Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File: CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier: tCxY9S/lhx9kyQnTZgdDEc+XNJvnBEFdMs4dV50GBgw=
Subject key identifier: B2:3E:6D:DF:1D:40:BA:BB:08:78:DD:B5:A5:0B:F8:E4:0D:28:66:09
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial: 01A0C332652D0C45D84431568ECB7BD378F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number: 09D5
Signing time: Mon 21 Sep 2026 09:00:54 +0000
Manifest this update: Mon 21 Sep 2026 09:00:54 +0000
Manifest next update: Tue 22 Sep 2026 09:00:54 +0000
Files and hashes: 1: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: hHydoRH4DT/ZXvYLfwXgi5InS+57jZRojWKO/EAueuk=)
2: u8VLd__LhC89PUm-bBou8g1XjCk.roa (hash: FAOfHdJRje+Re0ts4CPoL2wF4WdKlrbROQeiewEd2a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:65:2d:0c:45:d8:44:31:56:8e:cb:7b:d3:78:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Validity
Not Before: Sep 21 09:00:54 2026 GMT
Not After : Sep 22 09:00:54 2026 GMT
Subject: CN=b23e6ddf1d40babb0878ddb5a50bf8e40d286609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e7:e1:bb:ec:d3:b4:e2:55:fe:56:28:75:44:
84:ee:ea:59:39:39:2a:c8:b8:09:09:8d:1a:81:e8:
fe:9a:10:62:2a:35:e6:cc:b4:a0:ef:c9:66:22:26:
f0:06:bb:2a:ef:64:8e:f0:61:5d:42:b7:75:af:75:
5f:4a:de:ba:0a:d5:af:3c:08:3a:b1:ae:cc:44:00:
d4:59:e0:f5:00:c4:ed:70:ec:80:b5:75:06:2c:a7:
b8:4e:69:51:7c:b4:08:bf:ab:24:22:e0:7e:90:73:
90:41:69:73:2c:03:c4:5e:1a:39:e9:e8:3b:f2:cc:
89:21:80:22:04:62:d7:07:0d:a5:46:aa:41:38:a9:
2d:85:ae:6a:59:b2:cb:3f:7b:4b:76:8b:b0:3a:5f:
ea:82:b1:1d:de:14:36:53:f6:5f:0f:07:39:3d:aa:
88:f5:9b:be:dd:d5:f8:b2:21:22:16:2f:f2:73:fa:
17:be:f7:72:68:72:f3:81:54:03:4f:7a:1d:96:8f:
0d:4c:12:4b:50:a6:03:20:88:b5:30:dc:08:9d:38:
2d:0d:25:a2:7e:6f:08:3d:92:92:ba:ac:d7:ae:34:
93:00:ab:f0:dc:54:88:47:3a:e5:22:27:b0:e2:ca:
30:22:d5:10:96:2a:e6:82:e1:20:eb:21:70:13:b1:
a8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3E:6D:DF:1D:40:BA:BB:08:78:DD:B5:A5:0B:F8:E4:0D:28:66:09
X509v3 Authority Key Identifier:
keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:cf:87:dd:7c:9c:87:ad:9f:44:ab:7d:7b:3b:12:ea:55:e0:
6c:6c:1a:f0:8b:95:6e:d8:b6:89:0b:e9:2f:58:bc:ed:20:af:
c2:f3:7b:15:83:42:a1:c8:a9:74:e2:bf:a3:90:b2:93:cc:5e:
96:75:af:89:21:90:8e:69:b2:15:6e:d9:9a:79:f1:38:ac:d6:
16:41:93:43:76:32:4d:31:09:38:47:9f:33:fa:e3:36:8d:6d:
f0:7c:4c:fc:68:d2:ac:20:27:44:27:b3:59:0e:87:ad:d8:e1:
fa:c6:5f:9e:0c:4c:c0:f4:aa:f3:7c:cc:51:f4:3b:55:3a:4a:
f0:ab:f6:6d:46:ab:cd:ee:01:e8:79:da:33:8b:cd:d5:1b:ba:
03:35:ba:11:50:f0:a3:69:e2:5a:96:0f:c1:bc:d4:4c:48:80:
0d:e4:ba:e6:bf:3b:3f:90:91:14:1b:ab:fe:25:2d:42:51:4b:
43:8f:c1:19:32:9f:75:96:56:12:6c:32:cb:8b:9a:81:1e:4f:
c1:0e:04:90:b8:f6:22:3f:ff:65:d1:9d:a9:34:c9:b9:6f:d5:
ac:9b:0a:00:d3:8d:75:f8:7f:c4:57:65:c8:1b:41:a8:65:f5:
bf:95:5b:ec:8d:68:be:6c:e9:2d:9e:4b:4f:a0:ee:86:b0:48:
89:f6:76:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:55:26 2026 by rpki-client