Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
File: cFngOgjhdBb2ZUYweYg0mZG4Si4.mft (raw, json)
Hash identifier: 9QDFPEQIRrWqKFDyC0v3RtGl603LRAyw3iSbZW9fuec=
Subject key identifier: 39:5B:75:84:1E:A0:4C:BC:48:AC:49:31:CC:F9:BA:8C:FD:93:06:71
Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
Certificate issuer: /CN=7059e03a08e17416f66546307988349991b84a2e
Certificate serial: 01A08C0C91D97A1E4569375303B882AD3BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 16:00:28 +0000
Manifest this update: Thu 10 Sep 2026 16:00:28 +0000
Manifest next update: Fri 11 Sep 2026 16:00:28 +0000
Files and hashes: 1: CYB5NwO37zuvRkWMcW3-BtkYVGo.roa (hash: LInHSGK/8qAq0sJn+JLYwieGEDcam0azNXlnsLsToP8=)
2: _GSS7SJcNRk5v2vKpj-91_QngG8.roa (hash: WRLHRWQSGtnWOjdrbpDdHkWnLB1hXZNo4bQD6Y6g7rg=)
3: cFngOgjhdBb2ZUYweYg0mZG4Si4.crl (hash: BinP5Zk2mu9T2w5DM1yEijjxQthYmCnRMP8JeAQmCUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:91:d9:7a:1e:45:69:37:53:03:b8:82:ad:3b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7059e03a08e17416f66546307988349991b84a2e
Validity
Not Before: Sep 10 16:00:28 2026 GMT
Not After : Sep 11 16:00:28 2026 GMT
Subject: CN=395b75841ea04cbc48ac4931ccf9ba8cfd930671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ff:3c:4a:b1:84:a9:79:78:c3:c9:1e:b5:4e:
0e:8e:77:6e:37:02:39:70:c3:00:f1:54:44:ab:e3:
87:b2:30:87:a8:18:a0:68:3f:da:80:a5:65:22:15:
08:64:ad:55:77:63:3b:52:8c:7e:eb:b0:13:14:79:
f7:47:97:ca:0b:e7:96:ef:ba:c3:9d:2a:80:40:f1:
36:63:43:98:41:e3:8c:45:ea:93:e3:d7:58:e4:e4:
9f:92:46:1b:01:bd:2e:69:e9:53:62:e4:b7:14:17:
42:43:60:ae:14:99:05:5b:3d:07:64:7b:9b:3c:c6:
0e:dd:80:de:cd:12:53:7f:4f:dd:68:9a:7c:0f:ab:
b8:8b:15:d2:a0:1b:e9:cc:d6:b2:a0:bd:d9:a7:79:
82:9c:c6:bd:9c:51:58:35:c6:a9:21:e8:ff:01:06:
53:66:3a:2f:12:59:de:82:d0:2b:05:e4:30:4a:fe:
60:f8:2f:34:16:55:cc:93:00:a0:53:5c:9d:50:15:
05:4e:27:cd:a9:48:ba:2f:89:aa:8e:4b:d2:3e:f4:
8d:5c:8b:30:69:6b:82:a8:2f:db:7e:eb:f3:69:52:
61:42:bd:5e:28:59:64:94:18:18:de:80:61:8b:8c:
44:22:44:09:01:7b:cf:b5:82:c9:ba:13:44:d9:f7:
8a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5B:75:84:1E:A0:4C:BC:48:AC:49:31:CC:F9:BA:8C:FD:93:06:71
X509v3 Authority Key Identifier:
keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:4c:a4:4f:d0:48:22:ea:2b:d0:73:34:b4:9f:e4:9a:61:be:
96:6a:02:e8:06:27:29:6f:af:a0:7b:71:f2:42:44:fb:ff:61:
ae:70:08:5f:9c:74:e6:b5:c4:70:76:4e:5a:82:fe:5b:45:66:
5f:5a:db:c5:80:e9:cf:49:03:08:40:4e:c4:e0:bf:61:9e:db:
25:56:5f:5d:d4:01:29:ea:38:97:99:14:57:85:a1:0d:a9:af:
91:63:d6:7d:62:eb:a3:66:1a:5e:f4:82:7e:bb:29:73:3a:e7:
1f:a2:ea:e3:18:57:eb:0b:0e:f6:6d:ae:cb:75:7f:3c:12:10:
37:a3:da:77:2b:9c:8d:51:14:f9:e9:48:a1:25:d1:5f:d8:89:
71:73:e1:4a:76:fc:aa:7d:99:99:ff:af:5c:36:69:cc:8b:04:
07:47:97:01:cb:ce:d8:1a:3c:e9:41:67:f4:ed:f7:90:22:e3:
bc:49:5e:0d:c9:c4:6a:21:0c:a0:0b:85:65:ac:7a:88:cf:2f:
da:db:bf:3c:8c:39:1b:b1:22:35:4f:fc:bc:8e:9e:65:fe:c6:
4a:02:82:03:4d:b7:3e:2c:f6:8e:16:28:cf:ec:ed:da:fb:17:
53:9e:29:3a:ec:17:52:52:03:05:5e:2b:15:bf:e1:af:c3:f8:
68:90:20:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:15:07 2026 by rpki-client