Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File: CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier: fifEpAs0Vs9D6hCn8iS3UA49/7nZmX7mzl/GeqYEoMs=
Subject key identifier: 65:70:9D:A5:3C:33:8E:99:C9:28:1A:E8:AC:D4:95:2D:67:04:95:A1
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial: 019CAE6C283799946182A5C7F8BAFF33F177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number: 07B8
Signing time: Mon 02 Mar 2026 12:00:49 +0000
Manifest this update: Mon 02 Mar 2026 12:00:49 +0000
Manifest next update: Tue 03 Mar 2026 12:00:49 +0000
Files and hashes: 1: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: gKM0jS4vgL3gIBKTwwlcA3/7rkW87LXmCdR83lkdZx0=)
2: u8VLd__LhC89PUm-bBou8g1XjCk.roa (hash: FAOfHdJRje+Re0ts4CPoL2wF4WdKlrbROQeiewEd2a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:28:37:99:94:61:82:a5:c7:f8:ba:ff:33:f1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Validity
Not Before: Mar 2 12:00:49 2026 GMT
Not After : Mar 3 12:00:49 2026 GMT
Subject: CN=65709da53c338e99c9281ae8acd4952d670495a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:76:df:e9:38:ae:5e:49:ce:36:ea:1c:b9:27:
cd:34:df:5f:17:85:4a:6e:0f:ab:99:07:b2:22:29:
27:9b:53:69:50:72:5b:96:25:13:43:80:62:7e:0a:
54:29:28:aa:97:36:c6:23:a0:be:36:4c:1f:62:7a:
b7:ab:dd:e9:4c:66:2e:61:2d:7b:1a:01:22:26:a0:
7e:0a:39:5a:94:af:60:e5:cc:85:fd:84:d3:1c:33:
bb:f6:93:e2:fb:92:9b:8d:8a:58:d5:be:cf:7d:95:
2b:1a:16:f8:74:3d:6b:61:80:68:80:ff:9e:96:85:
c7:7c:2a:e6:b0:5b:46:7c:03:55:c9:10:d4:cf:1a:
75:7f:a6:1e:8b:c3:bb:fb:24:d2:79:90:38:66:82:
94:87:af:b8:46:51:ee:f8:aa:95:24:38:46:0d:69:
ff:e5:c8:98:d6:81:1e:9b:51:e1:86:27:c4:f0:ac:
9e:8b:1a:29:68:32:91:d4:a8:fd:81:5e:ec:07:ad:
41:18:db:41:fd:b8:f6:33:76:de:a2:c0:53:3b:af:
61:55:e8:b4:90:26:dd:51:27:64:16:c5:c4:bd:82:
38:8f:de:d1:02:0a:35:08:c6:72:16:aa:66:05:f9:
f1:1a:83:3e:73:99:e5:ee:99:77:cd:7b:f2:bd:0f:
62:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:70:9D:A5:3C:33:8E:99:C9:28:1A:E8:AC:D4:95:2D:67:04:95:A1
X509v3 Authority Key Identifier:
keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:df:1c:cc:80:70:1e:f8:cb:9b:a4:b4:51:da:e4:86:3b:5c:
83:be:f6:f5:1c:d6:bc:b7:ce:be:98:81:95:04:7a:db:2b:76:
b0:3c:08:05:7e:da:ae:b4:de:bd:26:de:da:8c:2f:cb:b2:15:
92:f2:01:c4:e5:b8:5c:f8:04:40:29:bb:7a:cd:9c:96:5c:31:
e1:15:51:88:59:f1:68:a0:d2:cb:35:21:ff:04:d0:30:e1:14:
f1:e9:5a:c0:27:f1:c7:b8:46:c9:b5:7f:da:34:73:78:f7:46:
1c:93:2a:01:2a:6c:80:b8:0b:43:e6:87:46:c4:cf:cd:13:39:
82:99:60:1a:b7:0b:55:6e:fb:d2:dd:3d:4e:50:34:86:07:46:
aa:88:08:96:d6:28:f9:38:d9:15:6e:74:68:b5:44:3e:01:05:
c0:5f:04:b3:d4:96:da:29:8a:56:fe:47:cb:47:ab:c2:a2:96:
38:34:e8:1c:1d:c2:68:08:a2:a7:64:09:ec:5b:08:ae:3c:0b:
d9:5f:03:0d:9d:88:99:64:f0:78:e9:b6:24:27:08:ea:28:be:
a2:83:09:de:fb:9c:74:f1:e8:24:ed:74:a1:9d:d7:ea:ef:17:
02:09:d1:fd:72:e1:9c:36:a1:23:0c:e5:39:85:c9:b5:59:92:
96:53:63:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:14 2026 by rpki-client