Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
File: Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft (raw, json)
Hash identifier: WlJQ8v9p8ljF2q0rQ2vWU+YXG8U/B2XIeHcGbdyOieo=
Subject key identifier: 6F:BE:83:99:8C:01:85:51:AB:4C:7B:B8:72:43:72:72:54:18:11:EF
Authority key identifier: 09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
Certificate issuer: /CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Certificate serial: 019D37C0D67936FA726B462353CF39C9DFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 04:01:17 +0000
Manifest this update: Sun 29 Mar 2026 04:01:17 +0000
Manifest next update: Mon 30 Mar 2026 04:01:17 +0000
Files and hashes: 1: Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl (hash: pbg8Wtpljgb8s7FMm4vCty2DD1OR7UESkvTuDnaucRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:d6:79:36:fa:72:6b:46:23:53:cf:39:c9:df:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Validity
Not Before: Mar 29 04:01:17 2026 GMT
Not After : Mar 30 04:01:17 2026 GMT
Subject: CN=6fbe83998c018551ab4c7bb872437272541811ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:52:a3:88:57:19:b0:40:07:db:fd:20:f4:1e:
a4:c6:08:ac:28:c6:7d:4f:d4:5f:03:8e:e4:a4:4d:
0b:fa:10:53:c1:3f:60:1d:7c:ee:f5:7e:05:d6:85:
bd:a8:c7:13:a9:ed:3e:2c:b5:54:23:8c:e3:4c:98:
61:52:f9:1b:44:e4:1f:d4:2e:4b:f2:7a:cf:02:36:
ce:5e:d7:08:29:ec:5f:ea:4f:44:6b:6b:9e:c5:4d:
59:0a:cd:19:b6:10:60:d2:90:8d:fe:17:d1:f2:e0:
72:61:2a:d6:25:b9:93:55:46:e8:fe:6c:71:38:75:
48:7d:79:f9:3a:84:16:3f:f4:b1:0d:da:ac:0e:d9:
8b:3c:01:0f:18:99:f9:7d:4d:af:74:44:c1:e1:74:
b1:66:f5:8d:d9:56:01:9c:d3:86:9f:1a:89:b7:74:
bf:a4:dc:38:26:ef:33:61:d3:6d:e6:c9:fe:02:ac:
03:dd:42:88:45:eb:88:13:99:22:c3:01:d5:7d:6d:
f1:40:7b:84:71:d7:2b:66:dd:87:94:c2:91:7b:6f:
8e:7c:76:26:1b:cf:fa:28:97:68:ae:8f:da:8f:c6:
84:69:fa:37:54:b2:59:4e:96:90:f7:c9:e9:27:90:
42:78:0f:0b:df:ce:19:6b:7a:08:76:d2:bf:22:bd:
6c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BE:83:99:8C:01:85:51:AB:4C:7B:B8:72:43:72:72:54:18:11:EF
X509v3 Authority Key Identifier:
keyid:09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f6:2e:53:c0:99:08:7a:22:f1:00:df:c7:e0:db:f5:95:a5:
a1:cd:0b:80:9b:fa:c0:1b:59:7a:2e:33:dd:b9:3a:d3:e8:04:
9d:75:c0:e1:c3:7d:4b:2d:2b:3a:c5:b2:26:42:38:d8:00:85:
1d:de:6a:4c:82:06:ed:16:91:ba:1e:59:af:e9:ee:ee:24:13:
46:46:be:c8:d5:d1:f1:10:d0:55:6b:a7:5e:90:5e:f3:79:21:
50:97:5d:8b:35:8c:7b:4c:c2:c6:2d:1a:6a:d2:fe:99:da:b9:
f5:a3:82:8e:ab:55:e6:93:11:7c:23:65:51:50:f5:62:36:3e:
a1:3e:89:da:bc:51:2b:89:d5:44:77:4b:3b:6a:ce:7b:30:ab:
0a:ed:d8:80:e1:cf:c8:0c:fb:d5:54:a2:60:29:39:4d:c9:be:
1c:ef:e4:43:0c:83:93:da:04:85:f0:07:4a:73:9e:79:c3:4c:
8e:62:a6:1f:a9:7f:85:10:58:2e:c7:36:57:3b:2e:6e:c0:d2:
06:02:98:1a:9d:c8:99:b2:01:31:f2:60:55:a6:2b:7e:9b:97:
58:96:cc:14:63:91:47:79:b1:41:c3:db:f2:0c:c0:4c:b7:3c:
54:ef:cf:da:44:18:3d:5d:84:33:bd:a6:9b:a7:99:6c:1b:2f:
fc:8e:95:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:46 2026 by rpki-client