Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
File: cfXp6ogwX30xahKh1J2w6fuJbOE.mft (raw, json)
Hash identifier: 2gh5cxASNoHTXkWRF44L+k7+PHz25SSuCioLWYrMSCc=
Subject key identifier: A9:DD:8A:BA:23:42:15:91:96:6C:14:D3:73:4E:B6:7E:F1:92:72:EA
Authority key identifier: 71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
Certificate issuer: /CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Certificate serial: 019F19B1A696A28801BD9A3E81B5440F19D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
Manifest number: 07D1
Signing time: Tue 30 Jun 2026 18:01:40 +0000
Manifest this update: Tue 30 Jun 2026 18:01:40 +0000
Manifest next update: Wed 01 Jul 2026 18:01:40 +0000
Files and hashes: 1: cfXp6ogwX30xahKh1J2w6fuJbOE.crl (hash: tq4CGqptwYoN6HPMJo24BjYmy8BjKumzZOcyzcd3bfI=)
2: lo1A7pYq1tLNUztFqwS_GAzqH1I.roa (hash: 7Dv6Q1axncu2GBqJKqrxuiYDDZvukjLzUniOctEKoGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:b1:a6:96:a2:88:01:bd:9a:3e:81:b5:44:0f:19:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Validity
Not Before: Jun 30 18:01:40 2026 GMT
Not After : Jul 1 18:01:40 2026 GMT
Subject: CN=a9dd8aba23421591966c14d3734eb67ef19272ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2a:8c:a1:64:89:72:bd:5e:40:26:3c:f7:1e:
17:99:8e:47:ee:2b:07:91:58:76:b2:68:d3:ce:2a:
15:17:b5:76:da:1b:78:99:83:4b:a6:4c:58:09:cc:
9d:75:74:27:32:55:3b:2f:a0:55:4b:62:b8:f3:65:
7f:38:61:f7:18:31:e2:37:13:be:fe:b8:58:d5:a6:
11:c6:85:ef:ca:dd:d0:c1:15:67:ed:78:ee:13:49:
0e:a1:83:ba:b4:cf:5b:bb:ba:ec:22:6e:83:67:de:
ae:c1:4b:b8:af:85:75:74:9b:80:24:29:1c:f8:52:
78:ed:b0:66:a7:41:c7:b4:35:83:2c:1e:34:e1:bf:
76:35:da:bb:45:49:f1:75:ec:3a:e3:b8:bd:c4:6d:
f9:fb:d0:42:5b:3c:13:21:c3:cf:e7:dd:78:67:64:
af:9b:e6:a3:1c:6c:8c:cf:f0:15:e1:6f:88:5d:ed:
59:eb:d4:37:a3:c1:d0:a4:81:a6:ab:a2:8c:de:0a:
18:a0:5b:45:1e:e9:c4:03:62:04:82:5c:31:36:92:
d1:fb:3c:3e:77:b3:61:cd:e7:e8:f1:55:b7:cf:27:
57:4e:82:04:5b:eb:50:f0:11:dd:95:89:98:fa:ec:
2a:46:bf:37:d3:1b:8b:f5:45:6d:95:39:12:fd:ed:
29:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DD:8A:BA:23:42:15:91:96:6C:14:D3:73:4E:B6:7E:F1:92:72:EA
X509v3 Authority Key Identifier:
keyid:71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:51:5b:7d:98:1f:eb:74:21:04:2f:03:d1:32:28:0e:57:0c:
17:14:0d:24:08:c2:bc:d3:7a:3b:b2:3e:ca:a5:8a:08:f2:25:
ae:4e:ce:d6:77:f8:22:1d:a7:b3:b2:64:b3:03:8a:94:2c:eb:
b2:b1:79:f0:28:8a:95:62:1f:94:85:41:0a:aa:d1:bc:8a:7c:
c2:b4:0d:90:e4:60:f4:c8:b3:7c:99:a1:93:d3:46:4c:db:ed:
41:70:33:9e:9a:e7:e8:1a:1d:67:63:3f:7f:b9:7b:01:70:61:
9c:fc:80:dc:67:00:ac:d4:82:ef:b2:12:a6:e3:09:6c:0c:a8:
ec:cd:b8:4b:b6:9e:ed:8b:fb:94:dc:b2:eb:26:04:f0:95:4a:
f7:60:5e:66:32:e1:d3:b2:6d:a4:b9:cb:59:a5:cb:f8:60:00:
8a:8e:cc:90:7a:61:f9:fe:cd:8d:77:4a:a9:d8:53:73:5e:a7:
2c:38:af:06:89:bc:4f:1a:b3:f0:69:66:ab:99:d2:03:cd:35:
4b:64:9a:3f:ff:ea:47:aa:5e:2b:50:70:32:50:f7:00:9b:41:
73:32:be:5f:55:3f:6a:d6:0a:20:52:4f:c9:0f:07:c4:cf:bf:
ce:41:e3:4e:b9:66:86:c2:d8:1e:23:a2:68:3f:19:80:54:1a:
51:dd:02:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:36:21 2026 by rpki-client