Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
File: CfJr1vRoN-Cv2Vidh478PsiWfwI.mft (raw, json)
Hash identifier: uDKVX0C/BVXfpwae65njSeGUfev2nb7/B/nwKt/mN8Y=
Subject key identifier: 46:3D:4D:D6:C1:08:A8:B3:52:CA:D1:21:8E:EC:13:4B:04:D3:54:1C
Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
Certificate issuer: /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Certificate serial: 019CAD2263159E20B4D52760CF3CD765E3A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
Manifest number: 158F
Signing time: Mon 02 Mar 2026 06:00:37 +0000
Manifest this update: Mon 02 Mar 2026 06:00:37 +0000
Manifest next update: Tue 03 Mar 2026 06:00:37 +0000
Files and hashes: 1: CfJr1vRoN-Cv2Vidh478PsiWfwI.crl (hash: E9SK+ZZI0zgQnu7TT2JETKYKeHuBi2uBQwDSDki0vmA=)
2: VFkF_gxwqOLJ92XDVRj4P0SgEao.roa (hash: Wjt9QdwBOWPZNtbiGNmLCWVPtfz89jktbtlEjzpW8gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:63:15:9e:20:b4:d5:27:60:cf:3c:d7:65:e3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Validity
Not Before: Mar 2 06:00:37 2026 GMT
Not After : Mar 3 06:00:37 2026 GMT
Subject: CN=463d4dd6c108a8b352cad1218eec134b04d3541c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4c:ca:e9:59:e9:47:1d:9d:cf:32:fe:18:a8:
0d:64:46:6e:b8:18:45:89:91:1d:56:82:2a:a9:dc:
09:24:d5:e6:d3:e9:12:20:bf:6b:3f:8f:20:43:59:
af:9d:0a:ea:70:03:a4:0b:69:75:7a:7c:e0:50:47:
d2:4b:3e:bd:31:97:94:5f:d3:4e:08:7c:c1:7f:cc:
c1:c2:e7:7c:05:a8:f5:f8:0a:fe:17:1d:6f:d2:db:
f3:86:3c:88:10:ba:06:69:01:26:95:87:cd:1d:44:
4a:e8:8a:e6:03:5a:bf:7b:c5:6a:3b:85:e1:ac:52:
e0:b2:8e:59:55:f1:57:16:71:be:51:58:e2:f0:b2:
8f:25:a9:01:05:7c:14:48:32:53:6d:30:e6:c7:f6:
d3:13:fe:9d:44:11:9f:36:52:96:06:37:6e:0b:a0:
ca:a1:57:69:f9:fa:22:d3:bd:94:b3:34:80:77:ac:
f0:3b:f7:e8:3d:0a:3f:a5:79:e1:90:fd:f3:03:6a:
27:bf:17:ac:ad:93:1e:de:76:04:33:26:c2:81:5b:
0f:cf:0c:32:1d:7e:53:a3:29:7d:50:a4:94:36:00:
5f:0b:54:24:41:55:33:9b:e0:a1:ab:3b:0d:96:48:
4b:53:af:4f:0d:f7:30:d9:f3:4c:77:ec:2b:60:3a:
8d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3D:4D:D6:C1:08:A8:B3:52:CA:D1:21:8E:EC:13:4B:04:D3:54:1C
X509v3 Authority Key Identifier:
keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:8f:77:fd:05:2f:94:88:03:1a:57:94:94:e2:67:42:8f:02:
9e:c4:27:92:c3:b3:ed:c6:d1:4c:e5:5b:84:ba:e7:87:7d:c9:
5e:59:de:b5:83:99:4f:de:13:9c:14:58:ea:cf:2c:de:70:58:
e3:d6:ef:3a:fa:5f:2f:1a:02:90:bd:b5:f5:38:c7:78:43:93:
97:d3:3f:be:af:cb:9e:43:0c:87:6a:b2:2c:23:89:d5:23:fb:
bb:f3:ca:bb:e1:86:48:4b:e6:5e:fc:68:c6:09:9c:2a:41:2a:
17:dd:28:8d:ba:6e:67:89:81:37:42:8e:c1:40:1d:18:1f:76:
4d:96:af:ee:e2:0f:fd:bb:ad:5e:ea:6a:78:d5:aa:c0:26:83:
df:16:ee:d0:b6:d9:0c:b6:8c:47:a2:13:94:6e:7d:e0:53:7e:
b7:82:03:e6:7d:c6:f7:25:7e:2c:2c:21:28:93:ea:6d:a6:be:
ff:8e:86:fb:4e:f5:cc:ac:9e:e5:fb:8f:56:c3:0e:44:85:08:
17:c5:ac:2d:eb:0e:a9:0b:c3:59:17:82:cb:9f:02:d5:8e:07:
a2:35:74:97:ba:8b:24:9a:3e:17:65:2f:5e:22:df:08:fc:96:
ed:b3:62:ae:3e:0d:59:17:96:20:8f:a7:bb:fb:ba:a7:fe:26:
1e:83:35:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytImMVniC01SdgzzzXZeOiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZjI2YmQ2ZjQ2ODM3ZTBhZmQ5NTg5ZDg3OGVmYzNlYzg5
NjdmMDIwHhcNMjYwMzAyMDYwMDM3WhcNMjYwMzAzMDYwMDM3WjAzMTEwLwYDVQQD
Eyg0NjNkNGRkNmMxMDhhOGIzNTJjYWQxMjE4ZWVjMTM0YjA0ZDM1NDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UzK6VnpRx2dzzL+GKgNZEZuuBhF
iZEdVoIqqdwJJNXm0+kSIL9rP48gQ1mvnQrqcAOkC2l1enzgUEfSSz69MZeUX9NO
CHzBf8zBwud8Baj1+Ar+Fx1v0tvzhjyIELoGaQEmlYfNHURK6IrmA1q/e8VqO4Xh
rFLgso5ZVfFXFnG+UVji8LKPJakBBXwUSDJTbTDmx/bTE/6dRBGfNlKWBjduC6DK
oVdp+foi072UszSAd6zwO/foPQo/pXnhkP3zA2onvxesrZMe3nYEMybCgVsPzwwy
HX5Toyl9UKSUNgBfC1QkQVUzm+ChqzsNlkhLU69PDfcw2fNMd+wrYDqNewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEY9TdbBCKizUsrRIY7sE0sE01QcMB8GA1UdIwQY
MBaAFAnya9b0aDfgr9lYnYeO/D7Iln8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYjQ0N2MtNmQ3My00YTc5LThlNTEt
ZTQwOWE4ZWZhZGFjLzEvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wYjQ0N2MtNmQ3My00YTc5LThlNTEtZTQwOWE4ZWZhZGFj
LzEvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvY93/QUv
lIgDGleUlOJnQo8CnsQnksOz7cbRTOVbhLrnh33JXlnetYOZT94TnBRY6s8s3nBY
49bvOvpfLxoCkL219TjHeEOTl9M/vq/LnkMMh2qyLCOJ1SP7u/PKu+GGSEvmXvxo
xgmcKkEqF90ojbpuZ4mBN0KOwUAdGB92TZav7uIP/butXupqeNWqwCaD3xbu0LbZ
DLaMR6ITlG594FN+t4ID5n3G9yV+LCwhKJPqbaa+/46G+071zKye5fuPVsMORIUI
F8WsLesOqQvDWReCy58C1Y4HojV0l7qLJJo+F2UvXiLfCPyW7bNirj4NWReWII+n
u/u6p/4mHoM18A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:19 2026 by rpki-client