Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
File: CfJr1vRoN-Cv2Vidh478PsiWfwI.mft (raw, json)
Hash identifier: AfcayajrEaGN6E1ubyNKscJjY4H4Xu/Oc689EfSp9Bo=
Subject key identifier: 2C:B5:9A:A3:16:56:4E:EC:B0:04:0C:D2:FD:F6:F2:2C:45:E0:47:5E
Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
Certificate issuer: /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Certificate serial: 01A0C3D700282356DF8F5BFD1B095F81F8C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
Manifest number: 17AD
Signing time: Mon 21 Sep 2026 12:00:42 +0000
Manifest this update: Mon 21 Sep 2026 12:00:42 +0000
Manifest next update: Tue 22 Sep 2026 12:00:42 +0000
Files and hashes: 1: CfJr1vRoN-Cv2Vidh478PsiWfwI.crl (hash: jTYMD2RlP9MAwvxVFeB7i9h+OdWpRQ5c/O/OOuXFrpw=)
2: VFkF_gxwqOLJ92XDVRj4P0SgEao.roa (hash: Wjt9QdwBOWPZNtbiGNmLCWVPtfz89jktbtlEjzpW8gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:00:28:23:56:df:8f:5b:fd:1b:09:5f:81:f8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Validity
Not Before: Sep 21 12:00:42 2026 GMT
Not After : Sep 22 12:00:42 2026 GMT
Subject: CN=2cb59aa316564eecb0040cd2fdf6f22c45e0475e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:02:48:eb:a5:84:7e:51:27:b9:e9:ea:22:
a0:97:54:ac:7b:3a:af:3f:6b:c4:01:49:10:4c:39:
93:81:35:be:d5:6a:cd:ec:88:cb:1a:0a:9e:02:5b:
0b:f3:cc:35:8e:e9:9d:c5:cc:59:23:ac:92:fa:24:
23:b1:89:ff:0a:00:e3:ff:8f:c5:a8:3f:f4:ff:c5:
4c:e1:7e:10:e7:e5:2c:7e:ce:b8:bf:4e:b1:bf:24:
c5:9e:59:3d:58:e7:c6:ff:1f:ff:9c:f8:ce:fd:d6:
53:73:fe:66:9c:e8:87:b6:dc:74:c2:f8:dc:ec:3e:
32:27:11:1a:b1:c5:da:b0:d1:63:15:f3:2c:fb:e3:
06:a4:0a:5e:14:4a:6e:5c:d1:07:fc:c2:d6:d7:78:
3f:a9:d5:8f:d3:8b:d0:d3:72:4e:fa:00:24:da:2b:
ee:b4:64:d2:12:47:e9:8f:67:e5:27:62:76:1f:43:
8b:69:a2:0b:87:08:88:91:f1:10:cd:6e:00:d6:e9:
db:f3:fb:93:f2:fe:53:69:a5:13:ec:d6:1a:bf:7b:
73:e5:e0:48:a7:fe:ac:aa:b6:c5:a0:4f:e1:8e:41:
bc:58:46:b4:1c:86:9a:fd:61:24:8e:90:40:9c:80:
8f:96:93:a6:9d:ab:b0:97:9f:94:0f:99:b5:c4:d3:
46:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B5:9A:A3:16:56:4E:EC:B0:04:0C:D2:FD:F6:F2:2C:45:E0:47:5E
X509v3 Authority Key Identifier:
keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:23:fa:c3:67:fe:ba:5c:69:50:cd:82:eb:55:be:16:7e:06:
