Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
File: C_08lbYJJ6X2i5lee5eeZoA8EO0.mft (raw, json)
Hash identifier: SLHxuI7oLPj5cc/U0df4JC3oFGx7/ptl2MYeVEtxLMs=
Subject key identifier: 9C:64:48:0E:FA:EF:3C:28:A1:43:8C:DE:65:D6:E5:C5:2D:24:D7:90
Authority key identifier: 0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED
Certificate issuer: /CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed
Certificate serial: 019E1E351708AF24EE7911336B91CD3F6E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
Manifest number: 0CDF
Signing time: Tue 12 May 2026 22:00:56 +0000
Manifest this update: Tue 12 May 2026 22:00:56 +0000
Manifest next update: Wed 13 May 2026 22:00:56 +0000
Files and hashes: 1: C_08lbYJJ6X2i5lee5eeZoA8EO0.crl (hash: CEAxif0djsAIGLw4YLoYpbj1N/dpR8fo/Y1flhEWPCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:17:08:af:24:ee:79:11:33:6b:91:cd:3f:6e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed
Validity
Not Before: May 12 22:00:56 2026 GMT
Not After : May 13 22:00:56 2026 GMT
Subject: CN=9c64480efaef3c28a1438cde65d6e5c52d24d790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:25:b2:bc:cb:41:2f:0b:fe:8b:fb:cb:73:6d:
37:14:df:a4:b7:f2:35:c0:2c:25:d1:6c:6e:69:24:
a5:29:ce:90:bd:3f:8b:b6:19:58:b0:9a:08:67:40:
ed:84:80:58:aa:0b:b3:b3:dc:49:fb:47:cd:72:06:
ab:06:d6:6d:69:94:94:1d:70:1f:0b:d9:07:bc:83:
5b:b7:43:ce:cc:a9:82:f3:b7:d2:6e:f2:aa:5f:a1:
f6:12:c0:23:84:4f:1d:dd:93:45:de:3b:1f:1c:76:
61:94:2b:bc:20:fc:2e:82:2e:e6:71:87:2a:30:2a:
f1:55:d0:c2:eb:df:d6:ce:af:e3:8e:90:f9:98:8f:
24:8b:73:80:7c:6c:6b:5a:56:bd:78:4f:e8:fe:c6:
69:1d:2d:de:f4:30:9c:bd:01:7e:7e:f9:a9:f9:7c:
4f:d4:a7:3c:be:90:ec:13:92:d5:d3:85:c6:fc:6e:
21:18:38:6e:87:b3:0b:4c:e3:62:a4:b8:fc:39:9a:
3d:97:0e:5f:75:7c:2c:e7:44:dc:38:28:6f:25:51:
ed:a2:8b:6a:f5:2b:2a:4a:13:c8:c0:e9:c4:0a:a7:
23:bd:43:8f:f9:1c:10:40:62:41:48:85:aa:22:88:
c9:03:0f:c3:3f:ca:5b:13:8b:b0:da:0b:33:53:d6:
bc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:64:48:0E:FA:EF:3C:28:A1:43:8C:DE:65:D6:E5:C5:2D:24:D7:90
X509v3 Authority Key Identifier:
keyid:0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e6:2b:ff:af:82:de:33:3c:e4:30:f5:ae:81:8f:28:01:d8:
30:ce:c1:a8:df:0c:6a:b9:e8:dc:b9:34:eb:90:4d:15:ed:85:
16:f4:02:67:ac:66:64:2d:ed:63:b0:6f:d2:50:2c:ed:29:6a:
56:91:2d:1b:d2:72:72:87:7c:fe:31:df:c5:ca:14:c5:f1:67:
54:fe:05:2b:ec:de:77:02:38:2e:a0:5e:91:f4:f7:d2:09:29:
e4:cc:56:4c:2d:c1:8d:d6:26:65:80:50:5c:47:db:24:b6:6a:
57:13:c9:56:b4:56:31:f1:eb:90:5f:07:75:d2:41:13:f3:4f:
39:81:85:d9:13:cd:6d:d8:89:70:5e:44:90:e2:1b:51:79:d4:
cc:22:0d:4d:31:d2:1d:a3:46:cb:c8:40:34:ec:b2:ad:33:04:
ba:82:d3:63:8f:ea:63:c0:ac:25:4b:9c:c9:33:f7:2a:ca:b5:
71:b7:87:6b:96:4a:0a:d9:27:97:b6:bb:c2:b0:9f:86:3d:27:
d8:e2:23:d2:2a:2a:a2:46:83:8f:b5:6e:16:46:d1:a2:be:a3:
f2:bf:9f:5b:a1:f6:b7:1b:18:43:9a:62:f8:5b:40:db:93:ae:
98:34:92:e8:67:b0:e9:fd:69:25:47:20:06:3d:db:10:16:84:
ec:44:9d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:18:34 2026 by rpki-client