
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
File: Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft (raw, json)
Hash identifier: W+P1BQXcFLRx9ityL7xnjDkM43B6brsA/hrVQDkzp5k=
Subject key identifier: 16:65:65:93:82:C0:56:95:86:C8:AA:1F:0B:EC:FD:06:02:DA:E8:14
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial: 019F0D75D1D6DF74EF77AAA7481DC9E69620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
Manifest number: 17CB
Signing time: Sun 28 Jun 2026 09:00:52 +0000
Manifest this update: Sun 28 Jun 2026 09:00:52 +0000
Manifest next update: Mon 29 Jun 2026 09:00:52 +0000
Files and hashes: 1: 6VbfAtk74cEPjvjgLQEhtLrP81U.roa (hash: rizvPmOdwzBXEQAhSRAxrV7Y3yfCi8vmhR+0fDvXQ4g=)
2: 6jxLWgEtYzUcIeL5nZFYtWqCnfY.roa (hash: Lovb3G8X/XH3FBnrwcuSEwDdeXgPvRqXxr0SbNYBD+M=)
3: Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl (hash: N6f/TvmDdTSSw+qdBheU4kLR192i3f0D4ppyC0v7Fm4=)
4: nyJdPy5Bsxrv9RkeGDs6hh13eEw.roa (hash: E+DEgJCHAZ1XErRECJ9yeRTJenD3kJR7V8Lsa73CEVk=)
5: zmJzZmVY8NtwzftSPErinNzKjGE.roa (hash: yU1t8HphTqzqKJyMuPkrerGT4L8SmhaXm7BHsn47/0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0d:75:d1:d6:df:74:ef:77:aa:a7:48:1d:c9:e6:96:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
Validity
Not Before: Jun 28 09:00:52 2026 GMT
Not After : Jun 29 09:00:52 2026 GMT
Subject: CN=1665659382c0569586c8aa1f0becfd0602dae814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:95:fc:0f:fa:c8:21:2e:c4:98:58:03:fc:6c:
52:6e:b3:9f:f1:69:95:8e:f4:e1:42:24:9e:27:b5:
43:27:eb:ce:3b:5c:85:89:3b:35:73:d9:2b:eb:fb:
1c:65:8a:23:f4:14:de:02:2a:cf:f0:47:c8:f0:f2:
9d:63:17:d8:46:c0:d6:68:82:95:a7:4f:72:23:c5:
14:06:45:15:b2:37:31:99:ac:90:56:ac:f6:94:35:
65:79:6d:15:2e:7e:9e:ae:1a:a2:9a:19:1e:45:58:
71:74:8e:05:0d:45:25:b9:5b:65:b8:16:e5:8f:b5:
06:9e:2b:0c:c3:3b:67:e1:37:6a:fe:7e:36:8e:9b:
3c:89:c1:c6:f2:bc:bd:c0:cd:92:ed:21:85:02:9d:
4f:57:f3:72:fe:af:a3:37:d4:96:36:fa:71:cf:89:
97:a8:02:ef:f2:1f:bb:40:55:be:60:1f:53:58:d8:
a9:33:2f:bc:3f:cd:24:bb:8e:76:fc:15:ad:25:70:
e1:87:d0:a1:94:e7:1e:23:dc:84:be:bc:8e:9b:0d:
1a:b1:87:d8:62:b3:c5:a2:60:53:01:a3:8b:cf:b4:
e8:25:a0:f8:4e:02:36:c1:1c:95:10:c9:02:50:e6:
b5:ee:05:5d:2e:21:57:0a:1e:d0:69:dc:56:c4:cd:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:65:65:93:82:C0:56:95:86:C8:AA:1F:0B:EC:FD:06:02:DA:E8:14
X509v3 Authority Key Identifier:
keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:24:98:1f:a6:50:dd:85:ee:78:9f:01:e8:a9:70:3c:fe:01:
03:8c:55:80:5a:ca:e0:39:3e:d5:2a:51:08:51:01:1a:6c:95:
09:8d:85:07:fa:0b:87:ab:16:5e:aa:b6:5d:27:3f:cc:69:02:
7e:19:4c:8b:a6:39:93:ee:2a:b8:68:44:5a:61:50:87:f9:7c:
7e:14:31:ce:eb:d6:fe:cd:02:c8:0f:ec:71:a8:a4:c0:27:37:
90:7f:08:5a:43:aa:cf:e4:ee:e0:64:10:76:5b:83:71:b2:a9:
1d:33:95:f0:ae:6c:fe:d5:e8:0d:f0:4e:08:f0:38:ad:43:32:
79:3f:a3:4a:e6:b4:3b:e7:6b:1c:bb:70:c4:c4:e1:c1:6c:ff:
3c:3b:d9:ca:98:96:35:28:2f:39:d2:9d:9e:11:57:42:99:23:
e9:57:24:81:4b:30:c3:43:12:e8:d7:c4:fe:d3:aa:52:2e:cf:
aa:34:4b:3b:78:be:d3:fa:b7:b2:76:a7:28:f9:1b:4a:73:86:
a2:70:1a:1c:c7:c6:04:72:b9:69:65:92:55:a9:64:f3:b8:71:
ce:05:a1:a0:e7:f6:33:04:29:55:3f:07:57:1b:54:54:81:11:
b0:b1:0d:c6:a6:98:f3:2d:d1:d5:30:b6:3b:0b:62:e6:86:68:
4d:89:05:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:53:13 2026 by rpki-client