Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
File: Cfuz7S8CnEusxuosTH9MHNboDnk.mft (raw, json)
Hash identifier: yqnUQXi8iuyzMNGA6xM7AayxzQXBzJJ44MjTVNFYhrA=
Subject key identifier: 56:5E:65:4B:B3:1C:E4:07:34:CA:20:66:0E:A7:B4:BD:D4:FB:22:2A
Authority key identifier: 09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
Certificate issuer: /CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Certificate serial: 019DA3E5D834E0E5DA895F5DD6D8C134AEDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
Manifest number: 0F2F
Signing time: Sun 19 Apr 2026 04:00:42 +0000
Manifest this update: Sun 19 Apr 2026 04:00:42 +0000
Manifest next update: Mon 20 Apr 2026 04:00:42 +0000
Files and hashes: 1: Cfuz7S8CnEusxuosTH9MHNboDnk.crl (hash: rvUXaDIPYB5fmV2VhbrnMdeUNn1TlfJd1SyvyMyA9Sg=)
2: tPzvJ8fhXyxuStH7y_RiWlVyHhs.roa (hash: TJabNOMfT1VmMNuU7X4vXm/HGDPktwOUxF0xJ5kPJG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e5:d8:34:e0:e5:da:89:5f:5d:d6:d8:c1:34:ae:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Validity
Not Before: Apr 19 04:00:42 2026 GMT
Not After : Apr 20 04:00:42 2026 GMT
Subject: CN=565e654bb31ce40734ca20660ea7b4bdd4fb222a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f0:1a:b6:55:93:90:ab:0f:8d:00:01:7c:93:
26:37:c5:26:e3:69:a2:18:af:ae:f8:f9:d4:cd:b4:
62:82:78:6e:c2:2f:ed:27:4c:34:00:aa:3e:4e:0c:
b7:09:b4:20:83:09:9f:a0:62:c2:6e:d4:03:27:80:
71:28:c6:42:27:8d:af:00:91:e7:a6:87:94:26:01:
f0:c7:68:6d:da:a3:33:62:34:01:6d:a1:c9:f7:ef:
fa:66:da:eb:c5:40:6f:7b:6a:16:24:22:8c:b1:49:
d3:8c:8c:10:78:20:78:4b:6c:87:4e:74:4e:88:5a:
ca:6d:6f:06:16:b3:fd:b1:70:6b:31:15:cf:aa:b5:
99:7f:98:4b:bc:31:7c:16:9d:28:5e:8b:83:2a:d2:
29:98:e5:02:4f:3b:d4:5e:78:0c:a6:52:65:3a:4f:
9e:77:e7:72:5a:9c:d2:9c:37:c6:02:e6:d4:14:a2:
69:85:55:74:d9:27:90:23:9a:8c:7f:5a:d4:59:34:
aa:94:a4:f4:ff:9e:dc:dd:48:ab:8e:47:8a:64:20:
84:8c:45:35:d4:49:51:0a:96:b8:7d:4a:b3:b0:27:
4e:37:32:3b:97:a8:4d:e3:96:d7:b7:af:db:20:45:
75:6b:f6:63:01:b4:29:55:6d:4c:a0:f5:2f:20:75:
be:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5E:65:4B:B3:1C:E4:07:34:CA:20:66:0E:A7:B4:BD:D4:FB:22:2A
X509v3 Authority Key Identifier:
keyid:09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:98:63:07:71:6b:b8:f5:a8:00:1e:0f:d5:82:27:c9:f0:26:
54:5b:fa:a5:32:cb:2b:20:ed:b2:84:27:e2:0a:ca:59:db:d1:
4d:f0:48:8c:63:b3:d5:ee:2f:eb:a7:73:cb:c8:7d:e3:8f:16:
69:2b:67:f4:b7:ad:7e:29:62:5e:d2:20:28:e7:ef:60:d8:54:
2f:93:83:08:00:92:bd:bb:ef:ad:38:66:11:bb:17:4e:cd:83:
90:4a:a9:fc:47:41:cf:39:f0:f9:47:fd:c9:7e:19:80:85:6e:
13:8d:73:57:38:b4:01:ec:48:3f:f8:45:2b:d6:8e:45:78:80:
12:c0:52:e9:40:a8:49:b4:08:5c:11:5a:cb:7f:7e:25:b6:57:
54:8c:f5:54:6c:bf:c5:e1:c1:02:cb:10:e4:ee:ec:be:f6:80:
94:26:45:f9:0a:2d:65:13:4c:df:1e:ce:f1:17:95:02:02:41:
ed:d8:22:f6:e2:e2:56:80:01:e5:36:75:60:ca:c6:64:d3:4a:
be:f2:84:6d:a2:7a:29:ee:f8:72:06:6a:86:7b:2f:84:0f:74:
b6:8f:6b:08:11:be:35:04:e1:1a:09:83:93:06:a0:e7:f6:4e:
7d:59:b0:4d:48:dc:f8:39:3a:7a:3e:55:65:76:bb:0b:25:71:
7e:bc:b0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:28:42 2026 by rpki-client