Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
File: Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft (raw, json)
Hash identifier: c6S1aunNTvkc3nOdKsexrs1NAhTBdSvu0BeWf6fe7DE=
Subject key identifier: 96:E7:FB:DE:DA:A2:46:43:67:A1:AD:B9:4F:6E:B6:92:36:0B:1C:23
Authority key identifier: 09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
Certificate issuer: /CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Certificate serial: 01A0C3692E44F3B8FFAD4E68B6897176382F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 10:00:44 +0000
Manifest this update: Mon 21 Sep 2026 10:00:44 +0000
Manifest next update: Tue 22 Sep 2026 10:00:44 +0000
Files and hashes: 1: Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl (hash: 6DORe6w22WWLdVjG3Q8bjjjToIgFOD5GyneY8HSxUkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:2e:44:f3:b8:ff:ad:4e:68:b6:89:71:76:38:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Validity
Not Before: Sep 21 10:00:44 2026 GMT
Not After : Sep 22 10:00:44 2026 GMT
Subject: CN=96e7fbdedaa2464367a1adb94f6eb692360b1c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b8:dd:4f:d4:04:ee:71:49:51:b2:c2:d5:61:
c0:54:2a:4e:3f:41:12:d0:b0:4e:a3:1c:d9:ef:25:
93:ca:92:39:32:e0:05:be:86:6b:27:cd:fc:53:b8:
37:0f:0c:48:7c:76:00:6f:fd:75:ba:8e:4a:6f:14:
42:28:4d:ab:33:72:49:98:7d:b0:63:b1:b4:de:d6:
e7:57:8c:0d:5c:b1:ce:7a:cf:7b:1c:a1:db:8e:e4:
5b:61:35:a6:cd:df:e9:50:6c:dd:d6:38:51:b5:78:
ab:ac:c6:50:92:76:27:b0:93:ef:a3:42:38:6a:9d:
9d:ef:c3:aa:b4:76:1e:1a:5f:ef:5b:3a:01:cf:b4:
d3:c0:fa:e9:b8:a7:e2:81:a4:1a:5a:58:68:9b:d3:
a3:0b:c1:5d:93:9d:d2:9e:ed:eb:91:26:cf:18:f8:
85:8f:eb:a5:12:78:6a:5c:11:62:d6:4a:c1:e3:04:
11:31:6c:97:b2:ed:6b:af:92:76:ec:01:a8:78:76:
4e:b0:7f:c0:1d:d2:f2:3b:90:07:b1:c2:37:88:04:
0a:ae:e1:e7:7b:89:0b:d7:3f:ac:f2:1e:ea:0f:b0:
59:5d:ef:5c:33:34:ad:ac:96:de:f8:ff:4d:28:d1:
1e:37:61:10:fd:45:5e:d5:2b:23:a8:d4:03:9f:73:
e0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E7:FB:DE:DA:A2:46:43:67:A1:AD:B9:4F:6E:B6:92:36:0B:1C:23
X509v3 Authority Key Identifier:
keyid:09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:22:24:c7:22:0a:fb:8b:63:2e:ab:0e:dd:71:cd:f9:9e:7a:
e3:32:8f:aa:2f:0d:11:76:8b:e5:b9:4c:0f:bc:59:d2:76:d8:
8c:90:6d:e7:d3:79:6d:83:9b:7d:6c:4a:d2:f8:d3:e4:7a:5c:
ca:37:53:11:97:25:f4:8f:6d:0f:98:e2:b6:a6:fe:a5:db:aa:
90:64:ab:57:4b:db:c0:ca:b3:7c:1c:24:56:95:86:30:f2:57:
d2:ca:32:70:be:1b:fe:2d:9b:ce:af:34:09:e5:98:90:52:92:
b3:71:ef:fd:65:d3:4e:ca:5b:6a:d1:96:de:cb:f0:6e:33:46:
0c:ba:1a:a1:e2:d9:58:a3:80:4a:ce:1c:b3:ab:cc:63:58:d4:
ac:88:fe:2c:48:d2:f8:64:08:92:9a:6a:f0:bc:cc:30:b2:f2:
6c:54:8b:e2:0e:12:47:6d:14:5a:bb:f5:ba:a2:bf:46:18:28:
62:b1:2d:dc:12:d1:b4:f2:8a:b3:a1:4a:aa:1e:8f:41:c2:9d:
f6:05:7a:96:ad:f5:c3:c0:a4:60:6f:38:39:3b:8c:83:19:0c:
01:86:af:86:6c:df:0f:a4:4e:05:3b:b8:04:cc:de:61:c1:dc:
ad:f6:21:c4:4a:4c:66:b6:70:46:85:bc:33:3f:9d:99:2e:79:
12:f4:ef:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:32:26 2026 by rpki-client