Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File: CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier: 9Jgx9SYHDUwqw3JfFGqiGgB1nlLX0vPcJZ1HNSwJr88=
Subject key identifier: 5D:AD:4B:53:FE:66:0F:35:F3:81:74:8E:DC:94:3F:0A:FE:3A:28:FA
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial: 019EBEECB25E77EB908BA9AC750CEF5746A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 03:00:43 +0000
Manifest this update: Sat 13 Jun 2026 03:00:43 +0000
Manifest next update: Sun 14 Jun 2026 03:00:43 +0000
Files and hashes: 1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: ZKfDpR8aK+HAsD7snFoj2+8q+2B9sHJ3FTr/Sw7Decg=)
2: OC2xnBQTRG6dTo8unU-AfiUJoPo.roa (hash: TCWmomXoe5LhZ7eUQal/1Sd3d3namiJ5LFej1VLenpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:b2:5e:77:eb:90:8b:a9:ac:75:0c:ef:57:46:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
Validity
Not Before: Jun 13 03:00:43 2026 GMT
Not After : Jun 14 03:00:43 2026 GMT
Subject: CN=5dad4b53fe660f35f381748edc943f0afe3a28fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:f2:29:d7:8d:6d:1c:a8:94:82:4c:88:86:
a1:ef:d9:d2:70:03:81:51:e4:df:75:36:4d:65:72:
56:f1:9b:70:df:fc:4c:91:95:e5:aa:e8:6f:7d:79:
c1:0e:b0:d1:dc:7c:4f:42:8b:5e:b8:7e:3e:85:ed:
31:ed:5b:f6:ac:c5:f8:cd:38:13:d6:a3:b2:4c:8e:
08:ae:55:18:0c:87:53:a6:d3:28:46:fc:b9:3b:1f:
fe:e8:7a:78:6e:38:87:16:e0:8a:83:f4:22:8f:6e:
91:51:10:75:4d:40:0d:7d:e7:e8:49:f2:27:f7:d9:
fa:aa:19:44:5f:de:42:05:58:45:56:f0:a8:09:aa:
a0:ab:19:a0:37:b5:4f:33:68:86:fe:00:49:23:ff:
8d:cb:1e:01:5c:06:a7:8c:80:b9:02:67:11:ab:bd:
5d:8f:13:84:6e:6b:90:68:9d:5b:e2:3a:d6:3c:c3:
9f:b0:1d:1f:e3:1d:b8:34:f5:40:6d:47:dc:28:3a:
45:1b:4b:be:4d:7f:0c:af:99:5a:57:18:5f:fc:cb:
4c:d7:c4:a3:1d:56:c8:38:bc:6c:db:eb:b5:f5:de:
3e:49:f3:6a:b7:ce:56:99:c1:4c:50:5a:11:e6:f8:
81:dd:ca:64:e8:c1:5d:84:a7:f4:1d:a2:a6:6a:ac:
ed:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AD:4B:53:FE:66:0F:35:F3:81:74:8E:DC:94:3F:0A:FE:3A:28:FA
X509v3 Authority Key Identifier:
keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d5:64:e3:3a:29:fa:3e:04:ea:45:11:86:34:ce:a1:42:cc:
42:74:c1:0d:76:1b:b0:54:e7:c4:6e:c0:5a:31:7e:cf:ea:13:
c5:48:74:27:a9:21:7f:b8:c6:e6:29:ca:2c:63:69:4e:27:a3:
e9:f6:dd:b4:3b:24:36:ea:2c:e5:7a:fe:52:db:d6:f9:d2:eb:
a6:98:6d:dc:5f:a7:11:17:48:d0:b8:d3:8b:14:13:3f:94:ec:
ad:a6:52:20:01:b2:55:40:e1:71:38:9c:6f:c9:2c:46:1d:ee:
1d:25:9d:96:56:10:91:ee:46:e2:6f:c6:09:ca:eb:e5:69:cc:
7e:d9:37:af:ed:f0:73:e4:74:0a:20:c1:16:aa:4e:2f:7a:42:
9c:ee:4a:fb:c1:02:76:cd:61:dc:dc:1d:44:e7:c7:d6:bd:7d:
89:da:b9:fa:be:9e:f5:cf:4b:e1:65:12:45:01:fc:9a:42:7c:
12:4f:91:ae:5b:4f:10:43:eb:70:77:09:e0:4c:15:2c:b3:13:
ce:21:57:38:a2:2a:5f:45:84:96:13:91:75:61:7a:72:4e:67:
8c:ce:b0:ee:01:bb:b9:33:23:f1:3d:a0:89:52:ca:8e:bf:10:
ba:b8:d3:4c:d0:89:0e:a8:77:a3:ae:3b:eb:4a:0c:50:c5:bb:
cc:7d:08:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:21:21 2026 by rpki-client