Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
File: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft (raw, json)
Hash identifier: lbufpDo/+nSsfd39JVqkxU5CZEnXVpF7oACzaiiHDYU=
Subject key identifier: CB:37:05:AE:EA:98:DE:C6:33:0A:C8:2C:35:D1:6A:24:91:60:40:68
Authority key identifier: 08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
Certificate issuer: /CN=08f2eb8fb02e87e7184337b245af99e3133ef524
Certificate serial: 019D25F0F7D264A7C0DF46D23CD100C766AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 17:00:42 +0000
Manifest this update: Wed 25 Mar 2026 17:00:42 +0000
Manifest next update: Thu 26 Mar 2026 17:00:42 +0000
Files and hashes: 1: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl (hash: 8xFElYozYOitrHJ9MgZGInVLLU6Aekr/wwcJ2mibAHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:f7:d2:64:a7:c0:df:46:d2:3c:d1:00:c7:66:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f2eb8fb02e87e7184337b245af99e3133ef524
Validity
Not Before: Mar 25 17:00:42 2026 GMT
Not After : Mar 26 17:00:42 2026 GMT
Subject: CN=cb3705aeea98dec6330ac82c35d16a2491604068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fe:d8:f3:70:40:e8:c5:4e:a7:38:2f:59:74:
6a:02:12:8b:d5:d4:96:5e:68:dd:b7:c1:b3:54:3a:
d6:ce:ab:fc:e7:a5:0e:9a:d7:a0:45:26:2b:a7:52:
5e:60:0f:55:5a:ef:1a:fb:48:c9:f3:48:4f:6a:6b:
20:7d:58:41:58:74:33:48:e1:4c:af:36:92:91:a2:
64:55:ab:b6:6b:c8:a8:73:ba:43:09:2b:9e:77:92:
7b:22:cd:cd:7c:52:87:09:35:07:75:66:22:66:75:
a5:58:42:71:bc:88:e4:03:13:da:ee:94:f1:2c:b5:
69:c8:35:38:7c:79:ca:80:7e:f4:57:ed:a6:2b:20:
65:dd:9f:de:89:a3:9d:bc:d1:72:5f:92:6c:80:ea:
16:d2:8b:a2:08:48:15:ca:a3:6a:fa:80:fa:eb:81:
3e:2d:3e:f3:fc:e7:1c:0a:6c:15:88:2b:ab:72:5e:
b3:2a:60:20:c7:63:6a:93:35:53:1e:7a:79:70:bd:
ec:50:2e:9c:b2:02:59:3e:94:3e:de:2b:ce:44:b8:
37:20:75:1c:f1:de:e1:22:ef:0b:cc:e0:4b:25:1e:
6f:e9:2a:e0:d1:22:ef:c3:8e:0d:db:08:c5:f6:d5:
36:8f:3c:07:ab:48:e6:f4:26:d1:d0:9b:de:06:80:
0f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:37:05:AE:EA:98:DE:C6:33:0A:C8:2C:35:D1:6A:24:91:60:40:68
X509v3 Authority Key Identifier:
keyid:08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:70:94:fc:ca:27:5d:4e:59:ea:b1:99:32:bd:ab:da:f4:56:
37:5a:99:e0:ab:d4:f3:97:86:03:de:bf:28:bd:49:f5:44:74:
d3:b2:c2:29:83:bb:26:eb:c0:1b:29:d2:73:8f:78:28:a6:73:
6a:ea:0c:50:12:77:06:54:fc:59:17:8f:14:d1:96:95:cb:d4:
43:9e:de:fc:63:25:a1:75:ca:75:84:d6:1f:c7:35:0b:01:ac:
84:e5:2d:9f:b7:3d:72:cb:44:12:1c:4f:d9:e0:b9:65:db:16:
ce:df:1c:7f:96:7e:82:83:b2:ab:64:ec:c0:fa:70:26:d2:18:
a8:39:f3:27:b1:85:b4:b1:4c:32:8e:1a:df:48:4d:4a:73:20:
ac:6a:d9:98:43:e3:e9:c2:03:9d:82:66:72:e8:da:ac:93:f4:
75:ce:88:36:47:bb:2e:0c:21:bf:55:36:55:70:58:9b:55:99:
67:77:75:83:17:90:f8:12:b7:ef:9e:66:7c:c7:e2:f5:9a:5f:
29:f1:91:ac:3c:27:6c:5c:14:f8:63:50:06:c5:ea:98:75:75:
fe:a4:23:e8:d4:41:b2:0f:a7:e3:5c:a7:21:12:fe:b2:43:ca:
c0:b4:79:cd:25:89:92:95:71:8f:f1:87:b7:13:00:d3:6a:7a:
1c:b6:32:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8PfSZKfA30bSPNEAx2atMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZjJlYjhmYjAyZTg3ZTcxODQzMzdiMjQ1YWY5OWUzMTMz
ZWY1MjQwHhcNMjYwMzI1MTcwMDQyWhcNMjYwMzI2MTcwMDQyWjAzMTEwLwYDVQQD
EyhjYjM3MDVhZWVhOThkZWM2MzMwYWM4MmMzNWQxNmEyNDkxNjA0MDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/7Y83BA6MVOpzgvWXRqAhKL1dSW
Xmjdt8GzVDrWzqv856UOmtegRSYrp1JeYA9VWu8a+0jJ80hPamsgfVhBWHQzSOFM
rzaSkaJkVau2a8ioc7pDCSued5J7Is3NfFKHCTUHdWYiZnWlWEJxvIjkAxPa7pTx
LLVpyDU4fHnKgH70V+2mKyBl3Z/eiaOdvNFyX5JsgOoW0ouiCEgVyqNq+oD664E+
LT7z/OccCmwViCurcl6zKmAgx2NqkzVTHnp5cL3sUC6csgJZPpQ+3ivORLg3IHUc
8d7hIu8LzOBLJR5v6Srg0SLvw44N2wjF9tU2jzwHq0jm9CbR0JveBoAPVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMs3Ba7qmN7GMwrILDXRaiSRYEBoMB8GA1UdIwQY
MBaAFAjy64+wLofnGEM3skWvmeMTPvUkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1BMcmo3QXVoLWNZUXpleVJhLVo0eE0tOVNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NWVhNDgtYzNlZC00ZTQ3LWJkMTIt
NmNkZWNkNGRiOGI1LzEvQ1BMcmo3QXVoLWNZUXpleVJhLVo0eE0tOVNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC85NWVhNDgtYzNlZC00ZTQ3LWJkMTItNmNkZWNkNGRiOGI1
LzEvQ1BMcmo3QXVoLWNZUXpleVJhLVo0eE0tOVNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANnCU/Mon
XU5Z6rGZMr2r2vRWN1qZ4KvU85eGA96/KL1J9UR007LCKYO7JuvAGynSc494KKZz
auoMUBJ3BlT8WRePFNGWlcvUQ57e/GMloXXKdYTWH8c1CwGshOUtn7c9cstEEhxP
2eC5ZdsWzt8cf5Z+goOyq2TswPpwJtIYqDnzJ7GFtLFMMo4a30hNSnMgrGrZmEPj
6cIDnYJmcujarJP0dc6INke7Lgwhv1U2VXBYm1WZZ3d1gxeQ+BK3755mfMfi9Zpf
KfGRrDwnbFwU+GNQBsXqmHV1/qQj6NRBsg+n41ynIRL+skPKwLR5zSWJkpVxj/GH
txMA02p6HLYygQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:10 2026 by rpki-client