Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
File: cFngOgjhdBb2ZUYweYg0mZG4Si4.mft (raw, json)
Hash identifier: 2rD7UzO1LyYLMW50mIFVzUbXQx0vDYebsZhpjTgiF38=
Subject key identifier: 7C:DE:5F:71:61:CC:8E:02:C1:D7:32:1A:70:58:EF:A2:3F:A9:C9:A2
Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
Certificate issuer: /CN=7059e03a08e17416f66546307988349991b84a2e
Certificate serial: 01A0D56FB9DD8BD9D0BD6CD1CDB934CBBF62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 22:01:03 +0000
Manifest this update: Thu 24 Sep 2026 22:01:03 +0000
Manifest next update: Fri 25 Sep 2026 22:01:03 +0000
Files and hashes: 1: CYB5NwO37zuvRkWMcW3-BtkYVGo.roa (hash: LInHSGK/8qAq0sJn+JLYwieGEDcam0azNXlnsLsToP8=)
2: _GSS7SJcNRk5v2vKpj-91_QngG8.roa (hash: WRLHRWQSGtnWOjdrbpDdHkWnLB1hXZNo4bQD6Y6g7rg=)
3: cFngOgjhdBb2ZUYweYg0mZG4Si4.crl (hash: O0Zo8wIYscxO0q2O8vgZOgcMtLrT8Dp27zgxBOqWJA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:6f:b9:dd:8b:d9:d0:bd:6c:d1:cd:b9:34:cb:bf:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7059e03a08e17416f66546307988349991b84a2e
Validity
Not Before: Sep 24 22:01:03 2026 GMT
Not After : Sep 25 22:01:03 2026 GMT
Subject: CN=7cde5f7161cc8e02c1d7321a7058efa23fa9c9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6c:7e:5c:62:4e:fd:9f:3e:47:0f:cc:13:2f:
31:d3:ca:5f:5e:18:2a:d4:71:0a:40:20:ee:5d:11:
a9:e5:0e:4a:fb:a1:ce:6b:6b:6f:63:f9:3b:c8:d4:
7e:84:e1:49:6b:a8:28:95:32:5d:75:26:ff:06:41:
7e:0b:e4:4b:09:38:f4:59:ff:5c:01:6e:03:6d:8a:
df:d4:f4:81:32:ae:6d:6c:94:f4:b4:93:90:ac:f9:
ed:c8:1c:7d:fd:48:11:34:7b:3a:b6:6c:50:0a:14:
2f:f5:72:7d:88:b0:e5:15:84:70:bc:83:2a:e0:45:
8e:11:34:df:fe:d0:a8:52:7b:bd:ff:e2:96:b3:d8:
aa:6d:f7:66:ae:2a:a8:cf:b4:04:3c:28:17:8f:d7:
03:fe:68:8f:38:5a:5c:29:6d:c1:d5:67:42:2b:8c:
eb:4f:ac:67:60:0d:e8:0e:e0:f4:4a:41:9f:a9:21:
a6:f7:cd:7b:08:ae:fc:35:89:fd:72:f6:b3:92:d9:
1b:cc:9f:19:01:6d:f2:d1:f3:68:8d:cd:03:48:a8:
a6:e5:4a:22:aa:30:66:f3:56:90:5d:ac:d8:73:e1:
f6:4f:7d:82:66:12:70:58:b0:f4:06:3c:59:2e:dd:
00:59:e0:94:61:25:d3:20:a1:74:77:06:0d:d9:c0:
82:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DE:5F:71:61:CC:8E:02:C1:D7:32:1A:70:58:EF:A2:3F:A9:C9:A2
X509v3 Authority Key Identifier:
keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a0:33:50:38:d7:12:d1:0d:39:16:75:9f:59:32:cd:f9:c6:
bd:06:c1:ee:70:1b:ac:1f:95:1b:2a:fa:6a:5f:aa:c6:ab:fc:
fb:0b:bc:ee:12:de:d5:d8:a5:be:26:07:53:8c:00:4a:f4:7d:
ce:00:28:12:cf:60:b6:1e:ab:bf:02:18:b9:82:b5:de:09:a6:
78:c2:2c:ee:d8:18:d3:9c:1a:65:24:f5:6a:c3:be:3a:ed:e0:
5d:b0:65:f8:d5:39:fd:d0:03:f7:af:91:7d:0c:3e:9d:9a:70:
f6:8c:a5:03:09:06:92:61:0d:b4:c6:a0:05:cc:da:eb:08:2e:
b9:92:1d:9d:e8:75:58:28:6e:5a:35:e6:d2:4d:2d:6d:ef:08:
c3:3e:cd:c4:5e:ca:b0:bb:10:d9:f7:6b:fc:d8:5b:0f:2c:33:
c3:7d:4c:fe:d3:5e:b6:a5:a4:57:c0:a1:e2:a7:7f:e8:37:49:
88:6c:e3:d0:79:72:dd:2e:19:f2:4f:f4:45:fa:48:9c:b6:b4:
27:d0:f6:8b:15:10:87:92:fb:17:6f:7c:9f:d3:a4:34:99:90:
ed:cc:6b:45:3b:e5:51:f2:30:39:8f:23:69:d5:ca:24:0d:1f:
c9:79:1a:8b:62:51:23:a5:e3:bd:0c:aa:92:1f:71:3d:cb:ab:
37:b8:ce:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:57:37 2026 by rpki-client