
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
File: CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json)
Hash identifier: bOpOvLmvf6XFy9YEwPqveSBaUwJUVo3IZEPwcAp/0EE=
Subject key identifier: 92:CF:CA:03:F5:32:89:9D:8B:86:6D:4D:64:4E:A3:DA:2A:B4:37:75
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial: 01A0C28D2576D3A9DB7EF68B1431FEC56A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
Manifest number: 162F
Signing time: Mon 21 Sep 2026 06:00:25 +0000
Manifest this update: Mon 21 Sep 2026 06:00:25 +0000
Manifest next update: Tue 22 Sep 2026 06:00:25 +0000
Files and hashes: 1: 1-0vVi4FHHAdgEAN-aAZqxiCjS0I.roa (hash: OTTvBLhkOcop4Nbi1DHyFcQk24Pft/t6CQKmbEUIG7Q=)
2: An2l5nFXJ60Dmnc7ytV8xeoA-4w.roa (hash: XripkKF1BDgNijV9Sww4y4Pa3QzTCZtDgL7y8YpoE00=)
3: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: bcVOySR5uWXqK3ufuqp9lnHVZGd5kzTR8HoVB3rxQtY=)
4: DtNjMaX-knG3kL803vSueqhEdMU.roa (hash: D5yJVp5o771p+zwhuuRghzaJUbXhIq0JcefHW8i9ex0=)
5: aEg8pKYRLzgHoBTbcFWlM2bc9cY.roa (hash: /Iyi+dntnfLdprySjcri6ap8bjxvS/nEOkhR72Tr4I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:25:76:d3:a9:db:7e:f6:8b:14:31:fe:c5:6a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Validity
Not Before: Sep 21 06:00:25 2026 GMT
Not After : Sep 22 06:00:25 2026 GMT
Subject: CN=92cfca03f532899d8b866d4d644ea3da2ab43775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:60:fa:9e:b0:6b:1a:16:74:a6:8f:b1:96:39:
6c:78:f1:f8:73:61:29:5f:e0:00:5b:6a:06:cf:d3:
fa:bd:93:f5:00:fd:16:9a:1f:4a:05:5f:d9:f3:b6:
86:28:66:9a:f1:59:ff:28:c7:63:26:e4:a3:c3:4b:
da:ec:72:be:a1:fd:f1:f2:f0:07:b4:59:f8:64:9b:
b8:60:ce:08:88:c0:56:51:0e:ac:d7:a9:1c:9e:4a:
ff:e4:36:e4:0b:07:b7:28:75:2a:ba:a3:93:45:8e:
c3:37:08:c6:c3:da:e8:67:cf:db:71:b1:90:b6:97:
0e:82:87:02:73:71:1b:cb:cc:89:e4:b5:81:d3:4c:
4b:58:77:29:5e:37:61:19:86:06:6b:fb:e5:50:5c:
63:60:97:e8:f1:d3:dd:f8:c9:c2:a4:6d:83:67:64:
0d:2c:fe:a9:42:0f:99:16:5f:a4:d7:3f:5f:63:b0:
ba:c3:d7:16:92:2e:40:35:80:52:5d:21:96:37:16:
35:fa:e7:58:83:c3:8e:ee:d7:ce:95:31:92:87:5d:
74:31:a0:28:19:05:54:22:70:e0:5d:d7:01:dc:d3:
97:f0:70:94:d3:90:dd:ad:11:56:09:0d:82:16:e7:
48:5a:fa:43:b6:86:db:5f:de:84:83:7f:00:fc:fb:
55:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CF:CA:03:F5:32:89:9D:8B:86:6D:4D:64:4E:A3:DA:2A:B4:37:75
X509v3 Authority Key Identifier:
keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:37:f2:69:9d:97:d5:65:c6:d5:94:33:ef:af:2f:eb:8f:e7:
4c:42:f7:7b:1d:d7:ab:1d:d3:97:90:82:13:b3:60:82:19:19:
00:18:1d:73:7b:9f:4d:7f:dd:52:73:dd:63:17:c9:68:65:21:
23:33:4b:a8:7d:58:88:4c:1e:77:3c:04:c8:29:c1:cc:a4:4f:
1d:57:1c:24:ed:ec:8b:e0:d5:61:6b:26:80:44:40:e9:5f:53:
1c:07:66:e0:bf:17:0b:2f:5c:ff:f8:0a:9f:52:5e:b1:4f:62:
ad:a5:2a:f6:bc:7c:47:a3:78:0f:49:50:c4:61:41:6c:8e:78:
9b:af:92:b5:b9:ac:61:1c:cb:94:05:34:98:e1:33:70:62:10:
5c:33:c2:79:a6:33:fd:4e:5a:87:19:12:5f:7e:d0:16:8b:b1:
d5:11:01:d3:13:c3:12:bb:7e:80:c3:bb:32:32:67:2f:f0:b3:
33:b3:e9:26:a2:40:fb:6e:32:5b:b6:63:41:b7:c7:51:48:40:
44:9e:bb:b6:8b:0e:33:9f:a5:50:11:02:ef:d5:66:08:f2:dd:
0f:64:a8:ae:35:78:81:6e:a8:66:5a:a3:aa:c4:74:0b:0b:b6:
78:f8:b0:2f:7d:09:ea:4e:e7:f6:3c:a8:73:41:f4:fe:b2:ac:
ce:73:23:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:08:15 2026 by rpki-client