
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File: CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier: T3VqMx6ASVCIb7/Dlmxjj5TzlqKszU26lsnGXLmAeXg=
Subject key identifier: 09:85:D8:0B:B2:8C:61:C8:B0:D2:2C:8E:1C:65:27:DA:C6:91:DA:DF
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial: 019E30A9973378E64881A57EB03A3B850D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number: 0880
Signing time: Sat 16 May 2026 12:01:21 +0000
Manifest this update: Sat 16 May 2026 12:01:21 +0000
Manifest next update: Sun 17 May 2026 12:01:21 +0000
Files and hashes: 1: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: NSXLr0IYh8uCg/MPaaMPg44BjvDPRJ/BkdOUbPDxNyY=)
2: u8VLd__LhC89PUm-bBou8g1XjCk.roa (hash: FAOfHdJRje+Re0ts4CPoL2wF4WdKlrbROQeiewEd2a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:97:33:78:e6:48:81:a5:7e:b0:3a:3b:85:0d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Validity
Not Before: May 16 12:01:21 2026 GMT
Not After : May 17 12:01:21 2026 GMT
Subject: CN=0985d80bb28c61c8b0d22c8e1c6527dac691dadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:75:84:b6:8b:ef:9d:c4:5d:41:fa:ca:90:7c:
2c:0a:49:7c:a7:ef:33:e8:ce:f0:06:34:ff:5c:e1:
32:45:a1:a9:64:cb:5d:00:07:4e:63:8a:b9:b3:4e:
f9:b5:99:4b:41:b7:37:bf:63:54:d2:3e:8a:14:46:
96:3f:b9:6e:b1:db:2c:83:7c:d2:53:ad:a4:0b:5b:
e5:0c:a4:33:2c:58:a3:80:58:a5:44:97:f6:16:ed:
df:41:7d:9f:c1:b2:87:d9:f4:63:12:c8:67:fa:92:
c8:a6:e0:51:be:3e:ed:6a:c6:fc:51:e4:b7:6f:10:
7c:64:17:48:d4:87:e8:c3:3a:f0:1d:9b:bd:27:7d:
fc:33:ca:cf:64:9c:29:cf:1b:56:d5:d0:92:7e:7f:
64:6e:aa:9b:c4:f1:50:86:12:29:20:57:42:e9:3f:
9e:1f:b7:73:50:a0:e0:95:4f:47:d1:be:07:37:6b:
03:4e:18:95:61:25:75:f9:c8:a1:af:aa:3e:f0:f6:
a4:5d:ce:2b:a7:6a:97:3b:be:ad:bd:f4:66:48:25:
43:0d:a1:8a:fb:c3:78:e4:fc:ea:85:8f:21:ba:b6:
7a:1e:98:3b:a4:59:e4:8b:23:7e:d8:f7:dc:22:b6:
86:85:fa:16:f8:ca:94:d6:bc:6e:3d:30:de:2b:ad:
28:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:85:D8:0B:B2:8C:61:C8:B0:D2:2C:8E:1C:65:27:DA:C6:91:DA:DF
X509v3 Authority Key Identifier:
keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2d:fd:1b:57:73:82:35:cb:3a:e3:6a:bd:41:2a:e6:8c:53:
ff:ce:e1:8f:2a:c9:2c:b8:83:1c:af:a2:2a:13:07:19:9d:e1:
e0:ad:7e:30:11:05:7f:84:e3:53:88:b8:31:a1:0c:14:47:28:
59:15:97:d9:83:8f:f8:27:bb:be:9c:d5:8c:d5:26:48:df:62:
ea:83:f7:0b:87:89:f5:24:2f:c4:08:36:87:00:ac:53:03:09:
8d:31:2e:53:83:73:76:fb:37:82:50:60:41:ff:a1:db:a5:80:
9b:9d:ba:87:dd:71:cc:0a:e7:a2:d9:2f:f4:5d:b3:59:02:c4:
41:56:d7:73:e5:92:67:8e:c1:2d:30:ed:e2:5c:59:8a:85:e4:
94:18:26:91:69:db:e7:05:e0:69:eb:72:ba:09:e4:59:d5:51:
4c:5c:d5:a6:61:b7:80:89:7e:60:7a:49:41:cf:dd:81:f4:04:
64:87:2a:c4:71:ea:47:24:96:7f:a9:58:f6:cc:7b:95:22:2d:
2e:59:00:e3:47:c0:a8:9f:2c:25:95:e3:c2:cf:d0:68:62:35:
72:39:31:96:f4:d5:ba:fa:6d:9e:88:63:97:d1:d9:0d:43:fd:
74:a1:c3:10:1b:80:52:03:99:b2:b4:bd:81:7f:c4:7c:a4:99:
f5:1a:e8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:29 2026 by rpki-client