Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File: CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier: 9qqG00oDl1ISVGTfHNSjjGt3GViqNF71soxZiQauxAo=
Subject key identifier: F7:9F:B2:16:3C:C3:52:A2:B1:DF:84:44:1F:57:66:10:20:9D:AE:33
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial: 019D9818DF56C8741A100404B57C14D4BB05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number: 0831
Signing time: Thu 16 Apr 2026 21:00:59 +0000
Manifest this update: Thu 16 Apr 2026 21:00:59 +0000
Manifest next update: Fri 17 Apr 2026 21:00:59 +0000
Files and hashes: 1: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: rbHU+537zfIAnp8CnuF16STyoB/uA+WJbjL8r9N58lo=)
2: u8VLd__LhC89PUm-bBou8g1XjCk.roa (hash: FAOfHdJRje+Re0ts4CPoL2wF4WdKlrbROQeiewEd2a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:df:56:c8:74:1a:10:04:04:b5:7c:14:d4:bb:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Validity
Not Before: Apr 16 21:00:59 2026 GMT
Not After : Apr 17 21:00:59 2026 GMT
Subject: CN=f79fb2163cc352a2b1df84441f576610209dae33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d8:90:7e:73:a0:13:22:79:4d:73:55:92:a1:
a7:6b:2a:1c:19:2b:8c:55:04:dc:6b:67:2b:8e:f8:
33:42:d8:33:ce:c9:87:02:ae:39:10:b6:b4:84:08:
8d:7e:f3:a6:69:ab:75:59:05:22:01:85:b1:81:78:
b1:49:9a:de:1f:b3:c6:f5:87:90:e9:12:c3:e5:81:
f5:c8:df:8b:ca:86:28:74:d5:d5:c7:63:37:e7:32:
7d:12:e6:c6:f7:2e:7f:a3:8f:9c:33:f9:6b:6a:dd:
31:d2:f1:82:83:ab:37:96:af:07:36:b1:72:ab:59:
dc:d1:ea:b5:f5:d6:3b:63:1b:87:90:fa:1d:64:61:
78:18:6d:d2:76:3d:d1:16:13:9d:16:5b:c9:dd:83:
ab:2b:08:a1:6c:f3:3a:8b:9f:e3:9b:74:43:36:06:
ab:53:a8:7b:75:80:a6:4e:85:37:da:87:bb:8c:8f:
a7:b0:b5:86:57:51:32:12:40:84:6e:67:f3:b4:bc:
11:00:43:74:28:82:66:41:35:79:f8:45:be:12:69:
0f:00:fd:54:aa:da:ed:4f:ba:bd:26:b8:19:66:2c:
df:e8:8f:d2:cc:9a:e6:8f:28:5b:73:0b:2c:12:57:
70:d9:73:d1:c3:0c:b8:9a:7e:0b:1b:be:a8:a0:22:
fb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9F:B2:16:3C:C3:52:A2:B1:DF:84:44:1F:57:66:10:20:9D:AE:33
X509v3 Authority Key Identifier:
keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bc:25:33:90:34:79:e9:15:b3:e6:73:0a:27:a5:21:fb:39:
c0:6b:4d:a3:05:18:ca:0f:d2:a5:63:a3:30:25:fa:de:ee:d2:
d5:65:eb:c9:d7:9d:b5:2f:8e:55:dc:c7:9a:61:e4:fe:ab:c7:
d0:52:80:21:f1:ce:58:d9:66:73:24:dc:6d:86:12:12:d2:10:
4d:24:1a:d1:b8:d6:85:f6:01:62:2d:78:76:5e:b0:99:99:ef:
00:b1:a9:fd:06:09:1e:32:85:9c:ed:39:3e:30:e1:00:ca:ba:
a5:4b:b5:58:ee:47:78:80:ba:fa:a9:f8:13:b5:1c:e0:c3:e3:
23:5d:19:83:dc:0c:3e:c5:5a:c6:4f:c5:2b:cc:04:c4:03:0d:
a5:62:ea:ad:86:89:46:27:b7:05:cc:90:86:46:eb:48:3a:23:
0f:94:d5:cb:45:c6:99:6a:73:1a:c4:ae:d6:dd:71:03:e7:67:
af:77:99:c1:0b:c4:14:b8:97:0a:98:78:3b:7d:70:97:c5:d3:
64:92:c0:82:d8:d0:81:f0:26:6d:2b:c0:b3:dc:f1:de:4e:05:
f2:ba:37:6b:15:6f:d3:0e:67:3f:21:f7:ed:dc:22:f2:2a:94:
0a:07:65:a1:17:1b:b5:f2:ad:41:e9:3a:8a:38:85:61:56:1a:
14:1d:28:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:19:15 2026 by rpki-client