Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
File: CfJr1vRoN-Cv2Vidh478PsiWfwI.mft (raw, json)
Hash identifier: o1LGnPvv32vq4zUsGj2kPt42G8AGVf+WJFKqjKBsGJo=
Subject key identifier: DB:D8:D3:4D:96:CB:9A:31:E3:79:B1:C1:45:F5:10:54:44:A2:0C:09
Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
Certificate issuer: /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Certificate serial: 019EBE47E2CD3A596CDEB8D3DCD2A672F505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
Manifest number: 16A1
Signing time: Sat 13 Jun 2026 00:00:42 +0000
Manifest this update: Sat 13 Jun 2026 00:00:42 +0000
Manifest next update: Sun 14 Jun 2026 00:00:42 +0000
Files and hashes: 1: CfJr1vRoN-Cv2Vidh478PsiWfwI.crl (hash: t3LpvXvV1Vo8kTdTKZJPjJu8zxkhXrl3bBnrKZJRNYc=)
2: VFkF_gxwqOLJ92XDVRj4P0SgEao.roa (hash: Wjt9QdwBOWPZNtbiGNmLCWVPtfz89jktbtlEjzpW8gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:e2:cd:3a:59:6c:de:b8:d3:dc:d2:a6:72:f5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Validity
Not Before: Jun 13 00:00:42 2026 GMT
Not After : Jun 14 00:00:42 2026 GMT
Subject: CN=dbd8d34d96cb9a31e379b1c145f5105444a20c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0e:7f:57:ef:92:bc:fe:30:ff:1a:70:67:6f:
77:19:d6:0c:ce:02:c2:a5:5e:7d:11:19:91:92:c5:
98:07:f1:9c:69:6f:31:26:33:55:90:93:79:10:23:
aa:f8:10:eb:fb:ba:66:4b:58:f8:a3:e4:e9:a3:d1:
21:32:63:a3:50:fb:15:cc:dd:5a:20:7b:2b:e6:ef:
38:25:e2:70:ea:32:ba:a4:ec:08:3d:39:97:db:68:
db:4c:e7:f9:64:94:2b:72:cc:08:52:52:4a:a6:06:
db:24:df:b4:42:66:42:c2:01:08:5d:98:6a:c2:c0:
5e:b6:ff:3f:f5:a3:57:d1:36:02:3e:fa:a9:27:38:
a6:25:2b:72:c8:7b:48:a0:c5:72:7b:c3:06:16:cd:
a0:b5:40:13:c5:f0:e2:87:1c:a8:ee:c1:b2:0a:4b:
6f:d4:70:78:5a:61:cc:8e:2d:c4:8a:5e:ae:93:96:
14:8f:ff:25:ad:f1:f2:3d:6d:a0:87:94:3d:b6:a8:
2f:d9:fd:6d:4b:53:fe:cf:f5:90:6b:8a:4f:85:41:
94:16:72:f2:59:80:18:b3:e1:73:84:98:97:a7:e1:
ba:6c:9a:05:18:67:31:aa:58:b2:5d:51:c3:58:02:
94:ea:e9:b6:b9:4a:41:8c:be:55:5e:69:19:79:e7:
62:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D8:D3:4D:96:CB:9A:31:E3:79:B1:C1:45:F5:10:54:44:A2:0C:09
X509v3 Authority Key Identifier:
keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:26:26:d7:d5:01:42:e1:cb:8f:81:96:a4:51:b6:9c:79:fd:
9b:5e:2d:62:2e:5c:f5:cd:4b:4e:63:cc:ca:7a:13:64:0a:f6:
a9:a7:8f:07:01:2c:d0:3c:cc:a0:75:15:2a:e9:ae:39:93:04:
d3:ab:dc:49:8f:6b:0a:a8:09:fe:05:b9:22:7d:f4:8e:21:2e:
66:d1:4f:cc:2f:b5:81:50:0e:c9:7a:4f:0d:3b:87:49:e7:21:
f7:40:22:15:ac:fc:f0:cd:36:5f:f7:33:3e:5a:43:3e:50:77:
3b:ea:88:06:3e:8a:28:9e:ee:35:79:06:d3:1f:56:1d:b3:50:
c6:40:48:a1:00:a2:8b:c4:21:57:fd:e8:65:29:a7:71:cc:ee:
24:63:d2:6f:67:b6:b6:9c:f8:d9:fb:8a:48:5f:c2:22:ac:7e:
e1:87:53:f8:c5:9f:94:e5:73:2c:c2:aa:dd:79:5b:b0:2c:56:
7b:d8:9c:24:76:f9:bd:e6:a6:56:5e:76:53:8b:ab:3f:e5:27:
e1:67:21:3a:24:e1:3f:93:d0:18:42:59:9f:c8:b9:b5:85:b2:
b3:d1:3a:15:a5:16:a5:87:09:f1:1c:2e:b0:b6:a3:e4:bd:fc:
c6:86:60:3f:91:d7:39:65:1d:fd:e7:04:49:da:d5:f6:b1:f5:
5b:2d:81:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:17:00 2026 by rpki-client