Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File: CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier: qj7FjJt9LLg8zmA1KTh6RkZujZV6RZ5eVbiVimfoSqs=
Subject key identifier: E1:C1:57:3F:FA:85:7D:BF:8D:42:43:8A:99:AE:8D:25:D8:C3:4D:D2
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial: 019D397812C2D667D2E11FD205DE61DA7EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number: 0800
Signing time: Sun 29 Mar 2026 12:01:03 +0000
Manifest this update: Sun 29 Mar 2026 12:01:03 +0000
Manifest next update: Mon 30 Mar 2026 12:01:03 +0000
Files and hashes: 1: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: bbiIyC+71gBIfc8xsaBX4bEsv7x5DatnoT7uUJFkhVw=)
2: u8VLd__LhC89PUm-bBou8g1XjCk.roa (hash: FAOfHdJRje+Re0ts4CPoL2wF4WdKlrbROQeiewEd2a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:12:c2:d6:67:d2:e1:1f:d2:05:de:61:da:7e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Validity
Not Before: Mar 29 12:01:03 2026 GMT
Not After : Mar 30 12:01:03 2026 GMT
Subject: CN=e1c1573ffa857dbf8d42438a99ae8d25d8c34dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:38:ea:d1:8b:06:b3:78:3e:0b:56:91:40:af:
4c:3e:0c:f8:d8:49:ef:cd:63:79:0a:97:05:04:e5:
a2:53:2f:aa:7e:c5:47:ac:6c:06:fe:20:c1:42:6c:
4d:cd:d4:26:33:a8:20:3c:67:9c:26:4d:76:f7:ab:
59:17:2c:a5:ed:b8:84:a3:be:4c:fd:5b:53:59:46:
26:58:1c:44:55:61:80:65:fb:4a:6c:39:15:f8:4a:
29:b2:30:bd:14:96:47:93:68:7f:3e:23:49:29:f3:
63:cd:74:e0:de:5d:36:42:9d:2c:7c:4a:d7:a8:47:
11:9f:54:cb:f7:8d:5d:c5:88:29:7b:d1:a6:9b:c7:
b2:5b:44:de:58:c2:50:da:8c:c2:24:d5:1b:f4:c4:
fa:6e:35:1a:19:50:b9:0d:ba:9c:a5:6e:dd:ec:fe:
12:59:01:04:4c:64:8a:f5:ae:42:77:98:8c:2a:ec:
05:ff:65:10:83:7c:20:b5:55:e6:ee:d7:08:4c:0a:
20:69:2c:8c:18:89:a9:bb:b5:85:6f:42:bf:4b:9b:
a3:a6:15:b2:f9:19:b6:02:9b:ee:01:e3:b4:7f:33:
22:a0:f0:d8:a9:d3:c1:86:a6:21:e2:11:13:e9:07:
24:f8:45:33:80:6a:28:3e:e7:0b:6c:0f:d6:b0:41:
7c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C1:57:3F:FA:85:7D:BF:8D:42:43:8A:99:AE:8D:25:D8:C3:4D:D2
X509v3 Authority Key Identifier:
keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:20:ca:88:e2:c6:a3:e3:d8:0b:91:3c:d8:8d:2d:60:8a:47:
f3:c2:47:a8:48:59:08:9c:9f:0e:ec:56:99:89:6a:0b:4b:b2:
79:45:df:fa:6d:95:20:39:a9:8e:ee:60:4c:97:60:45:91:1f:
94:01:cc:a5:94:82:54:c9:30:4f:5d:2a:c3:87:b3:e9:c9:e1:
a7:28:d4:7c:97:5b:b3:8b:d7:96:c7:2d:b4:f0:0b:4a:74:4c:
0d:06:72:4a:66:9c:8a:e1:c2:b0:7c:ca:d1:cf:86:b5:01:1b:
97:4a:fd:f3:db:f7:83:f1:36:bf:3f:8f:72:51:5e:e3:4f:b8:
4b:67:5b:0f:e5:4a:ef:ca:c1:a3:54:e7:8a:dd:12:9c:b7:b6:
1a:eb:43:c9:86:20:f4:0f:c5:1e:ea:16:09:f6:44:63:33:a9:
1b:17:c1:bf:70:06:5d:a9:c5:22:53:94:63:61:4c:1a:a4:b2:
60:d4:5a:4e:c1:a4:e1:fb:1a:aa:0d:07:3d:83:c4:bc:31:86:
d8:e6:6d:bf:81:74:d7:82:db:75:41:b1:48:ee:12:34:93:76:
25:5c:bb:26:c1:97:e1:d7:f6:b6:44:7f:8c:8f:f5:79:21:91:
49:d3:6b:ca:3a:1b:91:4a:eb:25:c1:6c:3d:11:ac:86:da:05:
eb:6a:af:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05eBLC1mfS4R/SBd5h2n70MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NTc4N2U2NWViNGZjZDY2ZTMzNDBiNjJhZGU0N2NhMDA5
MTlkY2UwHhcNMjYwMzI5MTIwMTAzWhcNMjYwMzMwMTIwMTAzWjAzMTEwLwYDVQQD
EyhlMWMxNTczZmZhODU3ZGJmOGQ0MjQzOGE5OWFlOGQyNWQ4YzM0ZGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jjq0YsGs3g+C1aRQK9MPgz42Env
zWN5CpcFBOWiUy+qfsVHrGwG/iDBQmxNzdQmM6ggPGecJk1296tZFyyl7biEo75M
/VtTWUYmWBxEVWGAZftKbDkV+EopsjC9FJZHk2h/PiNJKfNjzXTg3l02Qp0sfErX
qEcRn1TL941dxYgpe9Gmm8eyW0TeWMJQ2ozCJNUb9MT6bjUaGVC5DbqcpW7d7P4S
WQEETGSK9a5Cd5iMKuwF/2UQg3wgtVXm7tcITAogaSyMGImpu7WFb0K/S5ujphWy
+Rm2ApvuAeO0fzMioPDYqdPBhqYh4hET6Qck+EUzgGooPucLbA/WsEF8OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHBVz/6hX2/jUJDipmujSXYw03SMB8GA1UdIwQY
MBaAFAhXh+ZetPzWbjNAtireR8oAkZ3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0ZlSDVsNjBfTlp1TTBDMkt0NUh5Z0NSbmM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9kMmJiZjYtM2I2OS00NDJlLWI0OTAt
N2U1NGMzMmFiZWQ4LzEvQ0ZlSDVsNjBfTlp1TTBDMkt0NUh5Z0NSbmM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9kMmJiZjYtM2I2OS00NDJlLWI0OTAtN2U1NGMzMmFiZWQ4
LzEvQ0ZlSDVsNjBfTlp1TTBDMkt0NUh5Z0NSbmM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMiDKiOLG
o+PYC5E82I0tYIpH88JHqEhZCJyfDuxWmYlqC0uyeUXf+m2VIDmpju5gTJdgRZEf
lAHMpZSCVMkwT10qw4ez6cnhpyjUfJdbs4vXlscttPALSnRMDQZySmaciuHCsHzK
0c+GtQEbl0r989v3g/E2vz+PclFe40+4S2dbD+VK78rBo1Tnit0SnLe2GutDyYYg
9A/FHuoWCfZEYzOpGxfBv3AGXanFIlOUY2FMGqSyYNRaTsGk4fsaqg0HPYPEvDGG
2OZtv4F014LbdUGxSO4SNJN2JVy7JsGX4df2tkR/jI/1eSGRSdNryjobkUrrJcFs
PRGshtoF62qv8Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:59 2026 by rpki-client