Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File: CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier: /wKtgZXnk7vSOGqwZQmEPAhiS6t0tMB8/Xh6mVf94fQ=
Subject key identifier: FD:7E:00:94:56:27:6A:2E:C1:25:78:8D:BE:D0:4D:A1:38:D4:1D:94
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial: 01A00025439B295879F6CDC296BE826DC6EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number: 0970
Signing time: Fri 14 Aug 2026 12:00:37 +0000
Manifest this update: Fri 14 Aug 2026 12:00:37 +0000
Manifest next update: Sat 15 Aug 2026 12:00:37 +0000
Files and hashes: 1: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: lCNSxFG97dlX7KmGO+eZpsCszkKDP2OAj6R6Ml847+I=)
2: u8VLd__LhC89PUm-bBou8g1XjCk.roa (hash: FAOfHdJRje+Re0ts4CPoL2wF4WdKlrbROQeiewEd2a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:43:9b:29:58:79:f6:cd:c2:96:be:82:6d:c6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Validity
Not Before: Aug 14 12:00:37 2026 GMT
Not After : Aug 15 12:00:37 2026 GMT
Subject: CN=fd7e009456276a2ec125788dbed04da138d41d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:22:ec:df:94:81:3e:7d:55:4e:d1:89:e3:
03:e1:8d:bb:c6:05:f4:0d:46:8f:f1:56:ee:37:8b:
a4:e0:d9:6e:e9:0c:fe:cb:fe:02:38:82:6a:5b:58:
c4:db:f9:ff:81:78:a1:c1:f1:c7:e4:a6:c9:14:55:
28:c9:b5:57:98:c0:37:75:a7:5f:7c:b1:7d:93:84:
fb:85:bc:6d:50:4c:c4:d7:25:94:dc:16:df:ae:ff:
85:c0:d7:b2:39:9f:d9:e0:5c:02:f1:ce:d4:9a:c2:
f6:1a:1e:5f:58:98:75:ef:5e:46:aa:ea:2c:74:05:
41:a4:48:7f:7c:55:f2:bb:3a:bb:c1:9b:8a:a2:a8:
c8:74:c2:d4:f9:e9:f3:c9:87:68:02:54:3b:23:25:
de:90:17:67:68:07:6d:df:63:26:76:79:f2:f4:95:
af:e5:f3:81:74:06:a1:03:4d:a6:12:22:97:1b:53:
11:cd:0a:9f:ca:36:93:c8:47:a9:66:04:63:ac:86:
e6:ac:da:c5:b4:00:04:dd:44:6e:1a:fd:87:ae:39:
25:aa:2f:9a:de:44:9f:c2:17:7c:98:d1:bb:64:f8:
36:94:c6:56:b8:f4:66:df:6d:bd:4f:90:85:59:22:
f8:a8:b5:92:58:b4:ab:71:6c:08:cb:d4:d7:a8:9d:
fb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7E:00:94:56:27:6A:2E:C1:25:78:8D:BE:D0:4D:A1:38:D4:1D:94
X509v3 Authority Key Identifier:
keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:7d:97:e2:4a:ca:37:ef:c8:80:40:10:1c:b4:12:9e:f2:ca:
34:c6:1c:59:35:7c:82:62:3c:48:c7:0d:93:2d:77:0d:66:43:
bd:8b:4c:94:07:df:1a:5f:5a:9f:00:a2:79:a8:4e:e3:05:8a:
22:16:b9:44:bf:33:2e:ef:1b:10:97:28:1e:3b:cc:e4:2a:bc:
e1:38:d2:d7:fa:13:2b:9c:c0:78:5d:f6:e6:72:71:b5:f2:37:
82:a0:31:22:04:d7:60:41:31:be:db:ca:16:06:2f:b1:38:d6:
6b:76:90:f3:16:23:66:1b:78:ec:b2:db:d7:1c:fd:c4:cb:98:
cf:da:0d:e9:c0:91:b3:15:62:ed:0e:9a:1e:d7:d1:5d:9a:12:
f7:dd:6d:7c:b5:ed:f4:c5:b7:48:f4:d7:68:2f:39:99:0f:9d:
21:6c:f6:3c:bd:c4:6a:81:bb:d7:4b:e6:ed:a2:04:aa:46:23:
25:92:3f:22:e8:c0:c0:29:c4:30:84:44:bb:90:e0:57:73:ff:
ba:96:71:c3:20:bb:ac:52:29:aa:0e:d7:4d:5f:3e:28:da:c4:
40:9a:6f:19:23:36:0d:31:ce:80:83:5e:b8:fb:80:9b:ae:66:
a6:c2:e3:73:2b:d0:78:1e:45:bc:bb:5b:cc:63:b6:ad:e9:de:
2d:89:30:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:27 2026 by rpki-client