Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
File: CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json)
Hash identifier: dCSKoppkluKJjuJ3/zbA+dBvWVSQiIWcvMvBkSVESLY=
Subject key identifier: A3:C3:5E:07:D1:FF:F2:08:6A:06:71:0C:C6:51:99:4C:F7:1A:3D:F4
Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Certificate serial: 019E1D90BB662F36400EAFCB0BDED7451309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 19:01:24 +0000
Manifest this update: Tue 12 May 2026 19:01:24 +0000
Manifest next update: Wed 13 May 2026 19:01:24 +0000
Files and hashes: 1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: nvFi/2SmsjX0QN1InXtrUnFm5XOD8ejMhIYWhE2Vtfw=)
2: pJjdeZuekZ9QTR10eFG7UylmsAs.roa (hash: dPPlwFRB2GTwEhBlEXXi16Mfi1J7v+Uwl/hOty31Xtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:bb:66:2f:36:40:0e:af:cb:0b:de:d7:45:13:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Validity
Not Before: May 12 19:01:24 2026 GMT
Not After : May 13 19:01:24 2026 GMT
Subject: CN=a3c35e07d1fff2086a06710cc651994cf71a3df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:43:ec:2d:14:e0:87:3b:eb:83:ab:69:7f:
9b:ba:6b:e5:91:ce:c5:e9:fc:c1:d4:e1:91:0c:61:
71:40:4b:a0:0a:46:d6:4e:07:01:37:71:d6:66:86:
b1:45:18:ba:0d:b0:22:6e:32:f2:63:26:2b:bf:71:
1d:f6:b5:8b:48:3b:d6:08:af:68:c4:42:be:19:53:
68:0c:ef:26:41:10:2b:6f:ee:ba:ee:18:55:83:0b:
78:27:d1:dd:42:09:63:78:50:9e:0f:53:1a:18:34:
c7:d7:bb:84:13:1d:54:21:dd:f9:2f:01:2c:cc:18:
b0:ad:02:ba:1e:01:d9:cd:6e:a8:d6:d9:b3:ed:0c:
cd:96:36:09:8d:a2:d8:56:4b:a8:c2:b8:f5:81:15:
de:08:dc:f8:5a:b9:d6:8f:46:e0:6b:99:28:53:0a:
5b:46:30:e7:a2:cc:8d:4f:96:f4:bb:d3:dd:f3:11:
5a:71:a5:df:a2:7b:9e:8a:ca:4f:c4:da:84:b8:d8:
1f:de:1b:f1:c2:eb:56:bc:6b:33:11:42:f0:d6:f6:
1c:13:b3:c1:e8:36:26:eb:58:27:0f:ce:0f:c4:89:
2a:f7:88:ed:a1:4b:a6:c5:f7:cf:b9:63:ec:fb:83:
64:2e:11:98:c6:ea:9a:d6:46:9a:7c:9a:0f:af:22:
69:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C3:5E:07:D1:FF:F2:08:6A:06:71:0C:C6:51:99:4C:F7:1A:3D:F4
X509v3 Authority Key Identifier:
keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:57:76:ed:24:fe:10:30:f1:ae:c0:f3:d8:8c:59:20:22:4b:
54:3a:23:90:0a:14:63:65:f2:44:07:e2:81:b3:0d:a4:24:4c:
f4:0d:c5:29:87:39:a6:a5:0f:19:6a:09:f2:c2:94:bf:7d:07:
e5:64:31:f3:a5:9c:f2:ef:8e:79:2b:ba:1b:52:00:68:b6:d2:
6f:d0:f4:4b:cc:de:46:cd:af:3e:c8:17:38:51:d7:f6:4d:f2:
cc:4d:f1:fa:59:10:39:63:04:2d:81:74:0f:93:98:c0:8a:82:
07:5b:33:ea:6d:3d:b7:ed:d1:07:a7:b0:96:7f:dc:49:0d:9d:
0f:1f:65:e6:40:6b:a9:de:8a:79:20:f4:a9:d8:bb:09:c7:25:
6d:4a:80:21:c4:4b:d8:b4:88:81:da:fd:c0:9b:fc:7e:3c:87:
a4:73:94:5b:86:b5:2c:b3:34:80:50:74:0a:46:83:ff:30:3a:
68:85:db:60:da:ad:c2:43:a3:56:28:be:c8:98:57:7c:18:78:
69:56:66:c3:ba:80:67:21:be:9e:d0:37:c8:ef:6d:1a:67:09:
29:4b:56:bb:ef:1b:40:0d:09:77:f7:87:6f:85:f5:77:ad:9e:
24:4c:a9:0b:eb:53:2a:59:49:a0:be:8a:71:6d:b6:97:da:d3:
61:e3:4d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:02:54 2026 by rpki-client