Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
File: Cfuz7S8CnEusxuosTH9MHNboDnk.mft (raw, json)
Hash identifier: hwWnmBLtjW7+pcbcRSwz43rz+Ry3dPK63u3Ac5OR/Co=
Subject key identifier: D7:A0:FB:A0:F3:95:45:5E:3B:E2:30:B4:E8:AA:56:43:18:C9:5A:B4
Authority key identifier: 09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
Certificate issuer: /CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Certificate serial: 019EBFC8A57431C28096257392DEF2FBE25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
Manifest number: 0FC2
Signing time: Sat 13 Jun 2026 07:00:58 +0000
Manifest this update: Sat 13 Jun 2026 07:00:58 +0000
Manifest next update: Sun 14 Jun 2026 07:00:58 +0000
Files and hashes: 1: Cfuz7S8CnEusxuosTH9MHNboDnk.crl (hash: JXUc3nUeYCqDNPGgaDRdrbhFgTu5UAoIgnb/a/EQG6c=)
2: tPzvJ8fhXyxuStH7y_RiWlVyHhs.roa (hash: TJabNOMfT1VmMNuU7X4vXm/HGDPktwOUxF0xJ5kPJG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:a5:74:31:c2:80:96:25:73:92:de:f2:fb:e2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Validity
Not Before: Jun 13 07:00:58 2026 GMT
Not After : Jun 14 07:00:58 2026 GMT
Subject: CN=d7a0fba0f395455e3be230b4e8aa564318c95ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ea:97:fe:25:cd:59:5c:1a:1a:ab:a3:df:dd:
da:c0:b5:8d:27:5e:9a:d1:2a:0a:f4:5a:29:ee:de:
4a:60:99:02:27:0b:9b:88:54:50:63:2d:eb:30:53:
3e:58:d1:17:5e:c4:a7:0e:08:8e:91:9d:ed:25:94:
81:cf:db:cb:b8:3e:76:3b:d6:26:8f:73:18:14:c0:
98:1f:ef:d2:39:04:c9:41:f4:6e:3a:b6:8c:9d:99:
97:a5:3e:62:a7:9e:51:78:dc:33:cc:57:f2:7d:ef:
0a:15:04:be:0b:22:a5:6a:83:0f:2b:dd:8d:eb:61:
06:2b:24:dc:49:e0:c5:aa:38:8c:c9:92:0d:41:83:
b3:d0:95:d1:97:e9:12:99:42:42:35:74:2e:39:21:
4a:f9:0a:07:35:67:b0:04:24:eb:b6:2d:ed:1c:08:
90:44:f5:f2:77:a5:ba:77:c2:06:43:cf:e9:71:0d:
bb:17:03:8e:4b:e3:37:1b:ad:aa:cc:be:85:79:af:
12:90:c3:aa:32:f8:f1:29:41:7d:b0:72:21:83:51:
d9:5d:1f:cb:85:6b:7b:96:65:fe:39:bf:78:06:3a:
89:28:76:92:93:92:be:e3:2d:6b:c3:a1:46:1f:ea:
65:9f:b2:d5:2a:1b:26:f8:47:44:c1:bf:a6:9a:af:
20:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A0:FB:A0:F3:95:45:5E:3B:E2:30:B4:E8:AA:56:43:18:C9:5A:B4
X509v3 Authority Key Identifier:
keyid:09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:47:85:b5:60:9c:6d:88:61:57:24:38:26:41:9d:e9:35:d8:
6d:17:90:9f:f3:9d:a0:e6:37:cc:f5:af:41:11:40:c5:6f:aa:
25:23:a2:5f:01:cd:10:16:4c:24:5f:73:98:06:8a:ff:d3:ea:
e6:e4:93:e5:45:2b:f3:aa:74:24:62:61:0a:b6:1e:b1:57:e0:
c4:d3:22:0c:98:52:10:8b:ff:ae:e9:fd:f6:b6:33:1b:7f:40:
50:d8:d6:c9:20:f8:04:11:2b:41:c9:ab:4d:7e:f0:64:5f:b8:
c9:b4:8e:bc:f6:d3:0e:9b:eb:5a:fe:6f:20:ba:f8:ab:7e:ad:
41:e8:29:c6:03:3d:d3:cb:3f:c5:81:d5:fe:6a:cb:6e:87:61:
c6:ed:05:da:aa:8a:0f:30:23:b2:27:e3:34:70:42:76:21:1a:
8a:b6:ca:99:77:c8:9c:3e:55:30:15:50:d0:35:64:b8:c6:44:
f8:c6:b5:ed:ab:dd:9a:0f:dc:14:58:05:6f:ea:d7:d2:7c:6a:
74:c3:ab:ca:6c:80:ba:a4:70:4e:3a:fc:ef:e7:26:fe:d6:6c:
6e:b2:40:95:16:a5:8e:8a:e0:0e:ae:60:ab:e8:4d:a6:a4:ca:
13:da:27:dd:6a:a8:96:80:24:cf:83:d8:ce:85:94:7e:99:04:
65:22:f8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:54:37 2026 by rpki-client