Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/d86d91-4d73-4bfc-b4a0-7372f43b8bce/1/cfBL3mjM4_Tb0MUVIhC_0mcUS4A.mft
File: cfBL3mjM4_Tb0MUVIhC_0mcUS4A.mft (raw, json)
Hash identifier: HDkNsDDIJmFaqgILbg2WUGuOScBAMt2jm7nYqIXAYwE=
Subject key identifier: 3F:BC:79:01:76:A7:B4:EC:A9:E8:81:64:68:8E:77:9A:A1:56:36:89
Authority key identifier: 71:F0:4B:DE:68:CC:E3:F4:DB:D0:C5:15:22:10:BF:D2:67:14:4B:80
Certificate issuer: /CN=71f04bde68cce3f4dbd0c5152210bfd267144b80
Certificate serial: 01A0E853C2F8BC6AED1489FC95F9C559A561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfBL3mjM4_Tb0MUVIhC_0mcUS4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d86d91-4d73-4bfc-b4a0-7372f43b8bce/1/cfBL3mjM4_Tb0MUVIhC_0mcUS4A.mft
Manifest number: 27
Signing time: Mon 28 Sep 2026 14:03:18 +0000
Manifest this update: Mon 28 Sep 2026 14:03:18 +0000
Manifest next update: Tue 29 Sep 2026 14:03:18 +0000
Files and hashes: 1: cfBL3mjM4_Tb0MUVIhC_0mcUS4A.crl (hash: OvooL1K2Wg3DdfggRCb6zouJPMiP2lx/JuzSX2m1g/k=)
2: fKaOh0e_pQMFIsO2Z-ZpxIe-y6k.asa (hash: 6ZvLF8JMyFGPxV6WqHVJqvsqLoVxgvy7UAegaXFGe0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d86d91-4d73-4bfc-b4a0-7372f43b8bce/1/cfBL3mjM4_Tb0MUVIhC_0mcUS4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d86d91-4d73-4bfc-b4a0-7372f43b8bce/1/cfBL3mjM4_Tb0MUVIhC_0mcUS4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cfBL3mjM4_Tb0MUVIhC_0mcUS4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:53:c2:f8:bc:6a:ed:14:89:fc:95:f9:c5:59:a5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71f04bde68cce3f4dbd0c5152210bfd267144b80
Validity
Not Before: Sep 28 14:03:18 2026 GMT
Not After : Sep 29 14:03:18 2026 GMT
Subject: CN=3fbc790176a7b4eca9e88164688e779aa1563689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:85:6c:6b:ea:eb:d1:ee:1e:d9:19:8a:42:bd:
df:71:cb:bc:71:59:5d:a3:fa:c8:06:56:28:6b:cf:
ae:eb:d1:5f:b2:e6:75:b9:ac:c0:4d:f8:b4:4b:44:
fb:bf:24:fe:c4:b2:82:48:65:c7:3c:d4:54:9a:5d:
c7:e3:1e:02:57:f6:f5:a6:5f:c0:35:d1:6e:de:06:
2c:a3:e5:d9:33:78:68:ae:f3:56:87:6e:3a:cd:cc:
02:11:54:c3:47:e8:5b:7f:63:3a:fc:60:f9:50:c0:
4c:e5:5a:9c:78:38:68:13:1f:21:f8:65:1c:61:c4:
f4:cd:7a:0e:ce:21:ff:45:bd:64:1b:9d:2c:db:1d:
5e:be:a1:78:4e:81:0f:87:1f:0a:f7:97:7f:e0:42:
90:b0:72:88:b9:f0:54:39:ff:c7:6e:72:d1:e3:1a:
da:f0:27:7b:de:00:01:30:89:bf:6f:59:9b:c9:5d:
91:fc:b1:fe:84:d2:42:45:53:90:67:f6:d4:bc:f3:
b7:18:53:8e:1f:1d:ed:ce:b3:b2:d3:ec:63:35:85:
43:b6:aa:92:20:38:57:92:af:b5:fb:a9:a8:47:5f:
56:0d:16:d5:1c:8d:37:44:6c:ef:5f:78:84:f0:73:
60:0c:2a:96:d4:bb:d9:a1:92:f0:d0:c7:90:79:60:
05:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BC:79:01:76:A7:B4:EC:A9:E8:81:64:68:8E:77:9A:A1:56:36:89
X509v3 Authority Key Identifier:
keyid:71:F0:4B:DE:68:CC:E3:F4:DB:D0:C5:15:22:10:BF:D2:67:14:4B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfBL3mjM4_Tb0MUVIhC_0mcUS4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d86d91-4d73-4bfc-b4a0-7372f43b8bce/1/cfBL3mjM4_Tb0MUVIhC_0mcUS4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d86d91-4d73-4bfc-b4a0-7372f43b8bce/1/cfBL3mjM4_Tb0MUVIhC_0mcUS4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9b:75:6d:71:43:b0:1e:e5:e6:5e:37:f8:c8:28:25:09:a7:
80:ff:14:ad:a6:03:27:09:8d:82:c5:05:fb:81:f9:aa:4c:bb:
78:3d:56:70:e6:6e:0e:dd:db:8a:a1:36:49:0c:73:82:41:57:
02:bc:6c:03:35:1f:4f:93:79:30:82:6c:dd:64:a7:1b:0d:d1:
cd:f6:40:c2:ed:dc:60:4c:78:15:4f:5c:28:7a:d7:a0:8b:ab:
a0:1d:d3:df:1c:12:92:bb:95:e1:e5:50:7b:81:42:b7:29:20:
4a:df:f2:c4:8f:95:ce:cb:6f:b5:62:b6:93:00:67:f8:a6:70:
57:cf:a9:84:a9:2a:67:f7:ab:34:f5:ef:2c:21:9d:6f:1b:01:
56:dd:35:c7:44:48:0e:41:9e:bc:9f:4a:3f:9b:92:4c:3d:6a:
a8:55:a1:b1:ab:62:ed:69:9e:95:97:45:32:e0:e2:fa:f5:e2:
79:77:b9:d5:85:42:1f:2e:02:38:91:f9:6b:2d:e2:39:e0:cf:
74:27:26:43:04:56:bb:39:bd:af:51:55:7a:8f:9c:21:9f:b7:
0f:1c:b0:9b:80:07:c0:4b:91:27:37:0a:23:ba:3b:de:bc:d8:
48:16:19:c4:be:af:54:57:cf:c5:85:b6:09:7e:1c:94:07:cf:
8d:bb:79:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:45:14 2026 by rpki-client