Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
File: cFUm-asN0naCP8Hw66od5jt9ZWw.mft (raw, json)
Hash identifier: aT8OrorteaSGLSTegjVRz9MxaByf+/gGaW2vUnm7CDw=
Subject key identifier: 24:41:F9:CA:2B:2B:E7:96:0B:08:15:C3:00:5E:A7:04:60:BD:71:F5
Authority key identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
Certificate issuer: /CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Certificate serial: 019CAB6B56CA3DF5CABEF3858264487AACCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
Manifest number: 06AF
Signing time: Sun 01 Mar 2026 22:01:04 +0000
Manifest this update: Sun 01 Mar 2026 22:01:04 +0000
Manifest next update: Mon 02 Mar 2026 22:01:04 +0000
Files and hashes: 1: cFUm-asN0naCP8Hw66od5jt9ZWw.crl (hash: T0frtGWc5KKcf4IOz7Zwghi+IHrlmWEdHqzR+fBx0Yc=)
2: utX8EvzxjtNKF1hFOEPAnrUCzm8.roa (hash: klBKnxuMcoS0m9Xk0/1QlfvOXmiMTMvpWtNw0ziiP1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:56:ca:3d:f5:ca:be:f3:85:82:64:48:7a:ac:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Validity
Not Before: Mar 1 22:01:04 2026 GMT
Not After : Mar 2 22:01:04 2026 GMT
Subject: CN=2441f9ca2b2be7960b0815c3005ea70460bd71f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:c7:fd:5a:bf:80:8e:94:b4:00:35:63:30:
a7:e2:47:17:42:b8:51:da:6e:b1:93:28:53:5c:91:
47:1a:67:6a:40:b8:57:f2:c1:40:a6:09:52:ef:97:
ea:e1:01:00:ed:cd:c0:1b:fc:81:24:e6:a9:a8:94:
ae:d8:ca:d2:1f:10:41:88:19:4e:37:0a:95:aa:82:
0d:d7:99:2c:51:b1:ad:55:f3:8e:c4:3e:a5:fc:b4:
2b:13:1c:07:6e:94:51:3d:24:99:f1:14:af:8f:d3:
fa:1e:9b:c8:8b:12:98:83:f6:61:88:8d:6c:ce:e8:
37:27:1f:72:ee:63:91:ca:a8:81:40:0f:6b:94:ab:
c2:b3:7a:61:b4:26:ed:29:96:63:97:c8:c3:dd:dc:
e8:78:a2:6f:db:42:7e:76:83:9b:eb:be:31:be:3b:
70:35:b3:24:e7:7c:13:3b:27:51:de:d4:aa:ee:fa:
0a:37:d7:fe:f6:25:3e:b3:33:67:d6:85:22:35:78:
90:c2:fd:c6:8d:bc:6c:d2:66:18:02:d3:5a:16:81:
66:84:74:f6:93:04:0b:13:f3:65:10:27:e0:96:9a:
d3:45:a3:ed:97:e5:ae:dc:79:77:51:d6:f6:6c:c7:
19:68:80:4b:11:d1:5a:10:4b:a1:d1:bc:32:0f:62:
54:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:41:F9:CA:2B:2B:E7:96:0B:08:15:C3:00:5E:A7:04:60:BD:71:F5
X509v3 Authority Key Identifier:
keyid:70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:5b:59:d2:e6:19:be:2a:3e:97:12:2d:1e:6c:bf:7e:eb:86:
10:11:b0:1a:85:2c:2b:0f:fb:9b:32:3a:f2:1f:8a:99:3d:2f:
49:39:5c:e9:e0:a9:99:e3:51:77:f5:4f:75:5f:4c:df:81:5e:
e3:b0:9b:62:e8:b8:1c:85:75:a5:a6:1e:9c:c0:b0:79:a8:94:
9d:61:a8:7b:72:f6:90:3e:60:d5:d1:24:28:30:5d:74:bd:7b:
b6:48:65:45:e9:a0:ef:4c:1f:65:48:b4:98:2b:62:b7:15:51:
5f:60:bf:cd:c2:74:e4:a1:22:c9:57:71:73:07:2a:af:25:eb:
e1:dd:27:b6:a5:7a:76:fd:38:14:9b:3f:a4:f0:82:2f:fa:aa:
41:47:dc:a5:60:ed:6b:84:ba:c8:0a:7a:1c:11:41:7b:ae:2d:
87:bd:c9:85:87:e6:2f:bb:74:d1:09:6b:6f:c9:fd:1f:2a:76:
2e:1d:93:da:f4:7e:28:64:0f:ed:b9:e7:7a:aa:98:d0:3e:6d:
a6:fb:19:dd:87:6a:a0:a1:bf:51:6c:a4:ca:73:99:94:69:5f:
6d:36:ef:55:07:b0:48:06:6e:a7:14:53:37:91:99:22:5b:5e:
7f:46:d7:3d:9d:d5:0c:d8:62:c5:0e:3d:65:a7:63:67:c4:fe:
51:99:73:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:04 2026 by rpki-client