
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
File: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft (raw, json)
Hash identifier: POmEmMOXMgXJInJJxHRl6qOqLwUDdCZddmRDMZxpU0k=
Subject key identifier: 56:50:C0:99:21:AE:0E:12:35:69:19:B5:50:F5:BA:6B:BF:0D:38:4C
Authority key identifier: 08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
Certificate issuer: /CN=08f2eb8fb02e87e7184337b245af99e3133ef524
Certificate serial: 019E1D22E767A10D8A6FD96CFBF81E819C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
Manifest number: 1903
Signing time: Tue 12 May 2026 17:01:27 +0000
Manifest this update: Tue 12 May 2026 17:01:27 +0000
Manifest next update: Wed 13 May 2026 17:01:27 +0000
Files and hashes: 1: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl (hash: BNG3L8jAgrLVKZHqTG3LFt7pDVTS9q1U/WZBitoRqak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:e7:67:a1:0d:8a:6f:d9:6c:fb:f8:1e:81:9c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f2eb8fb02e87e7184337b245af99e3133ef524
Validity
Not Before: May 12 17:01:27 2026 GMT
Not After : May 13 17:01:27 2026 GMT
Subject: CN=5650c09921ae0e12356919b550f5ba6bbf0d384c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:af:e0:2f:72:33:2d:53:fa:6e:b2:ab:02:7a:
6d:3d:f3:50:35:fe:2d:e5:ae:d7:9e:b9:6e:a3:54:
3a:eb:25:a5:f3:1d:43:db:a1:5f:28:df:bb:d0:c8:
67:18:2d:94:f2:23:92:fd:f2:cc:be:dd:d7:6c:7e:
4d:dd:43:97:28:b1:fe:76:8d:a1:b7:a0:f1:50:83:
41:85:94:01:ac:7e:b4:8e:58:d2:3c:6a:31:72:94:
66:91:67:b6:e4:68:ff:1e:6d:f6:d4:2e:0b:e1:6b:
c2:37:6c:7b:99:e3:1b:6b:db:08:7a:51:18:52:51:
90:5f:8a:6b:6b:76:f9:02:ff:b9:7c:a5:3b:56:fe:
ed:20:a3:40:27:cc:5f:1d:16:e4:80:93:a7:a5:c2:
1c:33:5b:19:6d:90:7c:87:48:47:87:31:a9:24:f2:
b1:77:e9:04:50:54:d4:50:b8:f7:3e:51:e7:98:9f:
0a:01:ca:dc:b2:f6:a8:c8:80:ef:8d:1c:a5:40:3d:
62:76:a7:41:24:13:40:48:5d:ea:af:94:8d:b5:bb:
2a:12:a8:08:9d:4a:41:f5:ea:d2:eb:b3:86:4e:72:
1c:69:1a:01:89:35:66:8d:5b:a8:f3:36:04:36:8d:
aa:bd:02:04:6d:4f:13:bc:cb:1a:e4:fd:3f:c6:94:
07:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:50:C0:99:21:AE:0E:12:35:69:19:B5:50:F5:BA:6B:BF:0D:38:4C
X509v3 Authority Key Identifier:
keyid:08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:66:2e:f2:ed:8e:50:11:4b:66:42:30:2f:b0:3d:d3:ab:43:
f8:0f:bb:e1:5e:a3:37:3a:80:1a:cf:35:fb:19:ed:e3:b9:be:
f8:62:ba:07:a0:56:80:cb:10:a3:43:b3:03:66:ff:cc:5e:bd:
e9:da:3f:81:d3:ee:2d:41:ae:d2:29:08:ec:a7:6b:d9:79:20:
ef:2e:5e:68:a6:95:03:4e:3d:20:e2:65:5e:64:97:b3:44:99:
32:2a:53:09:5a:fd:4f:14:b8:86:59:d9:5b:68:f6:2e:3d:ec:
5c:23:4d:e6:5b:6c:e3:13:6f:a5:ea:ba:e3:67:b4:8d:93:43:
c5:d2:90:21:52:61:f8:41:ed:58:4a:5f:35:1f:80:e7:e5:b7:
fc:bf:c9:c0:3d:6e:05:43:5e:10:3b:39:48:cf:90:8e:2e:96:
f1:b2:82:9d:5b:18:98:66:2b:b9:71:34:9b:dc:e3:a3:35:f9:
e0:15:4e:5b:f8:21:32:fa:9c:52:27:f6:b2:40:9c:bc:c7:81:
a2:2b:51:9b:86:f5:b3:27:97:8f:94:fb:39:15:9b:40:41:b7:
e7:68:3f:f1:ea:46:20:ef:0e:26:56:ac:5e:b2:c9:9e:61:c8:
77:8f:74:d9:0d:7d:4d:ff:95:f6:40:f3:01:91:bb:30:f7:ed:
67:3d:ed:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:49:37 2026 by rpki-client