
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
File: Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft (raw, json)
Hash identifier: Ded/+vuwOSW1obvMi4Vpf5QhDoueG0FzrsQ2dctscpU=
Subject key identifier: 0E:72:41:19:5A:18:B7:05:0F:AB:46:15:E9:9A:5E:67:13:FC:B1:98
Authority key identifier: 09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
Certificate issuer: /CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Certificate serial: 019E3184A8C1AB685DB929407D37E18788E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
Manifest number: 1650
Signing time: Sat 16 May 2026 16:00:37 +0000
Manifest this update: Sat 16 May 2026 16:00:37 +0000
Manifest next update: Sun 17 May 2026 16:00:37 +0000
Files and hashes: 1: Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl (hash: MQirQ7AvKMSy2mBnUgMMHemMcxpIbuXBACZIJxl+WgQ=)
2: fjfBNYgsUNX3mydnGn3xY9hxxkI.roa (hash: RcxMT9Fv//tOCCRi6oIZLm/dau+OtJX1wqCmolZkb18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:84:a8:c1:ab:68:5d:b9:29:40:7d:37:e1:87:88:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Validity
Not Before: May 16 16:00:37 2026 GMT
Not After : May 17 16:00:37 2026 GMT
Subject: CN=0e7241195a18b7050fab4615e99a5e6713fcb198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4e:81:8f:34:36:c5:7a:9e:c8:68:41:7e:ec:
f9:4d:e0:e1:5d:17:69:e8:fa:37:f5:5a:21:78:aa:
64:60:8d:71:39:19:0a:f4:c1:8a:f9:3d:f2:a0:cb:
f8:04:ef:dd:5b:d2:3b:49:68:99:5b:a5:25:de:f5:
84:d5:99:9d:21:53:da:85:05:61:83:65:c6:06:ef:
e9:b4:5f:24:fb:d1:7a:07:cf:9a:a2:61:ad:48:37:
3e:60:fd:d6:1e:8e:68:1f:72:94:30:ff:9f:cb:0c:
28:be:c4:f3:61:2b:7c:72:85:76:d6:8c:7c:e3:d0:
61:58:a4:a1:71:0a:52:b4:e2:49:80:75:92:c8:e4:
ef:e0:6f:a6:d2:33:98:4e:b6:c9:f1:f1:f9:3e:58:
d9:43:18:b8:a5:e3:2f:43:f1:5d:73:fe:22:8c:f2:
b1:11:dd:55:ae:c3:bd:c8:c6:bd:5d:78:d2:6e:aa:
8d:7e:2c:73:fb:a8:b5:18:89:ea:c0:c7:bd:73:f7:
c6:aa:17:bf:d6:c2:c3:b2:a3:85:a1:60:cb:05:f7:
21:e2:96:51:26:84:fc:dd:21:ec:b2:f1:5d:ea:a7:
72:b7:fd:87:9d:11:a7:8a:13:14:43:63:e3:ba:6e:
14:a5:41:5c:99:34:54:4c:0c:83:65:ab:ac:50:56:
a1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:72:41:19:5A:18:B7:05:0F:AB:46:15:E9:9A:5E:67:13:FC:B1:98
X509v3 Authority Key Identifier:
keyid:09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:96:0c:c5:7e:9b:3a:06:c0:aa:88:e5:da:4b:37:e3:e2:f2:
7e:18:1f:ff:a2:af:f3:01:2d:b4:2e:6d:f4:ec:6c:e7:4a:9e:
6f:63:c4:12:95:73:2f:36:ae:38:1d:51:83:92:c9:fb:81:99:
ec:14:19:07:93:61:b1:95:a0:20:cc:a8:7c:f7:b0:9a:a3:41:
e0:26:55:63:7b:8d:b4:94:b8:88:f8:b8:11:1f:13:6d:b4:cb:
5b:da:91:43:4f:15:8d:52:31:ee:58:26:46:03:d5:ab:69:80:
86:ff:06:47:39:e8:63:20:58:3f:ce:1c:dc:f1:ed:56:b1:7d:
15:41:04:e8:eb:52:ba:5b:48:50:01:60:c1:0e:d9:d2:f3:7d:
46:59:5c:67:70:d0:9f:67:89:23:23:90:4f:5d:6d:16:dc:3a:
59:f7:8e:38:90:e1:10:54:92:9d:ee:21:0a:e5:77:79:73:c1:
02:da:aa:32:7a:51:48:52:91:69:4a:27:dd:30:db:d8:a1:11:
ae:e8:c4:c4:c6:0a:e6:f9:75:0f:4f:15:24:c4:79:5b:66:02:
83:14:2c:39:78:37:50:f9:4d:65:7c:2c:8a:d2:74:c5:dc:30:
cf:81:79:16:c3:e1:14:ae:b8:7a:7d:9d:be:92:69:37:0e:30:
c7:11:8b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:42 2026 by rpki-client