Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
File: Cfuz7S8CnEusxuosTH9MHNboDnk.mft (raw, json)
Hash identifier: iDX1k3rpeXXT0LlRalpYTnuvGEsZf9ZXa2Q7Cs40eZQ=
Subject key identifier: 32:A7:75:18:28:AF:2B:2C:BB:E4:27:E7:12:D7:43:AF:72:84:D9:38
Authority key identifier: 09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
Certificate issuer: /CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Certificate serial: 01A0024AA47AFF011428CBFD2A9C732D92FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
Manifest number: 1069
Signing time: Fri 14 Aug 2026 22:00:41 +0000
Manifest this update: Fri 14 Aug 2026 22:00:41 +0000
Manifest next update: Sat 15 Aug 2026 22:00:41 +0000
Files and hashes: 1: Cfuz7S8CnEusxuosTH9MHNboDnk.crl (hash: o4ExeAZqr+8QGE6/g1LjutYSS9lkS0xbd3DM8M+pstg=)
2: tPzvJ8fhXyxuStH7y_RiWlVyHhs.roa (hash: TJabNOMfT1VmMNuU7X4vXm/HGDPktwOUxF0xJ5kPJG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:a4:7a:ff:01:14:28:cb:fd:2a:9c:73:2d:92:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Validity
Not Before: Aug 14 22:00:41 2026 GMT
Not After : Aug 15 22:00:41 2026 GMT
Subject: CN=32a7751828af2b2cbbe427e712d743af7284d938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:9f:7b:5b:b4:f1:ee:88:79:87:fc:b4:ad:
be:91:44:0c:e8:4c:1f:24:e0:1d:ef:c5:6b:64:fd:
78:e6:fe:f0:f6:54:1a:b7:90:5c:35:32:7b:0a:99:
1b:fc:15:c3:fb:2d:8e:92:f2:33:7c:0b:24:cd:8f:
58:bb:45:90:cc:ff:14:af:33:cf:d1:69:dd:a4:85:
4b:e4:09:a6:97:dd:45:48:5a:82:3e:98:53:09:75:
4b:19:f9:37:3f:24:6a:d2:bb:02:10:f3:56:1f:a6:
49:14:57:60:fa:68:f0:af:68:37:7b:be:5b:17:2e:
e5:9a:30:4d:19:52:7d:bf:52:75:49:c9:f4:36:0b:
54:3d:b2:40:68:a8:14:58:b4:26:46:18:14:a4:49:
53:9f:d0:4b:5c:a8:2d:72:2c:91:84:36:40:0e:cd:
2e:e5:7b:09:b6:21:98:47:31:5e:31:fc:10:39:f5:
43:a7:b7:8b:2d:08:e5:1e:7d:d2:b5:2a:b7:87:fb:
9c:00:7b:5f:93:aa:91:69:6f:2e:f6:c2:e7:75:fc:
8f:29:36:d9:b1:4f:d4:4d:45:3d:52:4a:e8:ea:58:
72:27:ec:ee:c7:93:40:15:d1:fa:b6:c4:0f:5b:d9:
d7:05:8e:c5:80:74:06:9f:c1:0e:e0:a5:bc:ed:27:
45:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A7:75:18:28:AF:2B:2C:BB:E4:27:E7:12:D7:43:AF:72:84:D9:38
X509v3 Authority Key Identifier:
keyid:09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:5e:40:4e:fc:cf:0d:b4:6b:a6:87:38:b8:09:13:dc:cb:09:
90:b3:72:ee:ca:4a:8a:82:a8:45:bd:13:0e:12:ff:73:20:27:
0b:44:e5:22:e5:d4:d5:61:5b:3a:b1:7d:13:2e:d0:43:01:c5:
f4:0c:b2:e6:61:c7:59:c4:00:25:dd:c8:4d:14:a5:fc:94:f0:
12:91:c1:7e:57:ee:4f:da:dd:f1:28:49:ed:f7:de:ad:08:d7:
63:b9:38:9f:1c:ad:5c:63:3d:3c:51:c3:da:38:88:52:81:fb:
e2:08:8a:fb:be:53:98:7c:78:c2:4f:1a:b1:b1:10:75:f2:4c:
c8:5b:67:87:a1:b4:c3:cd:45:b6:3d:04:27:d5:9e:07:bd:2f:
2b:d6:6c:cf:7f:4e:2b:ae:b7:6b:06:1a:4d:cb:bb:99:49:1e:
c1:31:0f:ce:2a:d4:01:7f:97:b7:d4:0d:61:55:29:ab:56:00:
62:70:cd:f6:c3:60:82:22:89:a5:b2:c2:8f:86:1e:5a:a8:6b:
17:e2:52:e3:42:0a:77:75:a2:1d:fd:92:64:1e:3b:cf:75:c6:
9c:12:c5:b4:d5:84:38:02:ec:64:bf:2c:b0:ca:06:32:1c:fc:
df:cc:46:ca:ca:4e:90:48:b0:9d:4b:47:28:bf:87:9e:98:ad:
da:7b:e7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:43 2026 by rpki-client