Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
File: Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft (raw, json)
Hash identifier: rJJ4u6NJuLGD8zehgRCxCqShOtlXc0dMDPOYK1EWkZg=
Subject key identifier: 10:41:03:B3:F9:0D:0D:5F:70:9C:06:1C:23:BF:90:1E:DD:8E:DC:79
Authority key identifier: 09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
Certificate issuer: /CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Certificate serial: 019FA97570B9F15688B38D8B42292F03C49C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 16:01:13 +0000
Manifest this update: Tue 28 Jul 2026 16:01:13 +0000
Manifest next update: Wed 29 Jul 2026 16:01:13 +0000
Files and hashes: 1: Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl (hash: z2IpA6+xl2QuqYJvIIpmz35gPMF7n+WKxGy4D1YVhic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:70:b9:f1:56:88:b3:8d:8b:42:29:2f:03:c4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Validity
Not Before: Jul 28 16:01:13 2026 GMT
Not After : Jul 29 16:01:13 2026 GMT
Subject: CN=104103b3f90d0d5f709c061c23bf901edd8edc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b9:c2:28:8a:7f:64:17:a9:a7:4a:f9:84:3c:
ac:82:33:5e:71:69:ba:98:2c:aa:45:8c:0c:b3:a9:
11:75:71:80:49:89:2f:7a:6c:10:ea:d3:b3:19:e0:
da:5b:b8:8d:93:ee:b1:bb:1f:50:08:a6:70:9c:aa:
3b:c3:cd:3b:6f:2e:e2:72:94:f4:44:2f:52:bd:6e:
82:01:bb:3c:3c:6a:4a:03:d5:37:d0:6d:86:98:6a:
4d:c1:5b:5f:8d:04:89:8e:53:6f:25:ee:2f:37:1c:
60:c4:d7:fc:14:2a:6c:7f:58:92:64:7f:45:cd:f6:
8d:a0:94:49:8a:c0:60:42:4c:9e:11:2e:96:fc:8b:
8e:fa:8d:92:a1:84:f4:9a:2f:2d:d7:90:fc:6e:23:
29:26:3c:f5:2e:3e:82:5d:9e:0e:c7:fa:ae:c6:e2:
24:e1:f4:4f:d6:de:b7:a1:83:a2:ba:5f:62:7c:44:
c8:76:a0:bf:aa:61:55:b2:b1:06:53:40:a3:d1:d6:
9d:84:f9:6e:82:ec:09:68:87:06:eb:26:e3:62:02:
c9:8c:e6:cd:38:3d:84:9f:70:96:39:f0:63:fd:7d:
2b:1c:f4:5d:59:c1:35:b4:10:6f:82:74:20:98:48:
00:3d:d8:5e:90:76:13:00:d1:dc:e0:d9:dd:9a:24:
41:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:41:03:B3:F9:0D:0D:5F:70:9C:06:1C:23:BF:90:1E:DD:8E:DC:79
X509v3 Authority Key Identifier:
keyid:09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f5:03:cc:61:ba:42:a0:6b:0e:62:f4:d5:72:18:29:90:62:
cf:05:c0:41:55:a6:5e:b7:7e:f8:4c:44:aa:a6:ea:1c:2c:d2:
53:fe:dc:d9:f4:ac:32:e0:34:9a:1d:59:6a:30:70:d6:a8:e4:
90:42:0f:a9:f0:c1:ea:94:02:27:e8:2d:3d:12:6e:7d:12:13:
80:cb:a9:a4:b8:c8:f9:2d:da:94:77:72:ef:c1:4c:42:70:c0:
93:6a:cc:df:8a:49:64:68:2f:a5:e7:71:83:18:dd:c1:2e:f4:
b6:c4:42:f0:65:f6:72:bb:e5:f4:4b:e4:28:80:c6:c4:15:b1:
8a:11:7b:bb:2f:aa:d1:45:ae:81:3b:ef:33:da:d9:9d:36:be:
70:f3:3f:eb:47:75:dd:59:21:f8:f6:41:fc:85:c3:07:10:48:
6a:7c:2f:8d:7a:12:d4:e0:48:3c:61:07:cb:99:cc:c0:93:20:
45:6f:ca:4b:c3:d4:04:b8:8a:78:07:1e:26:55:be:16:4e:cb:
57:ab:8d:55:82:8d:39:1d:eb:40:ad:00:16:cc:21:f0:b1:8b:
04:89:43:d0:01:2c:5c:f9:2f:77:2c:dd:c9:a7:16:0d:45:03:
42:17:e2:5e:df:4b:21:d3:a4:fd:1b:db:c2:1e:dc:ee:9a:62:
5a:b6:bc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:30:49 2026 by rpki-client