Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
File: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft (raw, json)
Hash identifier: e+JEj56T/W9U7Owzhxugm7j9DXAykZnIEx7nsohoNP4=
Subject key identifier: D6:26:76:E6:14:82:E9:B6:27:BC:A1:E3:F9:37:C5:F4:5A:6B:86:91
Authority key identifier: 08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
Certificate issuer: /CN=08f2eb8fb02e87e7184337b245af99e3133ef524
Certificate serial: 01A13CA51ED585142DCF207BB005731B5221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
Manifest number: 1AA1
Signing time: Wed 14 Oct 2026 23:00:16 +0000
Manifest this update: Wed 14 Oct 2026 23:00:16 +0000
Manifest next update: Thu 15 Oct 2026 23:00:16 +0000
Files and hashes: 1: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl (hash: u4sYt3HNxA/elsGhWETSG0iTNCMLzcb+uC1q18PYGNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:1e:d5:85:14:2d:cf:20:7b:b0:05:73:1b:52:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f2eb8fb02e87e7184337b245af99e3133ef524
Validity
Not Before: Oct 14 23:00:16 2026 GMT
Not After : Oct 15 23:00:16 2026 GMT
Subject: CN=d62676e61482e9b627bca1e3f937c5f45a6b8691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:2d:ac:67:a1:e3:66:07:7d:8c:66:87:a1:
ae:19:cf:3e:91:2a:d2:5f:5a:d9:43:52:47:cc:ae:
84:b2:a8:d2:4c:3f:9d:c7:a6:a5:e2:10:69:50:1c:
f1:0a:1c:91:f2:09:ec:8d:19:7a:ae:c1:3c:fd:e1:
ff:6c:5e:44:3a:bc:cc:7c:b5:8c:90:b1:38:a7:b1:
16:c4:f4:f3:c1:2f:56:d0:eb:a5:5d:21:22:cb:5f:
cb:41:df:80:87:9e:f3:e0:42:3b:c7:78:7d:9c:8c:
ce:98:c8:47:54:8f:1c:90:52:1a:cf:cd:82:d7:89:
77:85:a1:3b:c9:62:31:3d:6e:d8:db:fd:97:c6:bb:
9f:6a:44:8c:32:e1:cd:31:35:fe:60:57:2d:ab:a4:
14:12:2b:d0:a1:dd:48:f3:c1:cc:3a:aa:40:7a:d7:
26:a6:1f:12:43:57:6f:c1:1a:a3:69:ab:aa:53:78:
9a:46:34:c7:38:c2:fe:02:f2:77:ff:54:9b:f1:6c:
45:db:b6:10:a0:9a:75:e9:44:f0:82:74:f6:68:d9:
74:d0:28:1d:1e:6e:29:99:fe:16:ee:54:39:bb:c8:
f5:d7:30:21:d0:be:2f:4f:2c:c9:ea:aa:dd:cb:a5:
e5:8a:9d:72:56:ba:6c:94:74:00:b9:9f:1a:eb:3a:
fc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:26:76:E6:14:82:E9:B6:27:BC:A1:E3:F9:37:C5:F4:5A:6B:86:91
X509v3 Authority Key Identifier:
keyid:08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9e:a8:1e:ee:42:b0:dc:f2:cd:59:c9:aa:e5:d4:6c:d0:ef:
43:c2:1a:04:68:7c:66:8e:46:0b:eb:4d:cc:c6:43:d0:8c:3c:
e3:9e:6b:a0:a0:da:cc:d9:a3:89:32:5b:0c:e6:81:8a:c1:4c:
e0:31:07:49:e6:e5:b8:56:44:5d:84:e4:03:fb:93:08:d9:74:
95:aa:9d:4b:7f:ce:ff:de:45:cb:92:76:45:da:d5:a7:25:88:
b9:41:21:c2:f3:ef:9e:7d:72:a2:e9:fe:94:2f:73:86:79:48:
57:d7:2e:1b:23:f2:ba:a5:62:db:de:14:68:08:a3:8d:26:54:
0d:d6:a1:0b:7d:96:28:10:5b:22:c3:96:b8:0c:d5:53:8d:ea:
8c:cf:8f:44:9b:0f:e8:3e:d2:b9:8a:8c:58:e4:33:21:53:94:
44:2a:21:b0:63:e6:15:57:8b:9d:b2:fb:53:06:fe:b3:76:c1:
85:42:58:e4:2e:f5:f4:f6:de:ba:e0:96:e9:b7:da:e4:4e:85:
23:5d:6c:5c:0d:10:26:d0:93:75:94:00:8d:17:43:8e:5f:88:
54:ee:7b:29:cc:7e:32:3b:08:08:60:5d:97:ab:81:89:90:6b:
b9:ff:2b:7a:4c:02:2a:a0:a0:bc:73:ce:bd:71:47:09:f9:f6:
ab:2d:25:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:07:59 2026 by rpki-client