Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
File: CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json)
Hash identifier: RfyRL/HImJoo83qhJUMtUuCasembruBKFLBISEolNXw=
Subject key identifier: 78:6F:3C:53:B8:AC:58:C0:A9:C2:56:F0:73:46:68:64:95:29:CA:5A
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial: 019D99629A529A3CEB9C5533E1816924BB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
Manifest number: 148C
Signing time: Fri 17 Apr 2026 03:01:09 +0000
Manifest this update: Fri 17 Apr 2026 03:01:09 +0000
Manifest next update: Sat 18 Apr 2026 03:01:09 +0000
Files and hashes: 1: 1-0vVi4FHHAdgEAN-aAZqxiCjS0I.roa (hash: OTTvBLhkOcop4Nbi1DHyFcQk24Pft/t6CQKmbEUIG7Q=)
2: An2l5nFXJ60Dmnc7ytV8xeoA-4w.roa (hash: XripkKF1BDgNijV9Sww4y4Pa3QzTCZtDgL7y8YpoE00=)
3: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: Nl0uN30HNoPJZqkVd4i3AVQE2bfi+M3FJgr8jyeEQWQ=)
4: DtNjMaX-knG3kL803vSueqhEdMU.roa (hash: D5yJVp5o771p+zwhuuRghzaJUbXhIq0JcefHW8i9ex0=)
5: aEg8pKYRLzgHoBTbcFWlM2bc9cY.roa (hash: /Iyi+dntnfLdprySjcri6ap8bjxvS/nEOkhR72Tr4I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:9a:52:9a:3c:eb:9c:55:33:e1:81:69:24:bb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Validity
Not Before: Apr 17 03:01:09 2026 GMT
Not After : Apr 18 03:01:09 2026 GMT
Subject: CN=786f3c53b8ac58c0a9c256f0734668649529ca5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:ef:3f:9c:db:ad:b0:18:d8:42:82:5c:8c:
d1:06:25:f2:fd:a0:8f:f9:83:31:56:ef:43:29:52:
5e:36:3d:bf:c2:ed:b3:4c:72:be:90:c5:88:1b:1e:
69:f8:f8:33:23:ca:f1:26:14:4c:b4:cd:8f:22:fb:
23:79:5d:79:e3:3f:ff:a2:4e:fe:a4:fd:27:96:c7:
a4:fe:9c:bd:4e:5e:55:ee:1d:07:fe:49:fa:9e:e4:
6d:28:d2:15:61:17:93:6f:ed:92:69:e2:a2:10:4c:
21:e1:9d:3b:37:02:b1:f0:f3:21:d1:1e:35:3b:21:
79:b4:70:db:87:fd:09:fe:a1:0a:86:b1:05:f9:39:
b4:c9:db:a1:23:76:0d:de:95:4f:6e:e7:4d:2c:a0:
fe:9c:5d:9f:28:1b:81:d5:c7:16:a8:ad:5b:98:29:
5d:e1:a7:46:91:9d:24:56:e2:e3:4d:2c:70:83:e0:
70:f4:4f:c9:87:2e:d7:ac:8a:6d:3d:64:0f:69:26:
f3:aa:ef:42:a1:6d:45:11:79:59:df:5f:47:40:c9:
26:a5:6e:e0:c8:e7:7c:d2:79:f2:7e:67:ea:b0:c0:
fe:35:fa:3d:0d:b0:4a:68:f5:f5:54:95:ca:27:91:
62:96:06:08:ef:cb:a5:cd:2f:45:70:f4:38:3e:99:
3c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6F:3C:53:B8:AC:58:C0:A9:C2:56:F0:73:46:68:64:95:29:CA:5A
X509v3 Authority Key Identifier:
keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a6:5c:98:ed:b3:91:12:f7:b4:9e:cd:56:03:1d:38:52:05:
05:7e:42:75:40:91:66:1f:92:9e:81:de:76:b5:6d:de:68:89:
c8:15:d3:bb:71:4c:e8:51:ef:49:88:4d:0b:0e:21:14:a9:20:
a1:86:ba:f1:41:d9:05:d7:8e:ff:ae:8c:04:6b:93:98:b7:95:
af:34:cc:17:b6:f6:c5:b6:9b:e8:84:1c:56:61:4b:26:d8:a0:
75:13:db:7a:14:04:6b:cd:6a:aa:13:08:65:25:45:7b:de:d2:
87:8f:97:4f:dd:60:3f:4e:b3:00:3d:f8:e8:d4:d8:da:c4:3c:
6a:9a:de:81:9e:25:7b:06:3c:2c:ca:0b:1c:58:02:ae:0f:52:
b5:05:f6:24:b1:58:75:b2:b5:18:ff:40:ef:7c:b0:0f:bf:6c:
97:a7:c0:b0:dc:b6:96:db:39:a2:58:7f:10:f5:8d:66:12:c4:
5c:8f:3d:ba:da:79:18:66:b3:e4:69:ab:50:3e:83:a8:1b:8d:
ff:6f:eb:d8:de:22:1a:c4:5c:ad:21:38:90:77:ec:35:c9:8c:
b4:6b:b0:b9:fe:36:e1:cf:e7:89:ad:1d:ee:16:82:69:95:35:
fd:c6:74:9e:3c:a8:ce:22:2a:65:88:bb:df:cd:4f:13:fa:87:
1f:7e:f9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:50 2026 by rpki-client