Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
File: CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json)
Hash identifier: 5OrdUqkfovHuZvFPHWdtViqACuw+IuVWyRm6fp0MWZg=
Subject key identifier: CA:B6:7D:3F:4D:8F:4B:7D:A5:B0:A9:28:BA:4E:E8:44:E7:2C:E5:4E
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial: 019FA899BD78D219020423C0FA8EC7C3C87A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
Manifest number: 159D
Signing time: Tue 28 Jul 2026 12:01:15 +0000
Manifest this update: Tue 28 Jul 2026 12:01:15 +0000
Manifest next update: Wed 29 Jul 2026 12:01:15 +0000
Files and hashes: 1: 1-0vVi4FHHAdgEAN-aAZqxiCjS0I.roa (hash: OTTvBLhkOcop4Nbi1DHyFcQk24Pft/t6CQKmbEUIG7Q=)
2: An2l5nFXJ60Dmnc7ytV8xeoA-4w.roa (hash: XripkKF1BDgNijV9Sww4y4Pa3QzTCZtDgL7y8YpoE00=)
3: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: HC6c7VTPNHEmMBONsQ4cp0TI2hJl/hsJpThl5OOMKZM=)
4: DtNjMaX-knG3kL803vSueqhEdMU.roa (hash: D5yJVp5o771p+zwhuuRghzaJUbXhIq0JcefHW8i9ex0=)
5: aEg8pKYRLzgHoBTbcFWlM2bc9cY.roa (hash: /Iyi+dntnfLdprySjcri6ap8bjxvS/nEOkhR72Tr4I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:bd:78:d2:19:02:04:23:c0:fa:8e:c7:c3:c8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Validity
Not Before: Jul 28 12:01:15 2026 GMT
Not After : Jul 29 12:01:15 2026 GMT
Subject: CN=cab67d3f4d8f4b7da5b0a928ba4ee844e72ce54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ef:19:94:ce:d7:03:50:1b:3e:48:4b:19:36:
0e:40:5e:4c:fc:49:bb:23:ef:49:fa:fb:3f:eb:23:
f9:4b:d4:ac:8b:cb:67:53:26:6a:3c:30:5b:3e:a5:
48:9c:69:08:99:84:d0:97:cb:2d:2d:bc:39:a6:b1:
97:d6:17:59:b8:79:61:3e:7a:06:43:b2:a5:ef:af:
47:51:7c:36:9d:01:86:66:f1:e8:cb:fc:4c:eb:d1:
cb:43:85:ba:3e:0b:db:d3:55:7b:64:fb:32:c9:5f:
4f:ef:fa:81:60:cc:8f:f4:bb:9b:8c:35:51:de:1b:
2c:3e:96:69:a7:3c:9b:14:3b:04:ec:fb:b8:fa:b2:
37:52:ae:1b:67:75:51:b8:6c:b3:5f:fa:8e:40:cf:
f6:70:ba:19:c7:64:c3:8e:02:ff:6e:65:c7:e8:2d:
7b:16:17:7c:58:90:8c:d4:8f:c3:95:11:d6:19:73:
7a:9e:4e:a7:a4:e8:0f:b2:30:59:83:72:47:4e:e9:
18:21:fb:4e:7f:f6:c0:87:2d:ce:7f:74:71:75:88:
57:15:89:77:52:f4:50:ca:93:ca:74:81:b1:09:35:
c7:cc:69:58:23:bd:66:f1:f0:31:09:ee:ef:6f:50:
c5:58:0c:f0:8f:07:fa:eb:56:39:03:1c:b4:c6:fb:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B6:7D:3F:4D:8F:4B:7D:A5:B0:A9:28:BA:4E:E8:44:E7:2C:E5:4E
