Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
File: cfXp6ogwX30xahKh1J2w6fuJbOE.mft (raw, json)
Hash identifier: oYU9jrgO14KjAP0sXKw+jmTvNUGVbfR4v2Jeg33HudM=
Subject key identifier: B3:E7:21:CC:68:A4:59:A7:8A:44:03:AB:0F:2A:D3:32:D2:61:42:17
Authority key identifier: 71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
Certificate issuer: /CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Certificate serial: 019CE5C8E61E63B2ACCB9163DD0B61291E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
Manifest number: 06AD
Signing time: Fri 13 Mar 2026 06:01:14 +0000
Manifest this update: Fri 13 Mar 2026 06:01:14 +0000
Manifest next update: Sat 14 Mar 2026 06:01:14 +0000
Files and hashes: 1: cfXp6ogwX30xahKh1J2w6fuJbOE.crl (hash: 40Ey4VS1yL22g1mQhFjZ2SdNal9je0YWNr/bbHgAvrg=)
2: lo1A7pYq1tLNUztFqwS_GAzqH1I.roa (hash: 7Dv6Q1axncu2GBqJKqrxuiYDDZvukjLzUniOctEKoGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:e6:1e:63:b2:ac:cb:91:63:dd:0b:61:29:1e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Validity
Not Before: Mar 13 06:01:14 2026 GMT
Not After : Mar 14 06:01:14 2026 GMT
Subject: CN=b3e721cc68a459a78a4403ab0f2ad332d2614217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b5:22:50:85:c4:33:de:74:5a:3f:cf:46:30:
59:76:3d:cf:39:d0:ef:89:34:e9:91:4c:45:e7:4b:
9e:82:45:89:57:07:78:88:ac:d2:bf:46:ff:f8:20:
f7:97:4f:47:7a:47:df:ae:0d:32:35:05:a9:63:0a:
51:98:7a:39:38:47:d2:4e:d0:96:b5:ed:be:3e:50:
a3:31:78:f3:68:15:c2:a6:40:d5:97:1e:d7:4e:15:
04:3f:60:f4:38:63:78:48:3a:2d:28:6b:22:29:57:
bf:98:99:8c:0d:71:88:61:ad:4b:65:4a:28:0b:97:
b8:68:ef:67:2f:a3:0d:07:ed:4d:d5:03:44:0a:4c:
77:38:5e:0d:94:eb:72:b1:bf:d0:64:91:be:cc:5c:
81:a8:1a:0c:35:16:7f:b5:4b:85:0b:cd:60:5b:0b:
93:0b:d4:1a:78:e4:ab:87:4a:92:a8:42:d5:cb:5f:
9d:1c:38:12:58:2e:cf:e2:24:3f:70:38:80:ff:8f:
6d:f9:a4:ad:6d:b7:23:42:65:b5:1c:b8:64:c8:ea:
aa:67:cf:9b:bf:6c:75:05:21:b1:b9:04:ab:c8:73:
2c:ea:38:e9:2b:1d:a3:84:3f:15:3d:71:c6:48:fe:
2f:4e:58:7d:4e:e5:b2:ab:bb:47:3d:28:3c:4d:13:
dd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E7:21:CC:68:A4:59:A7:8A:44:03:AB:0F:2A:D3:32:D2:61:42:17
X509v3 Authority Key Identifier:
keyid:71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b7:38:31:3d:be:ae:38:68:6a:e7:e1:74:8b:cd:3b:de:14:
a0:08:2e:fb:13:5e:b5:09:7b:49:33:58:06:f0:2e:62:76:f2:
c2:15:36:c9:7a:82:32:98:b4:af:57:6d:21:4b:28:1f:e7:8a:
66:d2:42:49:21:2a:fe:b1:75:4c:ea:cb:2b:25:aa:71:fa:a6:
71:f0:eb:b0:33:8d:36:88:fa:d2:3c:da:fd:0c:0a:1d:f1:00:
4f:ed:56:34:98:13:78:f0:40:e8:58:53:81:fe:85:75:6b:d3:
21:b6:4e:73:08:36:ed:d3:ce:23:e4:53:ed:40:f3:d5:b4:bc:
02:fe:ba:ea:fb:98:7e:1c:b9:a4:4e:17:4e:90:ef:d9:ef:5a:
06:b3:77:7e:1a:8e:c7:75:42:f5:a9:fd:46:0e:d2:b8:66:31:
b2:ea:de:13:2c:64:dc:6b:ec:bd:7e:99:3f:d6:dc:c3:4e:d2:
15:45:be:04:ff:c9:5a:89:59:96:54:c9:46:96:d8:0d:c9:8f:
83:e3:c6:bb:5c:4f:c4:c7:e9:96:9b:e3:71:8b:71:00:f4:c6:
f0:84:93:a1:ce:4c:6c:ba:51:19:6b:44:e3:ce:6a:fb:cf:0f:
7a:3a:dc:ea:08:fb:20:de:fb:38:b1:e5:1f:3c:74:52:00:e6:
91:3f:b3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:56:54 2026 by rpki-client