Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
File: cFUm-asN0naCP8Hw66od5jt9ZWw.mft (raw, json)
Hash identifier: 3Sj8oD6h1EJq+uPxBvk0ZxCqzv0CXCrw+mRAwcO4mEE=
Subject key identifier: E6:D2:33:83:67:A5:62:22:3C:93:BA:C6:0A:38:03:55:EA:A5:7A:3C
Authority key identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
Certificate issuer: /CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Certificate serial: 019D98F428CE908C2FFEB19C5FB1AFD3A862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
Manifest number: 072A
Signing time: Fri 17 Apr 2026 01:00:31 +0000
Manifest this update: Fri 17 Apr 2026 01:00:31 +0000
Manifest next update: Sat 18 Apr 2026 01:00:31 +0000
Files and hashes: 1: cFUm-asN0naCP8Hw66od5jt9ZWw.crl (hash: wzNUu2osepvSrETvqrdAS3uNy4rFrOwHPD6N1+xHK5s=)
2: utX8EvzxjtNKF1hFOEPAnrUCzm8.roa (hash: klBKnxuMcoS0m9Xk0/1QlfvOXmiMTMvpWtNw0ziiP1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:28:ce:90:8c:2f:fe:b1:9c:5f:b1:af:d3:a8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Validity
Not Before: Apr 17 01:00:31 2026 GMT
Not After : Apr 18 01:00:31 2026 GMT
Subject: CN=e6d2338367a562223c93bac60a380355eaa57a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:35:de:a4:4a:78:1c:8c:b9:9e:09:26:60:
da:4f:51:27:91:2b:ec:cd:54:49:a0:f0:d0:5d:40:
02:c6:3f:51:48:c2:fc:4d:d5:2d:df:c3:b2:65:98:
6a:ee:41:e7:ab:d2:73:cf:fc:3f:0f:01:de:34:c6:
20:8e:11:92:27:7e:2f:47:45:fa:0f:93:ec:5a:f0:
0a:2c:04:55:3d:fe:87:3c:f8:0b:cd:d3:ab:3a:94:
e8:1e:b6:d7:6b:cb:0d:70:2c:d2:bb:30:a5:32:0c:
0a:0e:60:18:b9:b2:99:50:b4:28:d7:72:f4:d7:43:
9a:c9:0c:75:5f:c6:0a:90:0c:70:16:f6:ec:80:c9:
17:7c:7d:ff:59:86:b4:c6:2f:29:82:cc:a9:8a:1b:
f6:c4:28:2e:dd:5b:bc:1e:6d:9e:1b:1e:e4:c8:d0:
ab:85:33:54:0a:ad:93:f8:6d:e3:ee:f4:b2:78:da:
53:9d:cd:d9:f1:ed:2d:aa:8c:6c:b4:3f:a1:e3:26:
b2:69:c4:7f:b3:d3:48:42:f3:7b:8b:52:c3:12:80:
69:ba:ec:fe:a1:2a:8c:4d:6f:e1:4d:60:f1:71:17:
c2:48:a5:60:fc:b4:c1:08:6b:e6:db:d3:05:6b:f6:
fa:86:08:85:00:dd:21:a3:5e:75:1e:91:42:0d:60:
63:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D2:33:83:67:A5:62:22:3C:93:BA:C6:0A:38:03:55:EA:A5:7A:3C
X509v3 Authority Key Identifier:
keyid:70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2c:a9:b7:72:e9:e2:67:fb:f7:2b:b0:5d:c8:a9:59:26:a5:
26:10:ff:68:4c:09:57:96:8b:81:4a:0b:8b:da:f0:53:0d:8f:
47:0b:a6:c9:76:e5:77:74:f0:a6:73:fc:0c:dd:0d:fa:38:80:
6b:a1:23:b1:1c:4c:32:b3:55:e3:5b:d1:29:4d:57:6d:5c:66:
c0:2c:81:28:f6:b3:be:1e:96:a6:7b:e9:13:8c:db:54:f6:ff:
18:3f:85:53:16:33:8b:e6:4a:5d:11:8a:56:66:65:43:a2:34:
49:6a:b2:0d:f8:31:b2:d8:b6:4f:75:01:b8:6e:0c:32:90:34:
04:99:18:0e:fe:78:35:1b:a5:d8:3b:a5:98:4d:23:c6:f1:42:
ee:33:11:f3:7d:9e:48:a9:67:a3:48:fb:6c:9c:62:3d:ca:03:
6a:3d:2c:6f:fa:8d:38:22:55:a0:4e:e8:f9:13:ce:bb:7d:d8:
83:08:13:e0:e3:50:77:ef:57:1c:ee:2d:b8:90:ff:50:12:d2:
c8:2e:ac:b6:a7:be:06:de:dc:9c:10:e9:b3:f6:a4:b9:04:20:
cc:0d:cd:16:87:64:98:6c:23:a6:32:c3:f8:e3:e0:d8:73:2c:
c0:11:bc:33:b1:71:e5:b4:e2:99:bb:97:67:1a:50:a3:82:52:
3f:54:91:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:37 2026 by rpki-client