Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
File: CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft (raw, json)
Hash identifier: KoGMLyrbLTFjbTkgiwVHQ/RIUeB7ndoQgqHCL3pt5U0=
Subject key identifier: 28:B5:93:E5:53:E1:FF:84:2A:F5:8E:43:68:D8:46:29:BB:60:E2:7C
Authority key identifier: 08:F2:34:56:3B:E9:59:82:2D:F4:2F:8D:72:74:FE:54:7C:0B:2F:05
Certificate issuer: /CN=08f234563be959822df42f8d7274fe547c0b2f05
Certificate serial: 019E1EA37C96AC770C7A8EE31DBA9DAEDD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
Manifest number: 029F
Signing time: Wed 13 May 2026 00:01:31 +0000
Manifest this update: Wed 13 May 2026 00:01:31 +0000
Manifest next update: Thu 14 May 2026 00:01:31 +0000
Files and hashes: 1: CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl (hash: fQCL8eFhLJXexrMLIvS/26zh88fznFkGSdT0VStbbTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:7c:96:ac:77:0c:7a:8e:e3:1d:ba:9d:ae:dd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f234563be959822df42f8d7274fe547c0b2f05
Validity
Not Before: May 13 00:01:31 2026 GMT
Not After : May 14 00:01:31 2026 GMT
Subject: CN=28b593e553e1ff842af58e4368d84629bb60e27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8a:4e:95:ad:82:ae:b9:2c:c4:63:3f:b9:ea:
e0:3f:26:14:18:cc:cf:9f:88:ad:50:d7:7a:2a:17:
47:f1:dd:a5:be:4c:06:99:ed:2e:32:64:94:3c:ea:
4f:09:69:00:c8:a6:d8:7b:e1:3d:81:1f:54:6a:33:
1b:9f:0a:c5:e4:4d:08:62:12:47:0e:af:c5:22:84:
45:49:cd:a2:e1:73:bb:50:f9:8a:5a:ff:f4:8b:68:
e9:3a:33:43:be:7d:b5:f0:a6:7d:d0:b3:be:d4:1f:
38:b7:5b:55:8d:0f:50:3b:2f:cf:78:7f:48:ab:a7:
06:a7:36:6e:cc:1f:c4:93:d5:2d:70:71:e1:73:05:
ab:d3:33:96:a6:26:1e:cc:d7:3e:8c:db:b7:ad:4b:
a6:5f:a9:3e:f7:5a:8f:35:62:fd:dd:8a:4e:84:0e:
44:4a:ff:52:e0:db:80:ad:ef:7a:de:67:b8:80:6f:
45:ef:37:45:1c:31:b4:2d:0c:de:7c:c4:e6:1f:97:
d8:fa:32:17:a6:f1:2e:10:f2:88:22:2e:2e:93:5d:
17:28:6e:e6:af:d3:3f:b8:37:59:83:a2:77:d0:d9:
d4:aa:10:90:f9:fa:3f:47:f5:5c:dd:23:c4:fa:e3:
64:96:91:21:a0:39:3b:30:ba:34:a9:93:1a:7a:67:
52:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B5:93:E5:53:E1:FF:84:2A:F5:8E:43:68:D8:46:29:BB:60:E2:7C
X509v3 Authority Key Identifier:
keyid:08:F2:34:56:3B:E9:59:82:2D:F4:2F:8D:72:74:FE:54:7C:0B:2F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:48:77:d3:bd:ac:09:5c:e5:cc:ce:46:5e:42:11:71:dc:40:
cd:95:b2:a3:81:7d:d6:ba:4e:b1:cd:88:82:5d:c2:e8:ca:8b:
