Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
File: cFUm-asN0naCP8Hw66od5jt9ZWw.mft (raw, json)
Hash identifier: s9kY86oJwN57kqjTrPmR4G5prt1cxL2MEhNlIFlq6bo=
Subject key identifier: E1:C3:C0:74:18:9A:7A:42:F1:21:DA:43:C7:F9:C0:0A:E7:3F:A2:84
Authority key identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
Certificate issuer: /CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Certificate serial: 01A08FEA27A83A08DBDC52300B53E5E89026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
Manifest number: 08B3
Signing time: Fri 11 Sep 2026 10:01:22 +0000
Manifest this update: Fri 11 Sep 2026 10:01:22 +0000
Manifest next update: Sat 12 Sep 2026 10:01:22 +0000
Files and hashes: 1: cFUm-asN0naCP8Hw66od5jt9ZWw.crl (hash: PQlDMivxABueCd/XqhuypmwR8dXwUkor9LVzkv7wqpI=)
2: utX8EvzxjtNKF1hFOEPAnrUCzm8.roa (hash: klBKnxuMcoS0m9Xk0/1QlfvOXmiMTMvpWtNw0ziiP1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:ea:27:a8:3a:08:db:dc:52:30:0b:53:e5:e8:90:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Validity
Not Before: Sep 11 10:01:22 2026 GMT
Not After : Sep 12 10:01:22 2026 GMT
Subject: CN=e1c3c074189a7a42f121da43c7f9c00ae73fa284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5c:4f:d2:bf:af:6e:8f:04:35:95:49:ac:b0:
da:ae:29:44:2b:34:ad:08:b5:87:bc:7a:e9:f0:f6:
4c:bc:00:8e:68:8d:28:c9:08:44:9a:f7:7c:ef:52:
93:5e:07:1b:ae:0b:7b:5c:c9:c1:1d:9a:a7:5e:2e:
07:a3:cb:d9:5f:f8:5b:70:b8:da:55:22:ff:2a:ca:
e4:91:f3:4c:1e:d1:82:4e:88:11:99:0b:5a:88:53:
4a:35:a0:9b:79:de:da:4b:8d:5f:42:74:29:5b:0e:
24:d2:69:ce:1e:05:20:13:3f:c8:a0:02:df:17:07:
bb:8d:f6:b9:1c:de:bd:d2:35:f8:1b:aa:06:fe:2d:
dc:25:d2:bf:4b:66:82:41:49:00:e3:ab:24:24:af:
dc:3f:99:63:0a:36:ce:fe:a3:c6:84:5a:f6:75:8e:
89:fe:16:b6:4e:03:52:7c:ea:fc:e5:68:9e:57:b7:
db:47:94:73:fa:17:16:84:2f:dc:78:72:fe:a2:c6:
cf:ea:ec:33:04:81:73:80:90:ac:6a:18:42:82:dd:
b0:36:16:6d:d9:b5:38:29:84:c1:c9:22:0d:e9:b2:
8d:a6:57:89:ad:26:62:a1:4d:bb:4f:26:90:51:7b:
a8:43:40:fc:9a:0a:9c:9a:19:29:91:bd:fe:f2:a9:
ec:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C3:C0:74:18:9A:7A:42:F1:21:DA:43:C7:F9:C0:0A:E7:3F:A2:84
X509v3 Authority Key Identifier:
keyid:70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:e2:2c:16:32:1f:61:40:e8:d5:77:d8:3a:10:8c:0f:9d:7d:
55:c9:6d:c5:9e:03:53:bd:f7:17:d9:fb:41:ea:72:7f:e4:8b:
4c:e9:05:6d:b7:51:12:43:98:06:f9:bb:7e:df:39:03:40:d4:
7e:fb:e0:06:15:37:24:a4:60:b3:8c:1d:06:1c:6b:9d:85:bb:
59:11:cd:28:d3:c9:8d:9f:ee:28:de:0c:d9:86:a4:28:54:eb:
1d:29:8b:04:15:ea:e4:f5:a5:91:7f:ec:16:27:5b:0b:d8:9a:
0a:05:a2:08:13:f5:70:ef:00:68:01:9c:31:2a:79:69:8e:6d:
5d:07:91:c8:b4:04:cc:00:3c:8c:75:78:33:89:c1:bf:24:d3:
27:61:fb:85:e6:1d:57:2c:95:5f:b9:cf:53:6f:3f:b1:df:2a:
22:43:22:92:c0:7d:e3:cc:7b:d8:dc:d1:84:5a:8c:d5:6b:e6:
3d:ff:4b:79:1e:33:d7:2f:0f:f8:06:f6:56:7d:f9:7c:f1:07:
d4:d6:d1:77:be:1a:01:d8:3d:bb:5e:11:69:b6:0c:35:92:c5:
ad:35:f9:c9:c7:a5:24:c8:b3:76:d5:bd:3d:99:59:49:36:6d:
78:fa:cd:73:c4:aa:14:91:81:e4:18:cd:a4:eb:c9:d2:ee:09:
c4:76:e0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:29:14 2026 by rpki-client