Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
File: Cfuz7S8CnEusxuosTH9MHNboDnk.mft (raw, json)
Hash identifier: GBVVd9fIyb+/CsyGxRQuo+izYFP1kUSmDdeAb+ySAww=
Subject key identifier: 7A:49:9B:A5:9D:2A:66:B7:A2:27:7C:F0:19:94:1B:15:B9:E0:33:DC
Authority key identifier: 09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
Certificate issuer: /CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Certificate serial: 019CAAC6C1E985852588439D8FF4BDEB6BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
Manifest number: 0EAE
Signing time: Sun 01 Mar 2026 19:01:18 +0000
Manifest this update: Sun 01 Mar 2026 19:01:18 +0000
Manifest next update: Mon 02 Mar 2026 19:01:18 +0000
Files and hashes: 1: Cfuz7S8CnEusxuosTH9MHNboDnk.crl (hash: qXa1fzKoOcf6PFYeIpTtEAQ1P97MC8nQGTReqwjKjn4=)
2: tPzvJ8fhXyxuStH7y_RiWlVyHhs.roa (hash: TJabNOMfT1VmMNuU7X4vXm/HGDPktwOUxF0xJ5kPJG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:c1:e9:85:85:25:88:43:9d:8f:f4:bd:eb:6b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Validity
Not Before: Mar 1 19:01:18 2026 GMT
Not After : Mar 2 19:01:18 2026 GMT
Subject: CN=7a499ba59d2a66b7a2277cf019941b15b9e033dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b4:06:26:5a:78:c3:9a:29:77:9a:0e:09:4e:
b7:47:38:58:21:bf:59:60:74:cf:7b:22:ea:90:19:
47:d2:31:f2:65:7d:77:59:69:16:28:cc:77:43:97:
bd:87:e3:0f:42:47:ba:5b:dd:fb:58:d9:03:a5:7e:
82:06:20:aa:73:20:3e:2f:f9:05:f8:80:26:bc:3a:
6b:d2:be:53:22:7d:90:ad:29:b8:0e:38:28:fa:86:
d1:64:e9:61:19:37:86:2a:28:cb:5e:ba:aa:1a:f2:
b7:11:78:e8:a8:26:0b:05:bb:8e:fa:d2:0c:84:11:
26:cf:4f:71:92:4c:07:6a:2b:c4:67:44:ae:33:fa:
57:21:eb:91:df:9c:95:ea:05:ba:65:48:c3:d7:c1:
87:a2:8a:40:4a:ff:9d:7a:06:12:0c:eb:38:23:c1:
d7:43:a3:fb:c0:eb:c9:5f:26:69:00:20:6f:4e:4e:
13:99:04:3d:ab:7f:55:be:87:81:8b:b8:98:34:a3:
8f:04:1c:27:a7:a1:b7:f5:36:46:2b:9b:fb:19:25:
df:c5:eb:66:dc:07:67:c7:6b:60:87:3e:2f:23:e7:
32:30:8c:e4:e5:89:91:e2:d1:dc:e1:40:e4:5f:dd:
4d:36:0f:e1:b6:e0:a7:6c:4f:56:e2:cc:d9:b4:3a:
54:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:49:9B:A5:9D:2A:66:B7:A2:27:7C:F0:19:94:1B:15:B9:E0:33:DC
X509v3 Authority Key Identifier:
keyid:09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2d:eb:4b:51:68:8b:6e:6e:25:57:f4:1b:f4:06:06:58:86:
b2:d0:0a:b2:99:26:e8:e3:4c:7f:5e:c1:af:57:4c:78:94:4e:
