Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
File: CFl4byJsttSQv7VClOYRp9Uajx4.mft (raw, json)
Hash identifier: QnCOCu0utKuKmMSG/5hTVJVKjE5oZGIiqoxV9npsusY=
Subject key identifier: FD:CF:56:4A:AD:B0:51:1E:85:96:D8:52:33:E2:48:E7:D4:70:31:D5
Authority key identifier: 08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
Certificate issuer: /CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Certificate serial: 019E30A9A444F97A0D9E9F9BCBDE6E728EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
Manifest number: 1914
Signing time: Sat 16 May 2026 12:01:24 +0000
Manifest this update: Sat 16 May 2026 12:01:24 +0000
Manifest next update: Sun 17 May 2026 12:01:24 +0000
Files and hashes: 1: CFl4byJsttSQv7VClOYRp9Uajx4.crl (hash: mzHhzBUpVvvCqqkr0ODrT4QTKeWziBljd12Bo62cuNI=)
2: Ut0-uMPrTscTaYNN4M5f0UoNfFM.roa (hash: Q8bHgGbUawg5ahVwAK4zt6L7o0niif+XBKxRalI2OOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:a4:44:f9:7a:0d:9e:9f:9b:cb:de:6e:72:8e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Validity
Not Before: May 16 12:01:24 2026 GMT
Not After : May 17 12:01:24 2026 GMT
Subject: CN=fdcf564aadb0511e8596d85233e248e7d47031d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:22:8a:62:f4:87:dc:0f:95:59:3d:dc:ed:
e7:f2:81:ad:aa:5f:e2:62:ad:77:7d:2f:31:73:74:
8b:a9:6e:23:ed:32:e8:4c:92:d9:e8:aa:2a:93:f5:
c2:d4:56:46:bf:01:e9:09:6a:1e:88:41:57:7f:b0:
86:83:cc:4f:0f:1d:67:d4:da:46:72:d4:4e:cc:d6:
f8:39:6c:79:98:4c:47:3e:37:5e:29:c9:6d:e9:37:
8a:9d:4d:97:09:01:64:b7:05:55:56:c8:34:6a:ee:
1e:61:18:9e:4c:6a:7f:e5:7d:dd:18:50:54:16:b0:
a7:40:64:e9:29:59:50:2e:b0:ef:6e:94:e7:0e:72:
c8:4b:47:cf:0b:7f:5b:88:7b:bc:74:43:2d:d7:47:
90:bd:bd:40:02:c2:b7:db:a4:c2:da:0f:da:68:ea:
94:a5:84:f3:76:94:3a:1c:0d:e0:f3:b3:f9:3d:b1:
65:be:c5:7d:41:55:10:19:89:25:c2:ba:62:18:9e:
23:8a:32:29:d4:1e:97:bf:d5:a5:7a:89:18:be:20:
b5:6e:f6:08:23:e0:58:a0:00:eb:a9:9c:41:6b:49:
3e:90:18:73:3e:1d:2c:ea:22:1a:d5:ba:b3:44:3d:
9d:98:7f:da:8d:af:01:2c:d0:03:61:ca:a8:6c:57:
3e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CF:56:4A:AD:B0:51:1E:85:96:D8:52:33:E2:48:E7:D4:70:31:D5
X509v3 Authority Key Identifier:
keyid:08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:18:34:47:91:e2:ae:37:21:99:3c:97:08:5a:e5:40:a5:e5:
be:62:66:89:d7:9f:f8:11:01:5f:53:f3:77:f2:12:b7:cd:cd:
2b:05:bf:38:77:3f:6e:fb:49:e5:ef:a1:bc:b7:69:94:2e:28:
df:77:c0:b0:8e:56:98:7f:3e:02:b8:e5:7d:21:d3:44:00:18:
10:58:5e:8c:7e:51:01:ed:7d:a8:99:12:b1:94:e5:b3:87:8b:
e1:e1:09:81:06:9f:7d:57:0b:74:e9:79:62:1a:f5:fe:09:3b:
19:f2:50:22:09:82:5f:48:61:83:09:83:f7:ed:4f:d2:00:05:
f2:c4:c5:e9:f4:0b:b6:b2:fc:86:3f:20:29:36:45:c9:b4:9e:
0d:e2:5d:ab:bb:d8:97:ba:79:9d:09:d3:96:1f:85:67:bd:5b:
6c:81:70:23:6c:1c:0f:e9:63:4f:f7:0c:6a:38:af:61:50:5b:
15:39:20:0a:96:f9:42:19:8f:ea:af:9f:b0:47:90:60:08:a0:
b6:47:9e:34:1b:5a:0d:27:9f:73:56:c7:ee:35:9e:34:c8:b2:
28:54:4d:cf:cd:af:31:33:a8:f6:f1:bb:4a:b2:39:d8:eb:12:
21:34:a4:49:fe:c1:cc:5c:01:75:eb:91:4e:a8:e5:24:3a:ba:
4c:b8:02:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:23:51 2026 by rpki-client