Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
File: CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json)
Hash identifier: 0/ienSamRNb8dbYqEXCmlINxTt77/bEW/Zomk0h6ZS4=
Subject key identifier: 97:DE:3F:E9:D3:9F:1A:C6:09:4F:1E:8B:43:A8:F8:1D:EB:EB:EA:12
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial: 019CABD9A9EDF800D8ED22ED6BC9A2ABFCB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
Manifest number: 1411
Signing time: Mon 02 Mar 2026 00:01:34 +0000
Manifest this update: Mon 02 Mar 2026 00:01:34 +0000
Manifest next update: Tue 03 Mar 2026 00:01:34 +0000
Files and hashes: 1: 1-0vVi4FHHAdgEAN-aAZqxiCjS0I.roa (hash: OTTvBLhkOcop4Nbi1DHyFcQk24Pft/t6CQKmbEUIG7Q=)
2: An2l5nFXJ60Dmnc7ytV8xeoA-4w.roa (hash: XripkKF1BDgNijV9Sww4y4Pa3QzTCZtDgL7y8YpoE00=)
3: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: tWdsWX1vcVwn5HnJQ6rgMG/hW7w4/rYmWfFbqxzhMuk=)
4: DtNjMaX-knG3kL803vSueqhEdMU.roa (hash: D5yJVp5o771p+zwhuuRghzaJUbXhIq0JcefHW8i9ex0=)
5: aEg8pKYRLzgHoBTbcFWlM2bc9cY.roa (hash: /Iyi+dntnfLdprySjcri6ap8bjxvS/nEOkhR72Tr4I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a9:ed:f8:00:d8:ed:22:ed:6b:c9:a2:ab:fc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Validity
Not Before: Mar 2 00:01:34 2026 GMT
Not After : Mar 3 00:01:34 2026 GMT
Subject: CN=97de3fe9d39f1ac6094f1e8b43a8f81debebea12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:8a:84:b1:30:0f:85:e7:6b:c3:a1:50:3f:
d9:4b:02:6f:eb:a4:6e:4c:e4:57:b7:0e:14:9c:ec:
71:16:48:a0:22:b9:ce:4e:da:96:1c:45:f1:e2:e1:
78:3e:d9:46:aa:29:38:33:77:4e:c4:9d:11:30:96:
47:6c:8e:e6:7b:2d:30:32:40:69:0a:f5:bb:e1:f8:
f7:7f:2c:5b:bf:46:d1:76:42:e4:6b:8e:65:87:3c:
dc:03:ca:ef:ab:1f:dc:f5:78:87:47:0a:d9:57:69:
1b:e3:3e:8c:86:03:61:d7:e3:7c:b7:26:15:e1:93:
c5:ce:04:16:c9:1f:c7:6d:69:3b:63:f9:ca:fe:ec:
61:2f:68:01:07:fd:85:97:fd:2b:f3:08:40:19:f8:
fa:ae:6f:14:8f:86:7b:ef:1c:a3:a0:14:40:fa:af:
e4:4d:ea:00:55:5f:66:38:ab:78:e5:69:95:0d:40:
57:14:6a:64:80:39:30:ff:0c:65:c2:af:11:d1:d0:
b9:27:f4:c6:e6:e1:fe:65:f7:ff:0a:d2:bf:30:2a:
d0:54:ee:38:8c:a2:79:48:46:e4:1a:54:ac:63:c5:
53:f6:a9:59:f3:dd:ae:4a:74:61:ae:96:dc:96:18:
df:d3:b4:44:f9:ec:c5:6a:8d:ef:8b:f6:61:40:a6:
bc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DE:3F:E9:D3:9F:1A:C6:09:4F:1E:8B:43:A8:F8:1D:EB:EB:EA:12
X509v3 Authority Key Identifier:
keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:99:5a:b2:05:7b:68:9c:2a:5e:9b:e9:ed:c9:53:48:30:74:
ad:1f:c7:fb:e4:9f:dd:bc:72:ab:30:96:fd:43:51:84:50:0e:
3e:fc:60:8e:68:b2:73:c1:54:d7:22:66:7e:0e:7f:c3:8c:80:
3c:ba:6f:f7:2a:d1:06:44:e9:59:99:2f:f3:a1:8f:06:9c:20:
c6:4d:ba:b4:13:00:60:2c:14:02:d2:8a:c6:36:d9:36:73:7a:
37:9c:25:16:7b:c3:25:4f:f6:ab:7b:bc:34:5b:83:45:1b:d1:
8f:96:0f:52:e4:b0:36:68:9d:fb:64:22:14:86:d5:3a:aa:68:
d0:da:ac:7c:12:d7:2f:0e:ef:a6:51:45:f2:91:8f:d9:f7:32:
d7:92:25:5d:14:e8:8f:74:c7:91:04:21:7f:c8:57:78:9c:a8:
af:14:01:28:89:1f:b3:46:94:a0:ee:a8:b3:61:45:82:5b:94:
2c:ec:53:90:61:86:7c:fa:65:44:ea:65:9f:aa:13:ac:db:df:
49:d8:cb:ea:0f:fd:00:19:17:3a:10:cc:e5:40:25:3b:1b:18:
ae:83:c4:6d:c6:77:ca:e7:9c:70:60:9f:a0:bc:40:48:e0:21:
0c:f6:46:e5:b6:4b:db:bc:89:3b:8e:01:8b:10:36:a5:e9:12:
9d:4d:6f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:57 2026 by rpki-client