:4f:72:0f:f4:e6:
84:27:64:d6:25:49:d6:c2:48:b6:34:06:2b:9a:98:
47:25:06:44:41:49:63:31:b1:f4:be:0a:73:69:a4:
21:30:bc:8c:55:82:86:d7:52:be:fd:bd:a1:7e:f4:
22:d6:7e:be:63:cc:13:94:08:3e:b9:f5:70:d2:c7:
d5:fd:d8:8a:18:79:06:20:01:05:1c:de:26:f7:b1:
f9:c7:0a:80:c5:f9:8e:09:49:76:b8:35:03:5e:f8:
3f:30:bf:54:5c:7d:41:49:da:e7:f1:ef:fe:97:fa:
65:b6:17:8e:96:73:55:c1:69:fc:aa:31:b5:55:3d:
dc:f8:ff:cb:9e:1b:4f:f7:86:18:1b:ca:ae:65:cc:
f5:95:2b:6a:cf:99:dc:6e:7b:92:d5:85:e0:2a:80:
34:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CD:A7:A7:B9:79:99:A6:A9:68:18:C7:E5:85:C1:7F:D9:94:BB:62
X509v3 Authority Key Identifier:
keyid:08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:36:18:a8:74:95:0d:ce:f3:b1:85:ff:79:3f:fe:af:69:df:
4b:80:13:f2:bf:b8:9d:5e:bd:9c:69:5b:91:73:66:3b:8f:83:
cc:23:55:0b:85:6f:66:b0:b1:70:97:50:c2:8b:7a:6a:d0:7b:
9e:1e:0d:99:bf:88:b8:28:32:d5:75:45:a3:06:26:a6:3d:25:
78:ca:8b:e5:bb:3c:18:82:7f:b0:76:df:29:bd:fe:b6:5e:9c:
ad:09:9a:aa:47:a3:c6:ac:52:4d:19:51:50:94:39:bb:4c:e9:
23:5e:5e:91:f9:78:2f:be:a8:39:86:1e:9c:26:d2:78:82:cc:
33:43:b8:f3:4c:0a:c6:60:30:20:80:bf:64:00:d5:5c:cc:e2:
17:b4:dc:b8:db:b3:59:dc:0f:34:46:c7:48:b2:66:97:59:dc:
e1:3d:a8:13:fb:0e:56:86:e0:28:11:2d:30:94:08:5a:1f:af:
b8:20:f7:2e:e1:fd:0b:ff:15:95:67:ee:50:10:bd:c4:43:9d:
c5:3b:7e:db:4b:54:10:59:63:18:9a:c6:02:c0:9f:41:7e:ab:
66:4e:91:61:eb:fe:9a:37:b0:68:cb:84:5c:cf:52:f0:32:ab:
3b:8b:3e:6c:5c:9d:1a:18:af:d4:7f:d6:fd:4c:94:81:6d:36:
6c:ef:17:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:37:15 2026 by rpki-client