Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
File: Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft (raw, json)
Hash identifier: HcgqVW4w44XGlCaM275Zg1Enr2V/cLLCD9jdHsTY07o=
Subject key identifier: A2:C4:20:2F:F0:57:39:DF:4F:1D:23:E8:FD:03:7E:D8:B0:B3:E7:65
Authority key identifier: 09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
Certificate issuer: /CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Certificate serial: 019E30E0C57EBECE58C422105A0B979D4478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
Manifest number: 190F
Signing time: Sat 16 May 2026 13:01:37 +0000
Manifest this update: Sat 16 May 2026 13:01:37 +0000
Manifest next update: Sun 17 May 2026 13:01:37 +0000
Files and hashes: 1: Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl (hash: mJhbzC7OeLPAr0dmOZ+zBdhADC4atALyQaAFQYb5EP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:c5:7e:be:ce:58:c4:22:10:5a:0b:97:9d:44:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Validity
Not Before: May 16 13:01:37 2026 GMT
Not After : May 17 13:01:37 2026 GMT
Subject: CN=a2c4202ff05739df4f1d23e8fd037ed8b0b3e765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c0:c9:d8:90:6b:15:bb:70:c4:e5:27:84:54:
63:c1:30:c5:80:42:26:ac:8e:96:66:46:62:46:e5:
60:76:f1:65:fb:92:8f:10:a6:0e:b5:a2:de:cd:a6:
a9:0c:fc:07:6c:03:3a:cc:d6:2d:6c:9f:79:50:94:
b3:59:dc:45:60:75:9a:fb:bd:eb:9f:86:24:8a:e5:
2e:28:cc:3b:46:f6:bc:ca:de:8e:a9:90:ec:4d:c8:
b7:71:f1:89:e0:71:12:be:da:37:00:96:dc:6f:64:
18:4f:98:6c:73:d2:95:86:0a:5b:bf:2b:e6:5e:f9:
65:b8:e7:58:52:dc:d3:f3:71:92:f5:c4:ae:f3:b2:
95:62:81:82:01:7b:80:2c:b7:ba:78:11:a0:d6:88:
ff:5f:3b:39:90:16:03:75:89:fa:f8:8a:77:60:94:
86:f1:d2:db:cf:c9:ed:6e:80:7c:38:78:e0:bf:b1:
3a:94:09:86:b0:14:e2:cd:04:f6:c1:c6:b4:02:39:
1c:05:4b:68:b5:34:28:f6:85:42:fd:76:6f:a6:d1:
b8:48:1a:ec:c0:b9:17:02:a1:05:95:89:c9:7e:87:
41:15:67:16:c0:85:ef:f5:92:6b:92:54:e4:b5:cd:
58:b4:6b:f1:0b:4b:93:a7:41:6b:96:a4:e0:6d:3c:
13:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C4:20:2F:F0:57:39:DF:4F:1D:23:E8:FD:03:7E:D8:B0:B3:E7:65
X509v3 Authority Key Identifier:
keyid:09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:33:14:fa:ab:51:87:bf:a7:7b:6d:e8:2b:6f:b9:bf:ca:f8:
88:89:0e:c3:bb:46:10:0b:e2:e8:32:25:e2:2a:ef:4a:bd:c4:
f7:59:c0:90:61:4a:15:4e:09:14:88:f6:e7:13:2a:95:09:23:
62:65:76:20:31:73:a3:1a:d7:bc:59:ed:45:eb:57:58:6a:55:
ba:57:48:d3:76:ee:2e:dd:be:fa:a9:d8:a3:fc:2d:0a:82:38:
c9:8a:3d:25:35:7e:e9:e2:d0:57:cd:07:9e:eb:cd:4f:f8:0e:
16:4f:26:64:18:29:73:03:ab:87:b1:9d:ee:3c:0a:44:ae:b1:
6a:e8:e7:ec:80:7f:a7:21:32:61:42:81:38:05:95:78:7f:59:
47:13:ed:5e:99:70:0c:d6:c5:10:8c:6f:ca:9c:6a:fb:63:27:
dd:36:72:e6:03:40:01:2c:ca:ec:30:1a:91:78:2c:e4:c3:eb:
3c:9d:b1:53:22:00:cf:8f:70:dd:1e:82:87:c5:d9:25:fd:e5:
7c:1b:38:26:fb:93:d9:86:49:0d:fa:25:bd:76:2d:14:88:58:
c0:f2:96:62:fb:46:06:b6:c5:ea:6b:5e:98:1c:b6:88:78:f4:
ee:05:b7:ff:50:c3:6a:54:d4:67:13:63:91:1b:9c:f3:23:eb:
02:5c:8d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:37:29 2026 by rpki-client