Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
File: Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft (raw, json)
Hash identifier: zshyP/9t1FK/G0uk1lAuev4ncSRzWUqEQn+itUjqZFo=
Subject key identifier: 7B:C9:10:02:62:E2:8A:EC:20:9B:B0:00:AD:F1:C0:D7:1E:5C:38:8F
Authority key identifier: 09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
Certificate issuer: /CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Certificate serial: 01A13F0296CB2223200F5043BE13757D8CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 10:01:36 +0000
Manifest this update: Thu 15 Oct 2026 10:01:36 +0000
Manifest next update: Fri 16 Oct 2026 10:01:36 +0000
Files and hashes: 1: Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl (hash: qSBGtfINkOx5Vtzo5AHB5i/ye49YuKP3TqoAhWO7vIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:96:cb:22:23:20:0f:50:43:be:13:75:7d:8c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Validity
Not Before: Oct 15 10:01:36 2026 GMT
Not After : Oct 16 10:01:36 2026 GMT
Subject: CN=7bc9100262e28aec209bb000adf1c0d71e5c388f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:08:64:5b:ad:90:77:8b:ba:a1:16:29:dc:
4c:70:27:ab:d0:f9:70:9e:c3:88:9e:95:23:ca:4e:
de:8e:79:23:66:8a:12:fd:75:6c:29:e6:fd:25:a0:
34:64:00:9c:d4:01:76:3c:83:7e:5f:fa:1c:cc:32:
24:40:7a:33:e8:0b:c7:24:7e:03:2e:63:2a:9b:75:
a2:93:aa:ff:88:58:ec:67:aa:f9:17:75:79:65:2f:
f2:c8:59:6c:a9:f8:0c:00:8c:c8:63:c5:47:99:c4:
c1:6c:a3:29:f0:91:0b:90:6b:65:bb:fe:30:8a:f9:
82:04:19:4b:fa:15:bb:85:ca:67:c5:e2:3a:92:40:
69:e3:fe:c0:42:3a:be:bf:60:74:76:fe:ed:ec:0f:
1a:b6:52:d3:c8:67:54:90:d4:aa:8d:4b:58:c1:c3:
66:ba:8d:ae:0e:52:e6:42:d1:ac:75:3f:79:54:d3:
bd:0d:21:32:e3:c7:d9:d9:f6:da:4a:14:35:d4:75:
00:6a:78:62:6d:a1:9a:02:d7:f3:fe:87:d9:76:46:
8e:f4:03:7e:c7:57:7e:3d:0f:a7:39:e6:c7:a6:3c:
06:85:9e:fb:58:6b:af:53:e1:e2:71:52:ec:3b:3a:
d1:ba:92:56:d0:b2:6f:44:9c:3c:e8:07:08:77:86:
c9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C9:10:02:62:E2:8A:EC:20:9B:B0:00:AD:F1:C0:D7:1E:5C:38:8F
X509v3 Authority Key Identifier:
keyid:09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:0e:49:9d:c7:86:26:7e:dd:80:23:98:21:0e:f1:00:d8:e3:
32:d2:1c:65:70:ea:5f:48:c3:1e:2c:63:4e:ed:11:41:ff:d1:
a0:1c:9c:54:fc:93:0b:e2:09:43:ff:46:5a:9e:ce:e7:00:44:
f5:d3:ae:c3:73:5d:f0:f5:46:ed:64:bb:86:9e:e4:98:02:2f:
75:a8:e1:75:8b:fd:dc:29:83:93:20:17:fc:1a:c0:01:1a:21:
77:6a:92:a7:80:42:34:72:38:19:5b:40:fd:4e:7b:d7:d6:c0:
4c:47:3a:4f:8b:a9:36:f2:49:9d:5d:81:9e:eb:35:90:fb:86:
b3:7a:64:1b:30:d1:33:da:0f:33:65:47:99:d5:a8:41:60:51:
15:05:a5:91:64:4d:10:7b:3d:91:40:35:12:e5:87:61:52:b7:
77:c6:51:e9:e7:85:af:93:12:2c:ea:43:1c:58:41:da:96:25:
82:b6:c5:3a:15:60:eb:d4:4b:c6:aa:73:ce:46:2a:0f:5c:36:
f2:a3:d2:4b:02:48:91:2b:82:6f:6d:eb:a2:3e:16:21:02:c6:
93:0b:64:8b:68:73:ad:3e:89:79:d9:6e:11:6d:23:06:2f:a8:
bb:e4:36:52:98:e9:42:8a:c6:f0:15:57:c7:6d:8a:f2:f7:66:
58:1f:db:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:12 2026 by rpki-client