Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File: CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier: ab5lWCS36HiQxjv0U9qXeIFGklKVYuQQP/MmgQh76zE=
Subject key identifier: 16:71:74:FE:B3:60:F0:5E:AB:94:38:EE:C3:D9:42:1D:D9:8B:EC:10
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial: 019F1867684A71AF7B8A0E80FAB3DBA9D60A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number: 08F8
Signing time: Tue 30 Jun 2026 12:00:57 +0000
Manifest this update: Tue 30 Jun 2026 12:00:57 +0000
Manifest next update: Wed 01 Jul 2026 12:00:57 +0000
Files and hashes: 1: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: kJ2E7X+em9SZaANr6OJ6CJA1JC3zcAwi9x9tJvIIbrU=)
2: u8VLd__LhC89PUm-bBou8g1XjCk.roa (hash: FAOfHdJRje+Re0ts4CPoL2wF4WdKlrbROQeiewEd2a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:68:4a:71:af:7b:8a:0e:80:fa:b3:db:a9:d6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Validity
Not Before: Jun 30 12:00:57 2026 GMT
Not After : Jul 1 12:00:57 2026 GMT
Subject: CN=167174feb360f05eab9438eec3d9421dd98bec10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7f:cf:ba:d7:34:e6:69:a0:3b:0d:1d:e8:3d:
62:f5:f6:11:e6:19:ba:22:a6:ef:2b:df:40:82:b0:
6e:3a:e3:ac:09:4c:40:22:b4:19:bb:d2:be:0e:96:
73:94:0d:2b:6f:93:37:ba:ac:65:8e:15:0f:4a:83:
b1:f1:81:fd:8f:3c:60:42:c9:f5:d2:98:0f:ce:44:
52:17:cb:39:cc:47:b9:4f:0d:48:78:41:22:53:7d:
29:9c:a7:fa:a5:86:7a:4c:08:d4:dd:4e:0f:29:c4:
a1:c1:72:89:41:ae:9c:d4:51:f4:75:86:2f:6d:3e:
3c:13:b7:6b:00:6e:c7:a8:be:ce:8c:f8:73:75:7f:
c9:07:c9:3b:68:fd:42:51:f7:2b:7c:19:3d:7b:40:
1c:c0:20:a5:51:31:57:7b:9b:ba:16:68:57:12:55:
ef:7f:3f:93:82:7a:96:c5:ad:4f:c9:55:8f:33:07:
4d:11:3c:ba:08:89:36:08:72:5e:af:3d:d0:a1:8c:
14:5b:17:85:9c:a2:19:8b:19:21:04:a0:7b:4e:21:
2d:c3:16:2c:ee:21:33:bd:13:19:67:52:28:38:37:
33:79:2c:a3:94:b9:e3:d0:47:a8:af:4b:5b:16:c5:
7b:61:54:49:00:36:bc:e9:49:60:de:09:e4:49:46:
7c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:71:74:FE:B3:60:F0:5E:AB:94:38:EE:C3:D9:42:1D:D9:8B:EC:10
X509v3 Authority Key Identifier:
keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0a:5d:37:c8:1f:f7:e5:87:66:d7:8c:42:2f:66:05:64:54:
25:9f:8e:f7:4e:d9:ad:b6:88:43:55:1c:cc:f0:2e:e4:e4:85:
5c:01:38:a7:aa:e9:17:9c:91:8a:e3:ac:05:71:98:ce:eb:06:
fb:19:4e:da:3d:ff:f6:22:35:dd:72:2c:e5:45:9b:be:40:d4:
67:0b:73:4e:02:93:03:e1:08:d8:e9:18:5f:c0:5b:09:b2:65:
1c:3f:98:72:b9:e4:30:da:6e:95:e6:b3:12:39:e7:f8:2c:38:
fb:7e:61:89:bb:e6:a6:e9:c9:0c:58:3c:b5:be:b8:af:0a:7a:
eb:a4:dd:0d:f6:06:dd:ec:af:21:2f:94:b3:a6:ee:83:1b:e2:
bc:f3:4a:28:d3:94:6d:3a:5f:af:50:3d:72:bb:4d:e6:09:24:
a2:b4:46:eb:e0:a8:72:e6:f6:9f:ed:10:cf:8e:ee:b2:85:a6:
a0:f6:82:8d:71:00:3c:58:da:89:31:b7:79:e8:ad:fd:a8:4e:
e6:3b:3b:1e:ca:f4:e3:c9:1c:3c:28:06:33:29:34:41:3a:ad:
69:f0:5d:77:64:66:06:df:e6:d3:c9:d1:99:7d:ab:32:76:56:
30:e0:b3:84:fb:1e:88:5b:37:a0:0e:0f:a4:93:89:9b:02:bc:
f7:5a:2a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:19:06 2026 by rpki-client