Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
File: cFo7sRdTjbbbnFz9WnlL899pfCc.mft (raw, json)
Hash identifier: RIe6JSWcqWm8+sDjm2Uqb6BiB6JNKcTpNNYi6oZZd28=
Subject key identifier: 45:FC:C9:14:86:8D:2C:4A:66:9F:9C:6E:3E:8D:80:DA:0D:9F:93:D2
Authority key identifier: 70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27
Certificate issuer: /CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
Certificate serial: 019D390A1D765288C6E255172ED6F464051F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 10:00:57 +0000
Manifest this update: Sun 29 Mar 2026 10:00:57 +0000
Manifest next update: Mon 30 Mar 2026 10:00:57 +0000
Files and hashes: 1: cFo7sRdTjbbbnFz9WnlL899pfCc.crl (hash: xcMaNiirAMAZ4/+IwDlKCg7Kwc5nULTgPC2aVTw1bsU=)
2: wBt38qnB5TIvgtAY54fHp1P6RJw.roa (hash: au9ASBmMM46Wgb5mYkdl7Sf9gWiSJoDf30mXBiLkT2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:1d:76:52:88:c6:e2:55:17:2e:d6:f4:64:05:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
Validity
Not Before: Mar 29 10:00:57 2026 GMT
Not After : Mar 30 10:00:57 2026 GMT
Subject: CN=45fcc914868d2c4a669f9c6e3e8d80da0d9f93d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:99:b7:16:37:de:d9:81:c4:38:bb:f1:20:0d:
78:69:af:50:ef:ee:b9:97:e8:d9:bb:32:79:5b:00:
fd:f9:2d:2b:df:8b:75:82:18:02:a1:f3:c6:60:16:
84:e4:ca:22:81:88:d6:8b:70:86:e7:66:05:f6:16:
e0:00:cf:f1:cc:ca:3e:0e:c9:ac:78:7c:85:c6:2e:
fd:a2:ca:88:57:79:99:15:4f:de:05:4d:b3:fc:50:
18:f2:43:86:bd:13:b8:57:65:c7:14:08:42:34:b0:
04:21:2a:af:80:0e:2f:66:eb:ea:43:c9:92:60:46:
48:40:f4:c2:54:0e:1b:49:19:a0:90:dd:f1:7b:a1:
7c:01:a9:ad:0c:4b:e7:01:4d:e9:64:2b:b5:c7:b9:
e4:3b:dd:cd:63:36:45:6d:c8:c8:f4:e7:ec:b8:5c:
9a:41:b3:46:17:af:be:8c:a4:fc:8a:4d:35:9b:de:
d5:75:a8:58:b4:32:b7:2e:d8:b3:c4:67:6c:ff:ff:
12:ea:21:f9:88:35:85:85:cc:68:58:92:3a:ca:21:
c9:a4:6f:35:7e:5d:fa:80:ee:46:88:58:57:96:a1:
ad:f2:29:80:0f:b8:74:8e:cd:ea:6d:c8:58:4c:b2:
26:a7:bb:3d:26:14:b4:83:26:29:97:a9:47:9d:3e:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FC:C9:14:86:8D:2C:4A:66:9F:9C:6E:3E:8D:80:DA:0D:9F:93:D2
X509v3 Authority Key Identifier:
keyid:70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:64:6d:c0:e1:a3:8c:19:22:69:19:48:ee:5b:e1:60:ad:bc:
12:07:57:73:35:f1:29:63:fb:70:2a:b7:93:07:89:aa:d7:a6:
35:80:9d:31:46:2e:0c:47:62:ff:bf:58:f6:57:4e:c1:92:5e:
a8:64:cd:ce:a6:a6:67:79:53:72:db:88:f3:6d:a7:ee:9e:b3:
a6:fa:ca:2c:5a:50:9e:61:86:e7:67:95:5e:d8:0f:e5:d0:b1:
d5:dc:3a:8c:6d:7d:e6:af:c4:4d:3a:ea:3d:8b:d5:eb:82:19:
26:58:4b:50:e9:8e:56:83:ea:aa:66:ad:25:8e:da:57:38:59:
39:52:10:d6:6a:07:55:9f:ef:91:38:42:e8:90:dc:b1:7b:8a:
d4:35:bf:95:86:9a:9c:9d:cd:56:71:96:27:81:d2:4f:17:bb:
da:f6:30:da:c8:e4:dc:f7:44:d1:a0:d9:f1:d2:23:cb:ab:a7:
d6:0b:e9:52:32:f7:a6:66:10:1a:98:ce:8b:26:79:c2:17:0e:
7b:8c:4e:88:d4:e7:8c:44:75:30:1b:5e:a7:17:d4:2d:71:40:
84:ef:27:4a:81:be:31:94:e8:4f:4f:d0:c4:e5:92:f0:e8:68:
51:a2:8f:ed:8d:57:2a:a0:3e:1e:df:51:1d:35:5b:2e:ec:28:
a0:09:5e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:41 2026 by rpki-client