93:74:ff:af:93:7e:fc:ad:2b:89:b6:0a:2b:b0:66:e6:d9:c2:
48:be:cc:14:a3:da:cb:f2:5c:2f:79:9f:f9:8c:b8:d6:8d:09:
9c:35:34:6d:c0:be:9c:fc:cd:c4:4d:c0:ab:1d:bf:d9:24:77:
2e:10:3d:d7:2d:1b:22:c4:82:46:43:2b:6c:e4:97:9b:cb:e8:
67:39:60:16:03:72:70:69:31:8c:14:b4:6c:23:28:dc:ec:09:
2f:a0:23:ff:f9:2a:09:1c:b4:47:5b:6b:4b:e4:00:87:d5:53:
20:a2:8c:76:77:77:bd:d2:0d:b6:1b:46:ba:ea:91:56:de:c6:
28:ab:be:c8:8f:78:6f:c2:64:de:aa:6d:b8:f0:7d:5c:e1:8b:
e7:80:54:71:cc:79:2c:00:73:89:b2:7c:61:91:d9:c8:8e:e9:
2e:be:0f:39:bb:e5:d7:62:f4:d0:ad:b7:c1:61:9c:2c:14:81:
30:07:0b:27:d6:df:aa:bf:fb:e5:71:ac:7f:ce:07:2c:29:f3:
f3:de:96:3b:20:99:fe:a7:e4:69:51:09:d2:cb:dc:f8:8a:0f:
dd:18:8f:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxsHphYUliEOdj/S962vQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZmJiM2VkMmYwMjljNGJhY2M2ZWEyYzRjN2Y0YzFjZDZl
ODBlNzkwHhcNMjYwMzAxMTkwMTE4WhcNMjYwMzAyMTkwMTE4WjAzMTEwLwYDVQQD
Eyg3YTQ5OWJhNTlkMmE2NmI3YTIyNzdjZjAxOTk0MWIxNWI5ZTAzM2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbQGJlp4w5opd5oOCU63RzhYIb9Z
YHTPeyLqkBlH0jHyZX13WWkWKMx3Q5e9h+MPQke6W937WNkDpX6CBiCqcyA+L/kF
+IAmvDpr0r5TIn2QrSm4Djgo+obRZOlhGTeGKijLXrqqGvK3EXjoqCYLBbuO+tIM
hBEmz09xkkwHaivEZ0SuM/pXIeuR35yV6gW6ZUjD18GHoopASv+degYSDOs4I8HX
Q6P7wOvJXyZpACBvTk4TmQQ9q39VvoeBi7iYNKOPBBwnp6G39TZGK5v7GSXfxetm
3Adnx2tghz4vI+cyMIzk5YmR4tHc4UDkX91NNg/htuCnbE9W4szZtDpUwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpJm6WdKma3oid88BmUGxW54DPcMB8GA1UdIwQY
MBaAFAn7s+0vApxLrMbqLEx/TBzW6A55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2Z1ejdTOENuRXVzeHVvc1RIOU1ITmJvRG5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85ZDViY2YtMmRiOS00YWZhLWIwMDAt
ODIyOTUzZjhjZjc3LzEvQ2Z1ejdTOENuRXVzeHVvc1RIOU1ITmJvRG5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85ZDViY2YtMmRiOS00YWZhLWIwMDAtODIyOTUzZjhjZjc3
LzEvQ2Z1ejdTOENuRXVzeHVvc1RIOU1ITmJvRG5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABS3rS1Fo
i25uJVf0G/QGBliGstAKspkm6ONMf17Br1dMeJROk3T/r5N+/K0ribYKK7Bm5tnC
SL7MFKPay/JcL3mf+Yy41o0JnDU0bcC+nPzNxE3Aqx2/2SR3LhA91y0bIsSCRkMr
bOSXm8voZzlgFgNycGkxjBS0bCMo3OwJL6Aj//kqCRy0R1trS+QAh9VTIKKMdnd3
vdINthtGuuqRVt7GKKu+yI94b8Jk3qptuPB9XOGL54BUccx5LABzibJ8YZHZyI7p
Lr4PObvl12L00K23wWGcLBSBMAcLJ9bfqr/75XGsf84HLCnz896WOyCZ/qfkaVEJ
0svc+IoP3RiPqw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:54 2026 by rpki-client