Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.mft
File: cfxj7vZnTya1A6gwpd-pU9L_qr4.mft (raw, json)
Hash identifier: uSwcPaC6CZ4wTVIr6ao6dD8YwktWisgafjU6/WZubxk=
Subject key identifier: 9F:D4:82:69:85:07:6C:62:EF:6F:E6:54:E7:AC:A7:66:90:78:6A:9A
Authority key identifier: 71:FC:63:EE:F6:67:4F:26:B5:03:A8:30:A5:DF:A9:53:D2:FF:AA:BE
Certificate issuer: /CN=71fc63eef6674f26b503a830a5dfa953d2ffaabe
Certificate serial: 019CABA242C91C760D39304C1907F2638A4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfxj7vZnTya1A6gwpd-pU9L_qr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.mft
Manifest number: 16AE
Signing time: Sun 01 Mar 2026 23:01:03 +0000
Manifest this update: Sun 01 Mar 2026 23:01:03 +0000
Manifest next update: Mon 02 Mar 2026 23:01:03 +0000
Files and hashes: 1: cfxj7vZnTya1A6gwpd-pU9L_qr4.crl (hash: rZW9DCydC7CUtCVxo96cYOKXBCLDtiNzW0lZbp1sBP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cfxj7vZnTya1A6gwpd-pU9L_qr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:42:c9:1c:76:0d:39:30:4c:19:07:f2:63:8a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71fc63eef6674f26b503a830a5dfa953d2ffaabe
Validity
Not Before: Mar 1 23:01:03 2026 GMT
Not After : Mar 2 23:01:03 2026 GMT
Subject: CN=9fd4826985076c62ef6fe654e7aca76690786a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0a:48:5b:fd:bb:34:47:07:26:31:ea:6a:3f:
c1:24:45:93:29:74:2e:79:c2:8c:c9:5d:b2:52:5a:
98:af:06:5f:6b:cb:65:55:63:5c:88:48:6d:d8:a2:
75:82:2c:be:07:ad:34:52:61:6f:32:cb:95:b3:d2:
98:9b:9c:fb:26:4b:c8:04:9a:e8:e6:6a:f5:f6:5f:
63:8f:ea:98:97:30:c7:08:36:8c:3f:ef:1e:e8:2a:
01:44:50:bf:7a:5e:b4:a8:51:9a:0f:f6:eb:f6:87:
a2:53:02:f3:4c:18:c5:f7:71:13:8d:1c:4e:aa:e5:
f0:ae:7d:53:83:72:a6:27:61:8d:10:98:f5:5c:e2:
4c:f9:ff:f5:33:a2:2b:cb:9d:1b:d2:42:7a:69:79:
81:85:90:07:3c:e7:0e:a4:f3:ec:b8:f1:22:3f:84:
54:38:5c:66:b4:46:82:4c:76:48:b9:8e:5f:f8:84:
e4:46:a2:0c:78:0d:ea:a0:fc:3e:c8:53:99:39:f4:
88:1a:71:2b:31:77:29:31:22:f7:66:ac:56:8a:f4:
f1:4a:60:df:89:a5:26:aa:a7:81:88:9f:33:f6:83:
f5:30:28:63:b9:e4:c2:a0:2d:ec:fd:bf:cc:d7:82:
39:6d:c1:83:72:aa:c4:5f:8a:0f:4f:e9:3b:0d:dd:
e3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D4:82:69:85:07:6C:62:EF:6F:E6:54:E7:AC:A7:66:90:78:6A:9A
X509v3 Authority Key Identifier:
keyid:71:FC:63:EE:F6:67:4F:26:B5:03:A8:30:A5:DF:A9:53:D2:FF:AA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfxj7vZnTya1A6gwpd-pU9L_qr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:0b:b5:af:50:57:45:40:a8:11:0c:ac:b4:13:af:75:5b:c5:
f2:99:bf:e5:0e:04:66:1f:32:98:0b:4f:c8:9e:c9:cd:bd:f8:
bb:c0:06:a0:03:84:19:0a:57:b7:0a:52:7e:71:d9:f3:c7:0b:
87:c8:41:68:09:a0:89:63:44:39:42:22:ec:ca:08:9b:86:30:
a6:d7:4e:54:25:e2:0b:38:38:7b:05:a3:67:71:2b:77:e3:7d:
8f:d0:3d:7d:36:7d:ff:e6:e9:55:01:ad:47:84:f0:a7:6d:76:
ca:82:11:5b:46:35:0c:4b:69:44:54:5e:13:be:eb:59:30:d3:
6c:6c:5e:c1:3c:5f:d4:b5:a4:65:05:01:70:67:26:88:8e:bb:
c6:07:a4:6b:b7:63:49:6b:d9:ba:9f:d8:91:5d:fd:d8:82:cc:
7e:a1:bb:9a:9f:e1:55:53:5c:84:a6:e4:27:f5:b3:e7:7c:fd:
4d:e8:3e:7b:12:3b:cd:e5:2a:68:de:4f:22:da:04:36:0d:1f:
1b:69:0c:d9:e8:75:86:41:6e:02:b3:29:4f:e1:69:aa:9c:b3:
cd:6b:d3:01:d2:ec:c3:d8:7a:23:3d:05:cc:67:cf:0f:07:17:
80:15:3b:c6:68:cb:34:41:23:2b:22:c6:be:e5:ad:39:a5:6a:
6f:4e:f3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:19 2026 by rpki-client