Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
File: cFUm-asN0naCP8Hw66od5jt9ZWw.mft (raw, json)
Hash identifier: 7WkzZbo2/wDPfP1GRNJpKMHNH2Odh0Bf9vHtglYmP1M=
Subject key identifier: 20:18:01:0C:FE:02:2D:D5:97:8A:46:15:45:2F:DB:FD:44:24:58:9D
Authority key identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
Certificate issuer: /CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Certificate serial: 019CED144C0B137796E67B2AD6BE1AE497B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
Manifest number: 06D1
Signing time: Sat 14 Mar 2026 16:00:56 +0000
Manifest this update: Sat 14 Mar 2026 16:00:56 +0000
Manifest next update: Sun 15 Mar 2026 16:00:56 +0000
Files and hashes: 1: cFUm-asN0naCP8Hw66od5jt9ZWw.crl (hash: F7sQkJoGwp2l7QSNfL6T9BDmmNQwDRtM3N1EK1o49t0=)
2: utX8EvzxjtNKF1hFOEPAnrUCzm8.roa (hash: klBKnxuMcoS0m9Xk0/1QlfvOXmiMTMvpWtNw0ziiP1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:14:4c:0b:13:77:96:e6:7b:2a:d6:be:1a:e4:97:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Validity
Not Before: Mar 14 16:00:56 2026 GMT
Not After : Mar 15 16:00:56 2026 GMT
Subject: CN=2018010cfe022dd5978a4615452fdbfd4424589d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:33:7e:53:46:8c:bf:91:80:b2:21:14:13:06:
46:3e:8e:d1:b4:f4:0b:e9:38:1a:6c:16:47:96:5b:
c1:06:cc:2e:96:b7:35:cc:c1:b1:74:5d:d7:5e:97:
d7:c5:47:6c:bf:6e:d8:46:7b:7b:93:12:76:ee:84:
04:7d:9e:62:74:59:99:15:ee:b0:f2:f6:ed:79:c3:
91:44:65:6b:a3:55:3a:0a:2a:85:8b:c4:f5:1f:3d:
c4:08:2b:9a:11:5e:5b:87:3c:19:87:09:62:d9:bd:
3b:a2:e0:6f:9b:5a:25:10:fe:1e:56:26:62:18:2b:
5d:79:58:e5:48:6d:74:11:43:99:01:56:1a:4b:52:
2e:6e:de:2a:ad:3c:12:4d:43:8a:a8:04:a3:c7:07:
5c:eb:60:90:5d:4a:d0:47:2c:41:dc:98:bb:e7:0e:
20:eb:76:b8:68:4b:e2:2d:90:a6:dc:bf:73:e9:6f:
b1:e9:81:f7:e7:22:d9:d9:4d:24:db:60:d0:0a:d2:
ef:23:2d:72:28:a5:94:07:62:01:94:12:6f:ca:7c:
52:73:ec:bc:73:5c:6c:81:82:c8:52:ec:87:87:9a:
8a:c1:e9:33:d8:1d:e6:78:34:7e:29:ad:ef:35:55:
1a:19:7a:24:90:75:69:ca:9f:ac:0b:3b:f3:8f:d1:
4a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:18:01:0C:FE:02:2D:D5:97:8A:46:15:45:2F:DB:FD:44:24:58:9D
X509v3 Authority Key Identifier:
keyid:70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:40:be:f2:8f:5c:c6:9f:7b:2a:cd:3b:bf:1c:17:20:99:6e:
df:00:3f:bc:f7:fc:99:41:fb:d0:40:c5:ca:9e:86:2a:97:31:
db:ec:ad:9a:49:5e:09:29:d9:74:aa:72:23:ce:9a:27:cc:16:
f5:06:63:b9:a2:fe:c7:32:2d:49:c6:b9:f9:ae:b3:30:ec:ed:
0a:e4:07:83:82:3e:2f:c3:41:d4:a3:7f:ba:81:ab:3c:4c:a5:
95:11:18:f0:2c:5e:87:e3:95:29:20:fd:6b:88:c8:63:1c:e2:
27:9d:12:e4:c7:6e:0f:1b:8b:a0:d3:fa:59:fc:24:c8:34:f7:
1c:e1:6b:fa:c4:15:39:65:1a:99:aa:66:a6:be:3b:c7:c7:e0:
97:d7:5b:41:a2:46:00:94:f0:23:f4:5f:5d:f8:e2:57:d6:37:
10:de:f4:bd:2e:a1:1d:8f:74:38:7f:60:3f:21:3c:5c:4b:91:
e7:30:6a:ac:e9:c0:4c:77:68:56:23:c2:35:d4:bc:a9:79:19:
ea:d9:f5:61:b3:96:dc:5f:aa:dc:61:ff:a2:f1:83:84:22:4b:
36:3e:6b:22:6a:7a:91:59:0c:57:8d:fd:a0:4f:7a:cf:fe:f5:
08:27:6b:d1:39:e2:c0:c2:44:a0:62:78:3a:79:5c:da:80:42:
31:84:9e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 22:05:21 2026 by rpki-client