
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File: CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier: YmxyN+hjP5IhCXLCVPJwYap1m5ALkK4R1dVkpWs0uDg=
Subject key identifier: EE:00:0D:23:BE:AA:0F:EE:50:77:EA:2C:58:3D:7F:93:49:14:D8:12
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial: 01A13ECB9415BC867D2EFEF0AA276616F3AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number: 0A15
Signing time: Thu 15 Oct 2026 09:01:31 +0000
Manifest this update: Thu 15 Oct 2026 09:01:31 +0000
Manifest next update: Fri 16 Oct 2026 09:01:31 +0000
Files and hashes: 1: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: aWBGCLa8VNNXWwhHEIU1/xCfQtNRStHSbeRl9omr8qk=)
2: u8VLd__LhC89PUm-bBou8g1XjCk.roa (hash: FAOfHdJRje+Re0ts4CPoL2wF4WdKlrbROQeiewEd2a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:94:15:bc:86:7d:2e:fe:f0:aa:27:66:16:f3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Validity
Not Before: Oct 15 09:01:31 2026 GMT
Not After : Oct 16 09:01:31 2026 GMT
Subject: CN=ee000d23beaa0fee5077ea2c583d7f934914d812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7e:c4:84:30:f9:25:7c:b6:25:12:d1:67:21:
7d:d8:12:19:19:a1:0e:66:8a:af:e2:fe:38:17:a8:
d0:69:d8:5c:5b:12:9d:5f:2c:b8:0e:d8:dd:bb:13:
15:13:73:65:5f:07:b8:08:c0:63:f4:d9:c6:56:6a:
3d:28:e4:eb:cc:b5:03:29:10:86:62:a1:ce:24:84:
da:0e:ca:7b:a2:e0:f7:38:9f:f8:f3:b7:ac:97:d1:
c5:98:bb:92:61:04:b6:bd:33:34:19:3a:24:a6:2b:
f4:82:ba:58:ea:39:a9:4c:63:6f:4c:70:2f:1e:9b:
3d:59:ee:7f:dd:0f:aa:28:03:e1:64:a1:f4:6c:26:
74:d3:b3:59:5e:ee:bb:61:00:54:87:13:7c:38:0c:
7e:42:9d:e5:78:f9:60:fa:4b:02:c8:e1:96:40:87:
59:e7:b6:e3:d7:a9:2c:b5:f7:d4:1d:63:cf:b3:77:
be:fb:67:43:95:a6:1c:29:ca:c3:3c:f3:9e:08:3b:
1c:6d:50:04:c3:65:76:e4:50:1a:c9:41:b3:dd:35:
b5:19:ce:9d:51:9a:24:af:1e:e6:82:8b:c6:d0:a8:
96:9c:c0:d4:b4:83:eb:48:50:06:5c:0b:26:42:20:
a5:70:15:16:7b:ed:db:c5:03:d9:60:50:4b:11:13:
5e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:00:0D:23:BE:AA:0F:EE:50:77:EA:2C:58:3D:7F:93:49:14:D8:12
X509v3 Authority Key Identifier:
keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:93:b7:a0:6a:07:58:98:0b:98:da:e5:5a:19:ac:2d:41:d9:
93:e6:e2:7a:7a:9f:6b:bf:69:97:31:d9:31:87:5f:f2:53:be:
89:d7:71:c7:02:4c:bc:16:05:8e:2d:95:dc:df:db:81:46:a6:
d4:86:b5:6c:0e:85:00:ee:b4:05:63:68:25:69:eb:10:9f:1a:
31:35:c6:12:8d:b9:a7:16:f7:02:0a:76:29:f5:fc:af:9d:a3:
1c:3f:fa:76:de:28:6b:24:62:1d:87:4e:6f:87:cc:3f:dd:1f:
cf:58:b5:fb:62:1d:1e:1f:d9:0c:80:ca:aa:f3:c9:e8:50:f5:
5f:40:cc:e6:b7:41:15:99:0f:cd:b4:eb:56:26:ff:dc:b1:a8:
3f:22:3d:cf:21:5d:83:75:b3:2f:1d:1e:81:c5:25:c4:2b:9d:
77:51:e9:0c:11:76:a6:5e:0d:bd:a1:bc:c7:d5:77:fe:33:c0:
3a:64:62:a6:11:71:63:29:76:8f:d5:d4:2b:41:f9:8a:e2:8b:
53:88:2b:51:f0:14:cb:a8:69:70:ff:d8:13:a2:2f:03:8f:0a:
9e:e1:9e:6b:f9:58:7e:29:d9:5b:5f:91:cd:27:74:4c:be:cc:
29:17:56:ec:64:e6:ae:53:64:36:3c:5a:a8:76:01:58:85:51:
99:b1:3e:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+y5QVvIZ9Lv7wqidmFvOrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NTc4N2U2NWViNGZjZDY2ZTMzNDBiNjJhZGU0N2NhMDA5
MTlkY2UwHhcNMjYxMDE1MDkwMTMxWhcNMjYxMDE2MDkwMTMxWjAzMTEwLwYDVQQD
EyhlZTAwMGQyM2JlYWEwZmVlNTA3N2VhMmM1ODNkN2Y5MzQ5MTRkODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX7EhDD5JXy2JRLRZyF92BIZGaEO
Zoqv4v44F6jQadhcWxKdXyy4DtjduxMVE3NlXwe4CMBj9NnGVmo9KOTrzLUDKRCG
YqHOJITaDsp7ouD3OJ/487esl9HFmLuSYQS2vTM0GTokpiv0grpY6jmpTGNvTHAv
Hps9We5/3Q+qKAPhZKH0bCZ007NZXu67YQBUhxN8OAx+Qp3lePlg+ksCyOGWQIdZ
57bj16kstffUHWPPs3e++2dDlaYcKcrDPPOeCDscbVAEw2V25FAayUGz3TW1Gc6d
UZokrx7mgovG0KiWnMDUtIPrSFAGXAsmQiClcBUWe+3bxQPZYFBLERNeMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4ADSO+qg/uUHfqLFg9f5NJFNgSMB8GA1UdIwQY
MBaAFAhXh+ZetPzWbjNAtireR8oAkZ3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0ZlSDVsNjBfTlp1TTBDMkt0NUh5Z0NSbmM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9kMmJiZjYtM2I2OS00NDJlLWI0OTAt
N2U1NGMzMmFiZWQ4LzEvQ0ZlSDVsNjBfTlp1TTBDMkt0NUh5Z0NSbmM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9kMmJiZjYtM2I2OS00NDJlLWI0OTAtN2U1NGMzMmFiZWQ4
LzEvQ0ZlSDVsNjBfTlp1TTBDMkt0NUh5Z0NSbmM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpO3oGoH
WJgLmNrlWhmsLUHZk+bienqfa79plzHZMYdf8lO+iddxxwJMvBYFji2V3N/bgUam
1Ia1bA6FAO60BWNoJWnrEJ8aMTXGEo25pxb3Agp2KfX8r52jHD/6dt4oayRiHYdO
b4fMP90fz1i1+2IdHh/ZDIDKqvPJ6FD1X0DM5rdBFZkPzbTrVib/3LGoPyI9zyFd
g3WzLx0egcUlxCudd1HpDBF2pl4NvaG8x9V3/jPAOmRiphFxYyl2j9XUK0H5iuKL
U4grUfAUy6hpcP/YE6IvA48KnuGea/lYfinZW1+RzSd0TL7MKRdW7GTmrlNkNjxa
qHYBWIVRmbE+iA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:21:47 2026 by rpki-client