Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
File: Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft (raw, json)
Hash identifier: ryVk0lyv4soEj8ooq1igFXkTC5LE79Hjf88K3E7E2ak=
Subject key identifier: F7:52:4F:AF:A3:A1:63:23:D0:40:39:7B:F6:EF:18:57:5B:AD:0B:92
Authority key identifier: 09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
Certificate issuer: /CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Certificate serial: 019EBDDA6E4836373F4CE2752B78EC6AE3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
Manifest number: 1958
Signing time: Fri 12 Jun 2026 22:01:09 +0000
Manifest this update: Fri 12 Jun 2026 22:01:09 +0000
Manifest next update: Sat 13 Jun 2026 22:01:09 +0000
Files and hashes: 1: Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl (hash: htiDGoU5PP/VgS8uB8kV1aYysgW5PU8ZNOba+PTYrVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:6e:48:36:37:3f:4c:e2:75:2b:78:ec:6a:e3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Validity
Not Before: Jun 12 22:01:09 2026 GMT
Not After : Jun 13 22:01:09 2026 GMT
Subject: CN=f7524fafa3a16323d040397bf6ef18575bad0b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:22:73:76:4f:f4:ca:a8:68:86:cb:ba:5b:7a:
df:09:a0:38:05:5f:4e:a3:11:d8:f1:de:dc:38:b7:
6a:ab:e3:42:e2:cb:7d:b4:42:63:94:cf:53:6a:e1:
39:98:2a:f2:37:bc:ea:b7:4c:13:23:7d:0d:83:38:
bc:31:cd:16:67:0c:76:30:2f:ff:de:8b:46:c9:d0:
ca:da:aa:c3:06:09:6c:7c:9c:36:c5:b5:19:79:99:
0a:eb:05:1c:13:7d:4a:90:53:8f:e6:03:e8:4e:b3:
27:d5:ef:5b:f1:e1:c8:44:a1:fa:eb:2a:96:5f:a1:
20:f6:db:e0:f3:ee:f6:30:8e:2e:4d:7c:2f:a8:ac:
bb:90:cb:e6:c0:87:8f:d9:12:d6:58:db:6e:c9:16:
68:32:19:f1:cf:03:95:38:ca:b3:47:a5:55:4a:e0:
63:c0:15:83:e6:eb:24:c9:58:86:0e:05:af:b9:1b:
6b:03:20:fa:7b:74:13:b0:42:17:bd:32:06:bc:1f:
c3:df:ee:12:fe:ea:a3:9a:be:41:62:94:a3:d0:f9:
54:b8:f0:5c:b5:78:3f:1d:f3:3a:51:8e:22:60:11:
cb:32:6b:a6:ff:c2:64:6c:af:84:23:95:de:e4:4d:
d6:3d:5d:6a:27:74:e2:51:53:ae:32:5e:79:b1:e8:
eb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:52:4F:AF:A3:A1:63:23:D0:40:39:7B:F6:EF:18:57:5B:AD:0B:92
X509v3 Authority Key Identifier:
keyid:09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a3:26:f7:38:8c:f0:52:e5:7b:62:d6:2b:3b:eb:be:81:ce:
e0:b4:b6:74:a0:1c:25:3e:c0:0a:96:3a:1b:e2:27:c1:96:6c:
84:8b:75:b4:5a:cb:f2:e2:86:53:b3:fd:85:be:7f:87:99:d6:
61:f1:df:06:75:0a:3a:ee:90:11:01:c5:43:61:6b:d8:c6:6d:
85:cb:a7:e6:4c:0e:49:ff:39:5d:0b:fc:33:62:5a:84:f7:03:
71:0e:07:1f:6a:c8:83:5f:93:eb:12:24:49:d8:95:2b:4e:c8:
3c:d3:48:58:37:25:34:4e:39:a6:da:56:9e:00:0c:51:02:5c:
f2:68:50:c1:2b:4e:f7:bc:21:08:47:0f:4f:ea:1e:0a:7f:c3:
03:f0:be:39:64:f7:bd:a2:72:6c:4a:01:41:a7:12:3e:0d:30:
d3:c8:a5:c7:1b:f1:75:22:4c:cd:4f:52:6a:90:42:80:4b:91:
ee:e5:1a:a7:64:ed:6b:e0:bd:8e:a7:66:04:8d:d7:ee:96:e8:
d3:69:07:d4:f9:8c:e4:77:a0:7c:07:ca:20:00:49:67:b2:6b:
75:db:70:65:e2:10:4b:aa:95:1b:04:a7:3d:82:57:bc:99:4a:
b4:02:fd:72:f7:7a:a8:dd:1a:ee:01:95:2e:6c:a3:2e:7a:14:
cf:7f:e7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:06:45 2026 by rpki-client