Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
File: CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json)
Hash identifier: wQyNROKtMvFBjlyGFCzmhxmBbsIGkMCJvusAaWRovKg=
Subject key identifier: 08:65:72:80:C9:C2:42:A2:3B:5B:51:5B:9F:D0:34:27:84:F4:CF:5F
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial: 019EBEEC35F13340B285B1F55555004EC408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
Manifest number: 1524
Signing time: Sat 13 Jun 2026 03:00:11 +0000
Manifest this update: Sat 13 Jun 2026 03:00:11 +0000
Manifest next update: Sun 14 Jun 2026 03:00:11 +0000
Files and hashes: 1: 1-0vVi4FHHAdgEAN-aAZqxiCjS0I.roa (hash: OTTvBLhkOcop4Nbi1DHyFcQk24Pft/t6CQKmbEUIG7Q=)
2: An2l5nFXJ60Dmnc7ytV8xeoA-4w.roa (hash: XripkKF1BDgNijV9Sww4y4Pa3QzTCZtDgL7y8YpoE00=)
3: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: yUknE1fiFsWFwvDxbf76ZYsn/tYU3hm+z/TSNAX3Hc0=)
4: DtNjMaX-knG3kL803vSueqhEdMU.roa (hash: D5yJVp5o771p+zwhuuRghzaJUbXhIq0JcefHW8i9ex0=)
5: aEg8pKYRLzgHoBTbcFWlM2bc9cY.roa (hash: /Iyi+dntnfLdprySjcri6ap8bjxvS/nEOkhR72Tr4I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:35:f1:33:40:b2:85:b1:f5:55:55:00:4e:c4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Validity
Not Before: Jun 13 03:00:11 2026 GMT
Not After : Jun 14 03:00:11 2026 GMT
Subject: CN=08657280c9c242a23b5b515b9fd0342784f4cf5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:b2:b3:46:ec:7d:be:ca:07:74:97:da:cd:
bb:6e:f7:be:af:24:1d:53:e9:63:d0:4d:21:d2:9b:
8d:bd:1a:92:51:dd:ce:52:b2:1d:77:5a:83:2e:f0:
39:f5:d0:80:27:f1:a1:63:ec:b5:ea:10:65:22:bb:
8e:e5:be:4b:f3:89:50:e9:e5:22:70:a2:02:90:97:
55:2e:9a:49:68:d6:5e:3d:3a:fe:be:13:8c:d8:70:
2f:37:24:c7:2d:09:51:6f:7c:ad:b8:e8:9f:3b:2f:
7e:05:38:38:e3:12:cf:08:a6:7d:99:03:ce:b6:69:
bf:0e:bd:43:0a:db:cd:70:a3:76:5c:88:b1:5e:37:
72:00:0a:6f:e7:70:44:cb:11:39:42:b4:ed:06:49:
85:9c:20:9a:59:b6:5f:28:a1:fc:da:d1:68:ee:eb:
6b:f0:99:5b:3b:2d:f1:91:aa:ad:fc:64:eb:16:30:
64:d0:f1:28:b4:65:92:66:66:7d:1f:c0:48:ea:f0:
82:06:21:48:62:1f:ca:3c:0a:e5:db:0a:ba:fc:ab:
8e:b2:cc:0c:e7:74:54:98:56:e3:1a:50:7b:a8:61:
18:9c:b7:28:0e:7c:4d:27:af:ff:30:72:27:e6:de:
61:8b:86:b6:74:17:72:b8:a2:98:03:fb:9c:54:47:
04:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:65:72:80:C9:C2:42:A2:3B:5B:51:5B:9F:D0:34:27:84:F4:CF:5F
X509v3 Authority Key Identifier:
keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:53:27:89:c3:f9:31:22:e1:6f:d8:39:64:50:36:38:3a:b6:
a2:d2:ed:0c:a8:4a:ae:58:fc:37:10:29:3c:40:28:66:b3:3c:
15:c0:65:89:ac:4e:04:30:17:cf:27:07:cf:0e:e1:10:8c:3a:
de:ca:79:ff:f1:e3:cf:10:ef:65:fb:37:ce:ba:aa:c7:0b:1e:
04:26:9a:72:17:88:de:e4:61:e7:72:64:ec:25:1c:09:1e:6d:
1d:0f:e7:ec:e2:81:6e:d0:59:f6:69:df:b1:c6:28:82:d8:f5:
47:29:29:a4:41:84:ef:7e:14:18:e9:1c:71:c5:f8:65:54:d8:
11:c6:fb:0c:4c:69:dc:89:ba:99:0a:2f:9f:e5:4d:e4:27:2c:
9b:48:09:c9:d2:17:6a:2c:3b:84:99:a8:47:a1:0d:79:36:de:
7b:f5:92:d5:e3:98:dc:fe:5a:d9:ed:34:0d:57:19:55:ed:90:
46:21:32:f5:9c:d7:2a:2e:27:db:75:09:5c:7d:e9:d5:45:a0:
5f:6a:70:99:cc:f8:5a:22:38:38:73:b3:27:7a:af:77:2e:bc:
cf:64:e6:e4:c2:6e:ea:9d:c4:65:c3:2b:3a:8d:12:15:65:cd:
3c:ec:0e:64:6d:c6:5a:7c:ca:8b:52:01:c2:4b:cb:92:12:37:
21:77:e1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:11:52 2026 by rpki-client