Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File: CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier: 7u5LogfNm9Ieh6qRxfczri2VhH7HSeIczndRfRhsVq0=
Subject key identifier: D7:5A:E5:DB:13:C0:C1:D2:18:27:75:36:F3:51:43:42:7F:D5:40:94
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial: 019EBF9102A713164EDF4F2BDBDF96B7AA1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number: 08CA
Signing time: Sat 13 Jun 2026 06:00:12 +0000
Manifest this update: Sat 13 Jun 2026 06:00:12 +0000
Manifest next update: Sun 14 Jun 2026 06:00:12 +0000
Files and hashes: 1: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: ac4D6jEh1zIC0guJwdOPbIWGJJu500uYawTm6iML7Ik=)
2: u8VLd__LhC89PUm-bBou8g1XjCk.roa (hash: FAOfHdJRje+Re0ts4CPoL2wF4WdKlrbROQeiewEd2a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:02:a7:13:16:4e:df:4f:2b:db:df:96:b7:aa:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Validity
Not Before: Jun 13 06:00:12 2026 GMT
Not After : Jun 14 06:00:12 2026 GMT
Subject: CN=d75ae5db13c0c1d218277536f35143427fd54094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:24:00:fe:98:e2:8f:b8:9f:84:a3:86:ad:
6a:cc:98:26:0b:b6:84:43:6e:52:5e:58:0f:0c:1c:
4d:ac:23:3b:07:19:a8:48:d3:68:00:a9:dd:45:1c:
54:50:ee:ac:07:7e:b8:3d:38:8e:9c:aa:1a:66:1b:
4f:76:d6:05:7b:e1:45:65:d0:a3:f9:ae:af:aa:dd:
82:94:a1:11:43:24:2a:35:09:03:56:81:91:e1:ba:
b1:c6:74:c7:7c:99:86:41:9a:4e:8d:1f:97:3d:4f:
d5:48:9b:42:87:ba:7e:4f:67:cb:e0:15:33:47:d3:
42:47:83:91:83:bd:d4:70:35:06:c8:b7:56:da:36:
03:5e:11:dd:44:5f:eb:80:b9:b6:c7:ef:67:cd:5c:
21:c5:d5:50:cb:f4:8c:01:9e:08:ee:3c:94:e7:38:
be:4e:da:60:91:2d:6e:cd:68:04:3d:e1:a2:eb:9d:
ee:30:67:3c:c5:a4:1f:0c:96:13:7c:55:3a:ba:2e:
20:d1:0b:e1:78:bc:d8:91:b5:f2:5c:a3:49:4e:aa:
a0:c4:c8:16:b3:e3:9c:87:10:93:96:6e:ea:a3:ee:
00:9a:8a:1c:30:b6:b2:16:76:08:04:0a:14:83:bf:
62:ce:b4:62:74:d1:8a:97:ef:e2:b6:53:a7:86:f8:
f4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5A:E5:DB:13:C0:C1:D2:18:27:75:36:F3:51:43:42:7F:D5:40:94
X509v3 Authority Key Identifier:
keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:57:43:d5:bf:b5:1e:f8:9c:0b:f7:7f:68:d3:20:dd:e9:5d:
bc:f2:bf:14:64:b0:db:28:13:2e:73:63:e7:59:52:5e:7c:28:
7e:9d:52:4b:7d:eb:85:4b:44:6d:b9:ef:36:ec:a0:e8:b8:ee:
11:1b:50:05:6a:52:e8:f0:05:4d:c4:00:75:e0:22:b4:92:75:
ec:57:e1:b4:84:51:61:c2:62:a4:38:96:32:ab:1e:aa:6a:a9:
7b:90:9c:d1:bb:c8:eb:d6:a7:0c:91:f3:91:52:72:90:32:d6:
0f:0c:df:71:04:76:e1:74:29:48:6b:20:1d:9f:e0:aa:19:a6:
aa:66:5a:66:38:94:31:a3:10:95:17:e4:56:d1:f6:7a:17:38:
40:07:d7:b5:c8:91:a8:14:78:b1:7a:9b:6c:8d:91:27:39:4f:
fe:0f:4c:fa:1c:d2:c6:a4:42:7a:27:4f:e8:91:f7:5d:0a:67:
78:bc:04:01:55:89:90:d2:a1:89:f3:7b:d1:b4:dc:7e:66:12:
c9:aa:da:ae:aa:1c:4e:96:d2:1c:5c:d0:0b:d8:58:5c:df:43:
5f:bd:ea:8c:ae:8e:c4:24:a0:28:6b:4f:f9:4c:2c:62:04:8b:
3b:aa:82:de:88:e3:ac:18:37:3e:2b:da:4b:e1:9f:ec:9d:f3:
e5:25:74:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:01:54 2026 by rpki-client