Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
File: Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft (raw, json)
Hash identifier: ot8i5ZQCy4ih+1MjSwHv4HfdE5xSujL4NsDhqJJBqvk=
Subject key identifier: D7:DA:F6:B5:03:4A:DC:E2:01:C6:AB:0D:E3:C1:49:8A:6D:CB:5B:06
Authority key identifier: 09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
Certificate issuer: /CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Certificate serial: 01A1C442816AC72A7C927BD03F52F394DB6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
Manifest number: 1AE9
Signing time: Tue 10 Nov 2026 07:00:55 +0000
Manifest this update: Tue 10 Nov 2026 07:00:55 +0000
Manifest next update: Wed 11 Nov 2026 07:00:55 +0000
Files and hashes: 1: Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl (hash: Z5DQt9NfIA2ylllkNj0yjOarJQFMd6GIsHk9uMCImZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:42:81:6a:c7:2a:7c:92:7b:d0:3f:52:f3:94:db:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Validity
Not Before: Nov 10 07:00:55 2026 GMT
Not After : Nov 11 07:00:55 2026 GMT
Subject: CN=d7daf6b5034adce201c6ab0de3c1498a6dcb5b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:f3:80:f3:f3:d1:71:17:1a:cc:62:3d:a0:
dd:57:85:ae:f8:0a:f0:c0:13:ca:87:b7:43:c3:9b:
5d:f7:38:1a:a9:af:f9:e3:9b:c7:8a:36:bd:52:8f:
6c:03:f6:bd:15:03:ec:da:17:64:8b:4f:e1:ac:dd:
52:ef:fe:24:68:de:e4:9c:85:ed:39:dd:9c:ba:3e:
db:5c:62:e7:a1:5d:1b:18:c2:ec:a1:c5:61:b9:93:
90:e0:8c:a4:be:4c:21:73:2e:ba:5c:91:6a:01:95:
5d:d2:91:fc:2f:23:74:d7:92:4e:e1:b8:25:19:a7:
0f:54:49:78:d8:0a:ef:c6:b3:80:f4:27:48:43:f8:
fb:98:bf:13:bf:48:ea:7b:a5:d9:8a:f3:65:d2:e9:
b0:cf:5a:4c:9f:f0:24:01:af:53:55:d9:34:ee:96:
19:ea:67:0a:b7:04:a8:6f:17:c4:75:77:84:9a:1f:
fd:46:aa:35:d7:5b:0a:9f:f6:55:3d:ab:bb:a0:82:
dc:5c:c0:65:0e:cd:c8:63:53:f6:7a:e1:58:b1:f4:
f6:d8:ef:08:a7:74:b1:5d:45:5d:c9:e4:e9:47:75:
e9:b6:ba:37:3b:be:b1:96:fe:35:15:72:25:87:7c:
86:79:2c:e5:e9:7c:eb:b2:a2:3f:6d:ea:8d:57:76:
8e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DA:F6:B5:03:4A:DC:E2:01:C6:AB:0D:E3:C1:49:8A:6D:CB:5B:06
X509v3 Authority Key Identifier:
keyid:09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:83:e3:ae:93:63:a6:ea:83:ad:f5:f5:70:99:69:74:22:63:
56:a0:4c:2b:3c:18:bc:5a:76:7a:5b:76:1a:e2:6f:6c:63:1c:
8c:ca:76:58:a0:42:39:eb:8f:16:dc:58:a6:4b:83:32:99:ea:
46:fa:91:30:e3:1a:37:6a:ef:0c:d3:11:aa:61:dd:9a:d4:02:
3c:98:09:21:d0:15:03:b9:da:9c:97:e5:9e:19:7e:e4:36:1a:
70:18:ca:d3:31:45:2e:5e:3b:8a:49:a6:be:06:fe:0c:41:2d:
cc:5e:ee:ca:17:f7:37:1d:59:ac:db:90:19:96:91:0c:db:b4:
1e:14:e9:41:f6:ca:48:5c:f0:9c:dc:2b:00:c2:cf:57:e5:7a:
d4:1c:2e:77:fb:ae:6d:47:77:c5:89:74:b3:a5:4d:90:2e:c7:
ad:c1:dd:6f:4b:d2:ca:ca:73:76:b9:20:99:37:d3:72:ec:3d:
df:d9:34:11:0b:16:d0:82:3e:47:eb:8f:f3:c3:6a:dd:be:32:
91:99:96:37:4b:59:25:51:fe:7e:9c:f2:34:e5:d5:06:17:cf:
a6:69:36:ea:44:b8:c7:a9:b0:46:f1:35:0b:26:a9:52:c9:74:
4e:59:af:3a:79:7e:e3:82:19:9c:94:be:5f:53:65:50:81:64:
b4:52:3b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 11:48:05 2026 by rpki-client