X509v3 Authority Key Identifier:
keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:68:8b:12:3f:14:8f:95:4c:78:9a:03:b6:0c:62:7a:b3:70:
14:33:2a:46:5d:d2:9a:7e:b3:92:a1:cb:d9:fc:17:1b:be:72:
68:46:5a:db:e2:f4:a0:ff:26:33:b3:d0:f3:4e:92:b9:66:3d:
2d:0c:7b:7d:c2:9b:24:4f:4c:b8:4d:68:3c:3e:39:1d:85:2b:
f7:8d:01:1a:4c:58:85:05:31:56:e7:83:7f:1d:76:f2:05:29:
88:44:9f:b8:96:d7:eb:aa:dc:ae:a1:0c:04:66:00:bf:94:74:
74:60:6b:a5:62:6c:04:d1:74:6a:35:cd:93:97:e6:df:30:6c:
77:9d:4a:7c:fe:e1:6f:45:51:fe:8d:f3:b7:de:21:f9:78:0c:
bd:00:2f:e6:86:4f:8e:a8:f4:55:57:a6:d9:f6:39:6d:f1:78:
52:89:8d:28:24:91:53:ac:df:38:bf:49:83:26:b2:88:4a:d9:
d7:ba:48:6f:72:66:8f:1d:00:43:ac:79:7e:a0:38:4f:3e:71:
f4:7c:4a:c1:a4:75:a5:d4:d5:78:b5:87:13:be:2f:20:37:f3:
10:48:15:ec:f6:da:c1:64:92:f4:d9:74:ed:11:85:d2:5b:32:
0c:a6:69:03:d1:86:b5:f9:14:c2:d7:a8:e9:1d:94:49:2b:09:
10:7e:6d:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omb140hkCBCPA+o7Hw8h6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZjBkY2NlYjc0ZjExODVhY2Q5N2FlZWFhYzI1ZGRhNWU5
YjA5MzYwHhcNMjYwNzI4MTIwMTE1WhcNMjYwNzI5MTIwMTE1WjAzMTEwLwYDVQQD
EyhjYWI2N2QzZjRkOGY0YjdkYTViMGE5MjhiYTRlZTg0NGU3MmNlNTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+8ZlM7XA1AbPkhLGTYOQF5M/Em7
I+9J+vs/6yP5S9Ssi8tnUyZqPDBbPqVInGkImYTQl8stLbw5prGX1hdZuHlhPnoG
Q7Kl769HUXw2nQGGZvHoy/xM69HLQ4W6Pgvb01V7ZPsyyV9P7/qBYMyP9LubjDVR
3hssPpZppzybFDsE7Pu4+rI3Uq4bZ3VRuGyzX/qOQM/2cLoZx2TDjgL/bmXH6C17
Fhd8WJCM1I/DlRHWGXN6nk6npOgPsjBZg3JHTukYIftOf/bAhy3Of3RxdYhXFYl3
UvRQypPKdIGxCTXHzGlYI71m8fAxCe7vb1DFWAzwjwf661Y5Axy0xvvwRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMq2fT9Nj0t9pbCpKLpO6ETnLOVOMB8GA1UdIwQY
MBaAFAnw3M63TxGFrNl67qrCXdpemwk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgt
OTk2MTg5ZjljZTE0LzEvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgtOTk2MTg5ZjljZTE0
LzEvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWiLEj8U
j5VMeJoDtgxierNwFDMqRl3Smn6zkqHL2fwXG75yaEZa2+L0oP8mM7PQ806SuWY9
LQx7fcKbJE9MuE1oPD45HYUr940BGkxYhQUxVueDfx128gUpiESfuJbX66rcrqEM
BGYAv5R0dGBrpWJsBNF0ajXNk5fm3zBsd51KfP7hb0VR/o3zt94h+XgMvQAv5oZP
jqj0VVem2fY5bfF4UomNKCSRU6zfOL9JgyayiErZ17pIb3Jmjx0AQ6x5fqA4Tz5x
9HxKwaR1pdTVeLWHE74vIDfzEEgV7PbawWSS9Nl07RGF0lsyDKZpA9GGtfkUwteo
6R2USSsJEH5t0A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:32 2026 by rpki-client