Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
File: CfJr1vRoN-Cv2Vidh478PsiWfwI.mft (raw, json)
Hash identifier: KdJiao0IR04WHXE1201zCTTtXqeDSAJqfepDFPRI/p0=
Subject key identifier: 93:2A:1F:94:12:2D:63:23:4D:F8:50:46:31:F8:53:6B:AC:B9:4D:1B
Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
Certificate issuer: /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Certificate serial: 019E29948082F3C9EBFCF449EC2F60A685BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
Manifest number: 1654
Signing time: Fri 15 May 2026 03:00:58 +0000
Manifest this update: Fri 15 May 2026 03:00:58 +0000
Manifest next update: Sat 16 May 2026 03:00:58 +0000
Files and hashes: 1: CfJr1vRoN-Cv2Vidh478PsiWfwI.crl (hash: UUjIXJqsCShgGmF8d7BSrZlc/Js6xaWsS+APPUSrCR0=)
2: VFkF_gxwqOLJ92XDVRj4P0SgEao.roa (hash: Wjt9QdwBOWPZNtbiGNmLCWVPtfz89jktbtlEjzpW8gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:94:80:82:f3:c9:eb:fc:f4:49:ec:2f:60:a6:85:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Validity
Not Before: May 15 03:00:58 2026 GMT
Not After : May 16 03:00:58 2026 GMT
Subject: CN=932a1f94122d63234df8504631f8536bacb94d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7e:a2:16:47:db:e8:ff:ac:17:82:0b:dd:55:
65:7b:62:34:9b:8d:6b:61:a7:41:ad:f9:c9:8f:bc:
59:8b:ed:83:f2:2b:fe:f9:a5:c2:7a:67:13:2c:69:
04:c9:3a:ea:34:b3:82:68:2a:c4:2a:0a:11:c0:50:
67:7a:2a:cc:e6:7d:56:5d:fe:da:87:ee:d5:59:85:
30:23:0c:f5:54:3e:dd:9d:38:60:5b:86:5d:f2:d6:
ac:db:6d:a0:57:c9:14:35:7e:3e:73:b3:f6:f9:e4:
ab:92:32:13:8c:ed:1d:3c:73:4e:b1:52:cb:6b:1f:
0a:13:89:7f:bb:03:75:44:86:d0:1a:29:45:b9:38:
89:2e:cf:31:54:0c:93:40:5f:97:f6:d5:bb:c0:d9:
d5:a7:ff:9c:74:70:66:a4:cb:23:bd:a6:8b:3d:39:
28:37:c3:97:c3:36:99:e6:99:82:20:7f:ac:94:12:
4f:88:c0:b6:05:16:18:eb:a5:c8:c3:1b:50:f4:71:
5b:d3:f8:c0:cb:b3:f7:93:95:1a:5c:26:81:81:72:
12:b1:43:9d:43:02:25:cb:3e:f1:1c:59:45:df:f1:
53:59:06:39:9b:3e:7c:b1:61:28:34:8c:a3:26:27:
69:2b:8e:d8:5e:7a:f8:8b:56:d2:08:46:74:e5:ba:
bd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2A:1F:94:12:2D:63:23:4D:F8:50:46:31:F8:53:6B:AC:B9:4D:1B
X509v3 Authority Key Identifier:
keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a6:07:65:e9:bf:ef:b9:71:8a:1d:d6:de:27:b3:77:29:eb:
96:01:97:bd:57:a1:b2:cf:57:07:fc:64:5e:a4:39:c5:b7:9b:
a0:1e:95:e1:07:3d:fa:f0:73:1e:0a:5d:6d:43:d4:cb:c7:13:
ac:4f:6a:34:53:60:b4:46:48:d3:37:e2:86:ea:bf:2d:1c:1e:
18:85:9e:a9:66:c1:bf:9d:02:a4:22:12:d2:59:24:72:b7:2c:
a9:21:4b:c7:01:b6:68:fb:3b:42:dc:4d:db:89:20:e5:c9:43:
1f:97:15:ef:e5:66:77:8a:3e:05:4d:cc:49:ce:09:dc:55:8b:
68:8a:08:42:37:a5:dc:1c:6e:70:09:be:6e:3d:e0:52:7a:5a:
a6:6c:67:de:8b:f0:bf:89:5e:67:6f:8c:8b:c8:4e:2d:a9:1b:
92:3d:61:df:cd:06:dc:bb:0a:1c:b5:6a:24:3b:19:53:b9:7a:
4c:e9:80:53:cc:20:e9:15:8a:66:2a:5a:a7:73:7b:e5:21:f1:
6b:59:3c:69:42:95:2c:57:f6:9e:a4:a0:79:40:bc:78:b5:ff:
6b:03:8c:f8:29:32:7f:59:4b:e3:05:62:3c:69:9f:2b:ec:36:
83:4d:6e:28:6e:95:70:19:82:4e:b9:6f:a7:ac:f0:36:36:e9:
68:bb:ef:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:55:16 2026 by rpki-client