a9:58:9a:db:87:7b:87:8c:5a:3d:39:a5:ce:d3:c2:f0:9d:43:
48:00:fb:b8:0d:7d:49:88:f1:3e:d9:65:4f:4d:69:24:69:34:
cd:e0:c1:df:b9:07:fa:8c:9c:70:65:68:da:4d:3d:25:12:82:
99:a5:56:18:f3:95:34:05:c8:e1:fc:d0:71:ce:02:75:46:30:
35:d5:82:5e:66:4d:75:23:6f:ae:55:f1:61:9d:2f:e4:20:9d:
9c:0b:8e:6a:fe:a7:48:58:b8:00:9a:4a:aa:80:5f:e6:20:b8:
38:5c:91:02:02:e7:21:74:d9:7a:d8:6c:89:a1:72:0d:55:2e:
28:a3:42:82:c2:e7:15:54:10:aa:72:8b:47:7a:81:69:c7:65:
41:33:9b:27:90:05:b7:fe:8c:2b:1f:83:c7:b2:a1:78:87:5b:
c1:28:2a:f9:bf:4f:37:8c:ea:38:c2:fc:1a:72:2d:99:0f:0e:
3b:81:fd:51:1b:07:1d:69:cb:2f:89:f5:51:2a:8a:8f:f9:f6:
a7:5e:fd:f6:ce:e9:36:27:3e:f9:c4:f5:9f:80:bc:19:14:6b:
4d:c4:89:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo3yWrHcMeo7jHbqdrt08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZjIzNDU2M2JlOTU5ODIyZGY0MmY4ZDcyNzRmZTU0N2Mw
YjJmMDUwHhcNMjYwNTEzMDAwMTMxWhcNMjYwNTE0MDAwMTMxWjAzMTEwLwYDVQQD
EygyOGI1OTNlNTUzZTFmZjg0MmFmNThlNDM2OGQ4NDYyOWJiNjBlMjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYpOla2CrrksxGM/uergPyYUGMzP
n4itUNd6KhdH8d2lvkwGme0uMmSUPOpPCWkAyKbYe+E9gR9UajMbnwrF5E0IYhJH
Dq/FIoRFSc2i4XO7UPmKWv/0i2jpOjNDvn218KZ90LO+1B84t1tVjQ9QOy/PeH9I
q6cGpzZuzB/Ek9UtcHHhcwWr0zOWpiYezNc+jNu3rUumX6k+91qPNWL93YpOhA5E
Sv9S4NuAre963me4gG9F7zdFHDG0LQzefMTmH5fY+jIXpvEuEPKIIi4uk10XKG7m
r9M/uDdZg6J30NnUqhCQ+fo/R/Vc3SPE+uNklpEhoDk7MLo0qZMaemdS6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCi1k+VT4f+EKvWOQ2jYRim7YOJ8MB8GA1UdIwQY
MBaAFAjyNFY76VmCLfQvjXJ0/lR8Cy8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1BJMFZqdnBXWUl0OUMtTmNuVC1WSHdMTHdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xMzM3YmItYjVmNi00NjhmLWI5NmEt
NjNmZTcyNjViNzE4LzEvQ1BJMFZqdnBXWUl0OUMtTmNuVC1WSHdMTHdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8xMzM3YmItYjVmNi00NjhmLWI5NmEtNjNmZTcyNjViNzE4
LzEvQ1BJMFZqdnBXWUl0OUMtTmNuVC1WSHdMTHdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkh3072s
CVzlzM5GXkIRcdxAzZWyo4F91rpOsc2Igl3C6MqLqVia24d7h4xaPTmlztPC8J1D
SAD7uA19SYjxPtllT01pJGk0zeDB37kH+oyccGVo2k09JRKCmaVWGPOVNAXI4fzQ
cc4CdUYwNdWCXmZNdSNvrlXxYZ0v5CCdnAuOav6nSFi4AJpKqoBf5iC4OFyRAgLn
IXTZethsiaFyDVUuKKNCgsLnFVQQqnKLR3qBacdlQTObJ5AFt/6MKx+Dx7KheIdb
wSgq+b9PN4zqOML8GnItmQ8OO4H9URsHHWnLL4n1USqKj/n2p1799s7pNic++cT1
n4C8GRRrTcSJ2Q==
-----END CERTIFICATE-----
Generated at Wed May 13 07:24:54 2026 by rpki-client