
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
File: C86QcAXcPrBHC8PbRpCNoQkXuEo.mft (raw, json)
Hash identifier: RjHd+9EEZmTSIUhqFJVrjbbaZdj2io88ieajBKgUp00=
Subject key identifier: 54:B5:5A:F7:37:02:B7:77:86:FD:4F:C8:B8:28:EC:2F:9F:31:29:4B
Authority key identifier: 0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
Certificate issuer: /CN=0bce907005dc3eb0470bc3db46908da10917b84a
Certificate serial: 01A0D5703AC40A54E282EBF6F559FF7D1F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
Manifest number: 141D
Signing time: Thu 24 Sep 2026 22:01:37 +0000
Manifest this update: Thu 24 Sep 2026 22:01:37 +0000
Manifest next update: Fri 25 Sep 2026 22:01:37 +0000
Files and hashes: 1: C86QcAXcPrBHC8PbRpCNoQkXuEo.crl (hash: y4II2jUTSDU/Xtc3ocI37ZYt73wSOABm6MKoPX1F68Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:3a:c4:0a:54:e2:82:eb:f6:f5:59:ff:7d:1f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bce907005dc3eb0470bc3db46908da10917b84a
Validity
Not Before: Sep 24 22:01:37 2026 GMT
Not After : Sep 25 22:01:37 2026 GMT
Subject: CN=54b55af73702b77786fd4fc8b828ec2f9f31294b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b5:d0:1e:a0:04:fd:2d:b0:b4:7b:d5:b2:92:
d4:8f:82:4d:c6:d7:bc:43:0d:f9:72:0a:51:da:2a:
9a:a0:a6:93:7f:51:92:72:a3:fd:82:5c:a9:89:12:
12:48:36:b9:a3:4c:82:dd:f0:f5:0c:ad:02:bf:b8:
5c:a5:97:b7:df:a0:83:92:6f:6b:1e:d2:60:d9:6d:
e8:92:38:97:59:fc:33:88:48:66:a1:42:d8:74:76:
ac:8e:5f:95:29:65:f9:45:77:90:28:14:5b:1f:4e:
69:4b:07:c4:89:c1:3c:22:80:59:9d:ef:2e:d5:f9:
14:35:03:c7:d6:c5:8f:2b:04:84:ff:b7:4c:04:69:
da:a5:2d:ee:99:ef:f7:65:59:6b:3b:9a:29:65:1c:
79:c8:56:3a:25:8e:a6:07:07:94:34:8e:cd:61:7a:
51:a1:2d:bd:31:df:d8:71:50:2a:9c:a6:d7:da:5c:
a9:95:ea:d3:80:7b:09:f9:d7:90:eb:42:20:3e:ff:
03:e4:2f:37:41:87:e5:7b:2b:13:61:47:1a:ef:39:
50:1d:bf:9f:e1:2f:56:d9:b7:47:7d:95:93:2c:65:
95:0f:8d:e7:6f:80:ed:d2:b8:23:3d:fa:9c:82:5c:
ba:72:b5:57:35:bc:64:c3:8d:18:d9:fc:9e:89:51:
d3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B5:5A:F7:37:02:B7:77:86:FD:4F:C8:B8:28:EC:2F:9F:31:29:4B
X509v3 Authority Key Identifier:
keyid:0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b6:d9:47:81:2d:c0:63:70:e3:f6:d2:69:1e:a0:25:57:3a:
70:56:05:77:2a:d6:a0:23:12:f0:17:ca:0e:50:1f:82:af:51:
f5:be:cd:ab:f8:9f:44:32:c8:c2:89:c7:7d:30:5a:bc:f9:33:
50:c0:68:06:52:2e:b2:52:77:63:f5:87:e3:f4:2d:4b:1e:de:
8f:7c:33:f7:25:bc:23:9c:ee:7c:61:17:6d:88:01:6c:a5:c2:
b9:f0:a5:05:82:e7:eb:4b:2b:e0:4a:43:2f:26:c3:4b:07:c8:
bd:1a:75:e7:a8:67:01:d6:61:d5:0c:1f:ff:6d:f0:8e:1b:b5:
ec:79:fa:85:e2:0c:76:49:0e:07:4e:16:a0:c1:4b:5a:79:39:
2a:ce:07:ac:aa:4d:4f:80:d8:db:1c:f6:b5:26:15:6d:5c:91:
6b:11:23:e6:f5:5c:df:b6:3f:dd:fa:86:e5:df:82:62:f2:79:
a4:96:a7:54:50:4d:c6:42:7d:26:a8:16:ac:6c:ed:67:1b:b9:
0a:48:a9:97:11:a4:3e:15:6b:44:e5:e7:2b:8c:03:8e:53:54:
3d:6d:ee:24:18:91:62:0d:e2:5a:42:c1:2e:16:e4:d3:bd:e5:
e8:4c:84:91:cd:62:ed:ba:62:24:15:0c:06:d8:79:06:ac:d9:
4e:c3:5e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:51:09 2026 by rpki-client