Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
File: Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft (raw, json)
Hash identifier: bAlBKa4OYxCpYsFTwJLshFZ3+IzLUSdChRwc/7oTkhI=
Subject key identifier: 84:88:ED:71:F3:17:06:64:EA:0D:59:62:7F:AD:93:34:D1:23:D4:70
Authority key identifier: 09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
Certificate issuer: /CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Certificate serial: 019D985068C1F9A3C1EE12A9E17702F9580A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 22:01:39 +0000
Manifest this update: Thu 16 Apr 2026 22:01:39 +0000
Manifest next update: Fri 17 Apr 2026 22:01:39 +0000
Files and hashes: 1: Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl (hash: dTjcK6N2XeXnCLKr/ni0jJ1y0g9sD53eHobAsEBcmoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:68:c1:f9:a3:c1:ee:12:a9:e1:77:02:f9:58:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Validity
Not Before: Apr 16 22:01:39 2026 GMT
Not After : Apr 17 22:01:39 2026 GMT
Subject: CN=8488ed71f3170664ea0d59627fad9334d123d470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:a6:e4:af:2d:34:01:63:ed:75:ca:24:35:
9d:7f:95:3a:2b:61:80:2a:6a:7b:29:9a:31:02:6f:
55:a9:4a:ff:23:67:49:9e:cc:7b:fb:e8:70:dd:6d:
d5:21:45:ec:21:72:44:5a:33:c0:e4:04:10:4b:44:
86:59:8f:89:3a:fb:ec:1c:fc:27:80:c7:01:06:16:
af:2d:d6:45:65:7e:ec:d9:33:71:f6:26:63:92:fe:
44:9c:01:e9:a9:0a:01:27:ed:84:b4:cb:5e:7a:57:
76:60:7d:ea:b8:69:51:57:46:fe:fa:c9:7f:ac:54:
7b:5b:95:76:8f:de:61:e6:7e:b7:a4:7e:57:1e:90:
05:ec:fb:d1:4c:46:f2:51:61:eb:24:02:8a:5e:8b:
03:a3:6f:c8:f7:15:13:0f:17:88:f6:a2:e4:99:c7:
b7:e0:44:cf:8b:9b:83:31:05:8f:b2:e4:11:73:42:
1e:93:98:38:26:79:3e:dc:a2:b1:99:a1:73:c7:68:
08:46:e5:96:c2:b8:ff:a7:ea:cb:aa:b2:40:56:8a:
b7:fc:0a:72:1f:17:b7:16:2d:89:d9:fc:8c:62:c5:
2b:7d:b0:4e:ba:a2:a9:a1:a4:59:13:ff:23:cc:60:
0f:4a:0e:ea:84:38:cd:b2:6f:a8:80:d1:0a:b3:55:
8e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:88:ED:71:F3:17:06:64:EA:0D:59:62:7F:AD:93:34:D1:23:D4:70
X509v3 Authority Key Identifier:
keyid:09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2e:39:6e:90:21:fe:28:2e:8a:36:ef:81:7a:f3:4e:1a:3c:
ef:c2:30:f3:5b:68:ef:87:26:ab:72:8a:b9:8e:17:6d:16:36:
e2:80:3b:24:2a:6a:da:28:07:b5:a3:66:58:14:b2:5c:f8:9e:
df:e0:fa:95:1e:b3:94:90:20:c1:bb:d2:bf:92:ae:82:32:7d:
f2:4e:b2:a5:39:bf:45:08:33:6d:9f:8f:28:8d:97:18:2f:4f:
95:72:37:ba:54:ce:cd:5f:01:ed:fc:79:91:cc:b9:b3:01:9e:
46:8f:77:81:db:d2:70:2e:60:71:60:5a:9a:32:85:fe:32:ef:
36:fa:10:3a:96:9b:27:30:2a:9f:7c:f4:82:cc:79:bd:c3:c3:
dd:a5:c1:70:6d:f7:1b:bf:4b:53:51:f0:c2:2f:8f:f4:9b:90:
e0:ae:96:c4:e8:39:a9:39:dd:6f:76:13:38:84:8e:d9:0a:9d:
cf:e9:f0:15:fe:3a:d8:c6:f2:7b:b4:6d:51:ff:a2:f1:15:81:
bc:91:56:a9:3d:a9:fc:d6:c2:09:0d:b7:2d:53:28:f8:a5:ac:
b7:5c:0a:82:12:59:62:b0:74:7d:b7:72:fc:1f:ba:a3:08:39:
1a:8f:bc:d1:7b:6d:1f:38:8d:35:d1:89:d7:63:f6:7f:17:2b:
97:22:b4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:01:24 2026 by rpki-client