Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
File: Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft (raw, json)
Hash identifier: 6dJsE3KoBKq7axbn8cCoX2N7HiiZxY6fytR/+RUcoG0=
Subject key identifier: C5:B8:C0:5D:38:C5:AA:14:21:B8:C7:F0:5F:19:B5:10:C7:9B:7B:42
Authority key identifier: 09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
Certificate issuer: /CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Certificate serial: 01A0005CE5674D0B6EA0EAD9C48AB178E032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
Manifest number: 19FF
Signing time: Fri 14 Aug 2026 13:01:23 +0000
Manifest this update: Fri 14 Aug 2026 13:01:23 +0000
Manifest next update: Sat 15 Aug 2026 13:01:23 +0000
Files and hashes: 1: Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl (hash: Ele6QooKA71PKyGBsKQX0Yne7KWsqGLqryoeqw/1LbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:e5:67:4d:0b:6e:a0:ea:d9:c4:8a:b1:78:e0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Validity
Not Before: Aug 14 13:01:23 2026 GMT
Not After : Aug 15 13:01:23 2026 GMT
Subject: CN=c5b8c05d38c5aa1421b8c7f05f19b510c79b7b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2e:fc:e5:0f:c0:a3:5b:eb:c7:e9:81:9e:3d:
60:c9:bd:b4:70:83:71:03:5c:bc:28:eb:b3:16:1e:
6c:30:94:58:13:00:fe:54:b8:59:a6:ac:a4:35:65:
a2:7c:b7:74:31:a8:e1:76:36:12:c3:59:8a:3b:5a:
45:0f:76:ea:d2:03:fb:71:c3:88:b3:db:19:e9:e0:
25:2b:a8:15:f3:fa:c3:58:aa:40:9c:92:c4:cf:12:
df:8d:dd:4b:5a:30:72:57:36:ba:7b:58:12:2c:9d:
33:14:04:11:0d:2d:89:ac:15:56:9c:14:74:23:47:
23:7e:4f:f1:24:27:a2:ae:eb:f1:90:d1:5d:1b:83:
e6:92:ab:98:4e:41:e3:10:bd:08:2d:25:3a:11:e0:
8a:e0:d8:28:b2:9d:9b:24:b8:39:bf:ff:48:c0:5c:
38:50:53:11:e5:da:b3:7d:79:9a:77:ae:15:a6:a3:
08:01:cf:16:ac:13:56:92:e9:af:e5:52:8c:97:f6:
25:40:a0:bb:23:79:9a:9a:87:8b:48:ef:5a:16:3d:
63:fb:a5:d3:7e:06:67:ec:20:d3:c2:72:09:0e:f5:
a5:c1:ec:79:96:a4:b9:e2:ee:65:93:c3:d5:1e:ac:
10:0d:5e:af:41:9f:3a:f9:73:27:43:93:6f:b2:0c:
f6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B8:C0:5D:38:C5:AA:14:21:B8:C7:F0:5F:19:B5:10:C7:9B:7B:42
X509v3 Authority Key Identifier:
keyid:09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:54:54:74:a1:ec:2a:cf:80:c5:7f:67:f6:e4:d1:b9:66:ec:
60:b7:f2:c3:da:fb:f2:1a:0e:4f:5e:14:ca:d6:c3:08:79:38:
ea:ac:d5:f6:30:ed:a1:1b:0a:a6:7e:1e:8c:7e:be:fa:e6:42:
ef:68:65:72:2c:5d:f6:6c:8c:3f:04:e3:7c:51:60:1e:55:93:
dc:d8:c0:f1:85:63:36:01:91:9c:56:91:90:25:8a:7b:6c:be:
20:85:45:b6:3b:ce:0f:99:7e:66:bf:b6:f2:2b:01:36:8d:86:
3b:80:7d:07:34:8b:d9:87:c4:33:f8:f8:6b:dd:37:77:88:6a:
dd:d9:d7:44:86:3b:a7:fd:bf:a5:b3:90:00:49:79:9c:61:f0:
0b:a5:f3:98:eb:88:66:4e:d5:02:fd:6d:33:46:2c:94:5d:a5:
f1:d1:64:e5:82:9f:45:45:f0:b2:a0:28:c5:2e:93:29:19:bb:
a6:c7:3b:d4:4a:47:9b:5c:1f:82:4b:d0:78:c1:02:6b:a6:4b:
1d:7c:8b:d4:38:7f:b1:96:3f:a6:54:a4:15:e8:af:14:57:b4:
20:34:47:7a:be:8a:81:eb:33:c4:3e:99:d3:c1:4f:8b:63:1f:
f2:d7:05:55:ee:e9:83:97:26:78:d8:c2:da:7e:8e:07:57:f8:
2e:47:3a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:05 2026 by rpki-client