97:da:93:13:49:82:5c:2b:18:d0:4e:d0:37:38:53:bf:9a:7f:
f6:fd:04:b8:0e:c8:fa:b8:5d:30:08:55:24:63:9a:1a:08:e0:
b6:3d:98:06:0a:7f:9e:f8:17:f1:8c:44:1e:e1:9f:3c:69:dd:
e8:25:51:c4:e3:d4:14:70:75:92:10:c4:e7:9f:6f:b9:83:9f:
6e:ea:f3:dd:90:3b:cf:87:e6:75:ba:6a:a1:4e:ff:ee:57:25:
68:fe:69:82:92:3f:85:a7:c8:b4:e8:dc:c9:1e:38:1f:da:84:
f6:fe:7f:cd:d4:17:20:fa:8a:71:4e:26:48:ed:fe:5e:dc:8a:
73:e2:0d:19:6c:a9:b8:5b:70:b9:e2:19:e0:00:0b:c9:f5:6f:
d6:7e:b7:dc:6b:ef:e1:df:c3:c0:b7:97:c4:ee:ed:f5:b1:c9:
90:2a:ae:b5:44:6b:9e:13:dd:36:4d:74:01:11:28:8f:ae:8b:
f8:24:3f:70:64:8f:c6:61:c9:a8:ba:ab:46:d8:31:aa:07:55:
15:0a:60:27:2e:14:13:5c:03:3d:03:98:c2:19:d8:66:f2:95:
2d:36:4a:11:8f:61:49:d4:a8:2b:63:77:51:8f:e0:4c:c1:bd:
53:80:95:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDD1wAoI1bfj1v9GwlfgfjCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZjI2YmQ2ZjQ2ODM3ZTBhZmQ5NTg5ZDg3OGVmYzNlYzg5
NjdmMDIwHhcNMjYwOTIxMTIwMDQyWhcNMjYwOTIyMTIwMDQyWjAzMTEwLwYDVQQD
EygyY2I1OWFhMzE2NTY0ZWVjYjAwNDBjZDJmZGY2ZjIyYzQ1ZTA0NzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/oCSOulhH5RJ7np6iKgl1Ssezqv
P2vEAUkQTDmTgTW+1WrN7IjLGgqeAlsL88w1jumdxcxZI6yS+iQjsYn/CgDj/4/F
qD/0/8VM4X4Q5+Usfs64v06xvyTFnlk9WOfG/x//nPjO/dZTc/5mnOiHttx0wvjc
7D4yJxEascXasNFjFfMs++MGpApeFEpuXNEH/MLW13g/qdWP04vQ03JO+gAk2ivu
tGTSEkfpj2flJ2J2H0OLaaILhwiIkfEQzW4A1unb8/uT8v5TaaUT7NYav3tz5eBI
p/6sqrbFoE/hjkG8WEa0HIaa/WEkjpBAnICPlpOmnauwl5+UD5m1xNNGWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCy1mqMWVk7ssAQM0v328ixF4EdeMB8GA1UdIwQY
MBaAFAnya9b0aDfgr9lYnYeO/D7Iln8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYjQ0N2MtNmQ3My00YTc5LThlNTEt
ZTQwOWE4ZWZhZGFjLzEvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wYjQ0N2MtNmQ3My00YTc5LThlNTEtZTQwOWE4ZWZhZGFj
LzEvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyP6w2f+
ulxpUM2C61W+Fn4Gl9qTE0mCXCsY0E7QNzhTv5p/9v0EuA7I+rhdMAhVJGOaGgjg
tj2YBgp/nvgX8YxEHuGfPGnd6CVRxOPUFHB1khDE559vuYOfburz3ZA7z4fmdbpq
oU7/7lclaP5pgpI/hafItOjcyR44H9qE9v5/zdQXIPqKcU4mSO3+XtyKc+INGWyp
uFtwueIZ4AALyfVv1n633Gvv4d/DwLeXxO7t9bHJkCqutURrnhPdNk10AREoj66L
+CQ/cGSPxmHJqLqrRtgxqgdVFQpgJy4UE1wDPQOYwhnYZvKVLTZKEY9hSdSoK2N3
UY/gTMG9U4CV0g==
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:29:46 2026 by rpki-client