Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File: CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier: HxfIu8zupnDW7Ppix5RAp0A/olwywpXeig8N5F3qvj4=
Subject key identifier: 01:CE:6C:10:0F:EB:35:DB:03:40:D2:A8:83:47:0F:A5:85:54:F2:DB
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial: 019FA93DC0EAD4BDBAB959A64E18D1F9EA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number: 0943
Signing time: Tue 28 Jul 2026 15:00:24 +0000
Manifest this update: Tue 28 Jul 2026 15:00:24 +0000
Manifest next update: Wed 29 Jul 2026 15:00:24 +0000
Files and hashes: 1: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: tZJ6280djyi+pl9UBHzwr8kU0kgpl01SSpUBTQG02Cs=)
2: u8VLd__LhC89PUm-bBou8g1XjCk.roa (hash: FAOfHdJRje+Re0ts4CPoL2wF4WdKlrbROQeiewEd2a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:c0:ea:d4:bd:ba:b9:59:a6:4e:18:d1:f9:ea:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Validity
Not Before: Jul 28 15:00:24 2026 GMT
Not After : Jul 29 15:00:24 2026 GMT
Subject: CN=01ce6c100feb35db0340d2a883470fa58554f2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:33:68:17:ad:8b:d8:b4:1e:d7:11:ae:a3:
0d:78:7b:5b:04:81:ed:8c:e9:bb:03:19:f4:e6:ab:
bb:eb:54:37:94:50:32:4b:78:13:eb:de:70:ac:65:
de:9c:0f:d9:2a:10:6e:a4:6d:50:8e:fe:65:81:6b:
dc:56:f4:72:76:98:20:e0:44:66:bd:7c:4d:34:f2:
fd:a4:1c:36:8f:01:df:10:11:90:19:c6:d6:83:2e:
55:f7:c5:fc:1f:e5:92:bc:1e:85:44:ec:7d:36:94:
5c:d9:a3:50:1c:36:23:aa:82:18:10:d9:71:b4:20:
c9:cc:41:20:0a:73:74:f7:f3:80:9c:33:f6:66:e0:
5a:b0:24:bb:c1:cf:cd:3d:cf:5b:bb:87:ea:46:7b:
47:a2:88:ca:25:c6:3a:e3:7b:69:77:a9:42:0f:35:
61:01:a8:c9:39:e8:d6:e5:60:1e:7c:f9:39:3d:e6:
34:f7:35:d4:98:9b:e9:92:9d:59:ab:15:81:33:6b:
de:4e:13:bd:4f:4c:76:10:28:1c:e9:98:48:fb:a6:
28:55:90:d9:09:69:2c:f2:fc:75:fe:39:47:48:06:
6f:a2:4f:50:9b:26:b1:31:e3:f8:57:47:ba:ee:a1:
48:f6:fd:44:db:17:ed:f3:33:b0:9d:87:ea:2e:ce:
4f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CE:6C:10:0F:EB:35:DB:03:40:D2:A8:83:47:0F:A5:85:54:F2:DB
X509v3 Authority Key Identifier:
keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8e:0c:b9:ed:46:e9:08:3f:4c:92:89:68:2d:1d:23:b5:de:
92:39:1a:11:14:cd:59:ae:16:59:b5:ee:bd:e0:e2:ec:7a:8d:
f9:49:a6:e6:02:ae:d8:c1:46:60:92:03:54:72:a1:77:27:a8:
80:95:72:1f:7b:fd:14:05:9b:e9:c4:98:47:2b:10:69:a0:b5:
08:fd:46:3b:56:69:96:90:f7:bf:eb:8a:ca:84:75:e4:8e:dd:
a4:a0:ce:87:64:ea:bb:4b:a2:12:de:d8:27:87:61:c2:69:78:
5b:fd:ed:43:02:27:ea:5f:54:4f:8e:58:4d:56:6b:e4:d4:c0:
4f:7d:d4:ab:79:8f:f8:f4:f6:dd:64:03:83:79:fb:64:ab:fe:
1a:09:0b:7e:72:23:df:8f:f5:9d:9a:c7:43:18:d2:cc:20:8c:
fb:3c:0b:21:f2:bd:29:0a:77:eb:a8:4b:2c:21:0c:15:60:d0:
56:6a:60:e9:b2:fe:a1:10:cf:c6:7f:fd:d0:2a:66:fb:2d:de:
84:c7:89:a7:3f:ba:1c:a1:8e:eb:6f:1c:26:9a:22:38:1c:fc:
ac:6c:38:0f:3d:db:ec:56:a3:eb:b7:20:5d:81:01:c5:e6:04:
1d:aa:fd:e4:35:56:5c:83:22:f5:f2:f6:b2:cb:1c:13:50:17:
45:01:79:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:06:47 2026 by rpki-client