Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
File: Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft (raw, json)
Hash identifier: MK0dIVI9djS5obNAd1wZBq8SmqJbJojUTbJvPt4zzgY=
Subject key identifier: EE:8A:5F:1F:E3:97:50:3E:B0:4C:17:BD:56:1E:04:31:5E:8E:3C:08
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial: 019CE900D063E8E212A015ACDAD0A3D42C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
Manifest number: 16AF
Signing time: Fri 13 Mar 2026 21:01:10 +0000
Manifest this update: Fri 13 Mar 2026 21:01:10 +0000
Manifest next update: Sat 14 Mar 2026 21:01:10 +0000
Files and hashes: 1: 6VbfAtk74cEPjvjgLQEhtLrP81U.roa (hash: rizvPmOdwzBXEQAhSRAxrV7Y3yfCi8vmhR+0fDvXQ4g=)
2: 6jxLWgEtYzUcIeL5nZFYtWqCnfY.roa (hash: Lovb3G8X/XH3FBnrwcuSEwDdeXgPvRqXxr0SbNYBD+M=)
3: Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl (hash: EnetVQ/OgJ05Hu6vSGUbg5DB/B6laM4r2+AoscW94Jw=)
4: nyJdPy5Bsxrv9RkeGDs6hh13eEw.roa (hash: E+DEgJCHAZ1XErRECJ9yeRTJenD3kJR7V8Lsa73CEVk=)
5: zmJzZmVY8NtwzftSPErinNzKjGE.roa (hash: yU1t8HphTqzqKJyMuPkrerGT4L8SmhaXm7BHsn47/0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e9:00:d0:63:e8:e2:12:a0:15:ac:da:d0:a3:d4:2c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
Validity
Not Before: Mar 13 21:01:10 2026 GMT
Not After : Mar 14 21:01:10 2026 GMT
Subject: CN=ee8a5f1fe397503eb04c17bd561e04315e8e3c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b6:ac:82:00:79:ef:33:9f:25:51:3f:87:c6:
d8:d1:5f:14:8b:42:a7:a5:92:5b:ec:99:79:55:f5:
3d:51:2b:d4:b9:74:9f:c0:1a:a0:08:64:cc:4e:1a:
34:64:ea:c2:6e:3b:22:b3:73:a1:32:1b:be:c6:ab:
b9:b6:50:5a:29:b6:c6:60:27:e8:6f:c6:53:db:01:
b1:a5:72:59:05:cf:a6:57:0a:e0:e7:a8:ed:ab:23:
27:ed:0d:a7:7e:4c:8f:7c:e6:79:0c:57:c1:62:29:
5e:bc:a7:c4:75:59:e8:34:ce:85:d3:30:96:c2:5a:
22:56:00:a3:01:90:2c:e5:d3:d1:79:1a:2e:0b:be:
10:6c:86:53:96:51:a7:cd:02:60:ed:e5:e1:20:36:
b8:9a:a3:cd:ab:39:46:10:fe:bd:9f:54:49:f7:a7:
c9:40:4d:c0:6f:d1:8d:42:c8:05:00:3f:6e:18:96:
a9:b5:16:c0:85:1c:ed:36:95:28:e6:5f:70:3f:aa:
47:80:d4:b6:ae:22:7d:4c:93:5a:a7:43:7e:f3:4b:
56:c4:4a:78:ad:db:ae:df:fa:42:be:eb:d6:06:55:
56:36:f3:d6:c6:60:38:b1:15:0f:a8:ba:c2:72:c0:
27:87:73:37:8d:da:3b:ed:91:f2:4e:88:a3:d8:6c:
3b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8A:5F:1F:E3:97:50:3E:B0:4C:17:BD:56:1E:04:31:5E:8E:3C:08
X509v3 Authority Key Identifier:
keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ad:e6:5e:c3:1b:c7:71:59:61:d0:fb:6d:e6:e4:4e:7c:2b:
6c:49:62:b0:89:ad:17:d1:e2:4f:2a:2c:4e:de:cb:01:64:dd:
1d:9b:36:af:4d:c6:1d:bb:2d:9e:74:c6:fb:c0:00:26:65:70:
d0:42:a6:eb:80:78:b2:37:f4:de:0a:66:fd:c0:cc:a2:e1:53:
2d:8f:f3:a9:40:eb:87:e2:c2:13:b3:d5:b4:f6:d0:07:b6:fd:
8c:4e:72:30:7b:e1:74:f7:96:5f:f9:37:5b:94:f1:77:81:70:
7f:37:85:1c:83:84:b7:e0:23:9b:20:e6:9d:18:db:95:49:a8:
be:2c:36:e9:01:27:ef:22:39:da:17:d6:b7:94:55:b8:dc:eb:
0d:b5:8d:4d:20:f1:99:42:f1:44:b8:4d:56:9b:2d:2e:ad:36:
bd:8f:63:70:0c:59:e1:8e:8d:5d:e0:d0:1d:1f:84:c5:af:cf:
1b:e5:c3:ce:cc:09:ad:e4:45:07:72:c9:10:2e:c8:de:ea:4b:
38:b5:58:6d:57:9d:dd:2b:a9:52:c2:94:f0:7a:ae:80:8f:a1:
3d:73:64:b5:de:54:cc:45:7d:43:3f:03:74:c4:9f:38:87:b8:
2d:9c:0f:76:3f:bd:72:47:5e:cb:6c:68:3d:3b:d2:49:88:df:
c5:69:5a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 02:02:34 2026 by rpki-client