Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
File: CfJr1vRoN-Cv2Vidh478PsiWfwI.mft (raw, json)
Hash identifier: J5DtNwRzD5s/W7WZzmXuPmme3tkWegoQ6Gy5D7eUW88=
Subject key identifier: 24:A3:EB:91:F4:6A:F3:A3:FE:7C:50:38:36:0A:2F:31:CC:6F:5C:21
Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
Certificate issuer: /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Certificate serial: 019D3A1CACA23BA4EE55B38AA4554AF3A6F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
Manifest number: 15D8
Signing time: Sun 29 Mar 2026 15:00:50 +0000
Manifest this update: Sun 29 Mar 2026 15:00:50 +0000
Manifest next update: Mon 30 Mar 2026 15:00:50 +0000
Files and hashes: 1: CfJr1vRoN-Cv2Vidh478PsiWfwI.crl (hash: 0eAkiVQDUkmCvLMAvp+ndx3zJgsiF9ygSsXDuMvr8pk=)
2: VFkF_gxwqOLJ92XDVRj4P0SgEao.roa (hash: Wjt9QdwBOWPZNtbiGNmLCWVPtfz89jktbtlEjzpW8gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:ac:a2:3b:a4:ee:55:b3:8a:a4:55:4a:f3:a6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Validity
Not Before: Mar 29 15:00:50 2026 GMT
Not After : Mar 30 15:00:50 2026 GMT
Subject: CN=24a3eb91f46af3a3fe7c5038360a2f31cc6f5c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5f:dd:69:f1:9f:e3:21:88:88:cf:59:b0:39:
b9:1f:84:d8:99:62:aa:19:b5:cf:cf:41:04:56:6e:
d5:69:da:30:c0:70:0c:73:2f:36:e5:09:cf:60:7e:
2c:39:03:f7:f5:b1:a8:c6:da:48:05:18:91:ee:6e:
5c:b2:e7:23:fe:90:e7:1e:1e:0d:2c:41:64:ac:87:
ab:70:24:a2:74:d0:73:c9:7d:a2:13:3f:20:8a:a4:
bf:10:c6:c8:4c:75:5c:d2:dd:ee:39:2e:34:44:62:
e3:84:29:f6:de:d7:2f:e6:83:b0:46:9f:2a:2c:5e:
9c:38:ba:11:ea:4a:e9:9c:10:d6:d9:f1:0a:78:26:
bc:09:c3:7a:bf:69:f6:fb:00:90:b6:f8:73:49:20:
f6:87:71:6b:96:45:a5:74:1a:68:a2:42:2f:af:32:
26:43:bc:00:09:0b:06:39:e6:c8:ea:a0:74:a2:99:
53:74:74:a4:24:38:35:97:ce:3f:fe:2d:ce:19:dd:
23:8d:70:28:03:ea:04:28:bf:8d:a2:ab:28:35:39:
ac:90:d8:88:63:21:73:b9:97:b0:b4:7b:b3:8a:76:
a1:dc:31:f6:a6:f9:13:ad:52:11:f3:f0:e8:12:b5:
6e:d8:18:d4:59:e1:36:29:c3:04:36:d2:e1:be:25:
a0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A3:EB:91:F4:6A:F3:A3:FE:7C:50:38:36:0A:2F:31:CC:6F:5C:21
X509v3 Authority Key Identifier:
keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:33:80:63:02:9d:51:bf:25:86:a0:00:56:bb:14:c7:44:64:
49:d1:d2:99:1c:5b:39:f6:5b:a1:32:06:11:9a:64:b4:fc:bc:
81:1a:66:50:81:ec:95:b5:b5:57:67:de:37:e1:dc:59:81:c3:
26:65:46:7c:dc:96:0a:a6:18:36:82:0e:4a:4a:2e:01:22:ed:
7b:15:64:19:4c:24:d4:4f:6d:37:4a:fa:73:f4:a4:b2:84:7b:
35:dc:2f:81:6e:de:d3:a2:2b:bf:6d:18:d5:06:d6:8c:74:64:
48:d2:f1:04:08:af:33:4f:f0:51:08:b6:71:7a:cf:6d:18:c3:
39:e5:50:bd:d3:ec:43:7b:b9:f7:1e:7c:fa:c0:58:17:d8:b7:
e4:3c:82:26:63:be:9a:8f:79:fb:ac:25:c7:58:c1:db:3a:8a:
bc:8c:74:04:d5:d5:4b:3e:b3:86:65:92:fe:6e:2c:f8:f9:d7:
d5:18:15:db:11:14:cd:17:49:b1:94:ba:ad:1a:16:c2:52:61:
a2:5e:0f:6e:cb:80:ab:cb:7b:52:69:b2:19:07:27:12:c6:22:
20:3b:a7:16:4b:7a:4d:93:51:de:02:e7:bd:d0:4e:f2:9b:d7:
7c:4c:25:d4:c0:96:50:8a:3a:cb:59:be:87:95:e4:9e:ed:83:
77:3b:2e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:13 2026 by rpki-client