Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
File: CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json)
Hash identifier: zYn2M5L1nQbMqvC1MdMJIwPhM47dXdKrEXiONT0xTWE=
Subject key identifier: 48:DD:5A:4C:02:06:7A:C0:48:C6:4D:20:F9:C3:09:51:58:9E:9C:3C
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial: 01A0016F92DC0B98E8DB4132B802C4DBC36A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
Manifest number: 15CB
Signing time: Fri 14 Aug 2026 18:01:24 +0000
Manifest this update: Fri 14 Aug 2026 18:01:24 +0000
Manifest next update: Sat 15 Aug 2026 18:01:24 +0000
Files and hashes: 1: 1-0vVi4FHHAdgEAN-aAZqxiCjS0I.roa (hash: OTTvBLhkOcop4Nbi1DHyFcQk24Pft/t6CQKmbEUIG7Q=)
2: An2l5nFXJ60Dmnc7ytV8xeoA-4w.roa (hash: XripkKF1BDgNijV9Sww4y4Pa3QzTCZtDgL7y8YpoE00=)
3: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: hZNal7QsHBdOzY3pjCzGGaGXucC4ZNyYRCm/metKC5A=)
4: DtNjMaX-knG3kL803vSueqhEdMU.roa (hash: D5yJVp5o771p+zwhuuRghzaJUbXhIq0JcefHW8i9ex0=)
5: aEg8pKYRLzgHoBTbcFWlM2bc9cY.roa (hash: /Iyi+dntnfLdprySjcri6ap8bjxvS/nEOkhR72Tr4I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:92:dc:0b:98:e8:db:41:32:b8:02:c4:db:c3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Validity
Not Before: Aug 14 18:01:24 2026 GMT
Not After : Aug 15 18:01:24 2026 GMT
Subject: CN=48dd5a4c02067ac048c64d20f9c30951589e9c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:15:3b:9b:d4:43:b4:ef:94:17:c9:c4:a8:35:
a4:d4:b2:03:31:1c:ce:6c:7f:e2:c3:0d:43:f9:63:
08:4c:ba:7d:ea:81:d5:69:0c:c5:8e:b1:d7:64:73:
bc:81:a1:a6:eb:54:1c:9e:93:bb:e0:c8:de:e2:10:
4f:3d:24:46:f1:f4:70:9b:88:ac:b6:89:72:0c:e6:
75:c5:7a:f7:59:0b:c7:e3:9a:22:d5:7e:97:de:2e:
d5:9c:75:ce:b9:fd:19:3d:3d:a4:66:6b:3e:6b:ba:
db:bc:ed:36:20:c1:4b:d6:35:79:3b:2a:7e:71:ae:
ab:7b:cf:b6:83:b1:c0:31:b7:c8:a7:e8:86:64:a1:
75:53:a0:38:02:84:11:2b:41:77:e2:cd:a8:ac:93:
e6:bf:19:f1:de:b0:5d:a1:89:17:cb:82:88:aa:99:
d2:7f:01:5f:8a:8a:ae:9a:25:45:38:2f:a6:ed:d5:
95:35:a6:ac:2b:d8:e3:25:e3:86:14:fd:80:55:57:
dd:2e:19:77:a6:0a:08:58:8e:b8:53:fa:67:0e:d5:
67:9a:44:72:67:3b:8e:da:bd:dd:b1:fb:53:eb:c2:
dc:80:ba:92:10:2a:54:3e:a6:af:3b:56:ef:7e:99:
83:55:a6:87:8a:08:0a:61:0b:40:a0:8d:21:d3:74:
d0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DD:5A:4C:02:06:7A:C0:48:C6:4D:20:F9:C3:09:51:58:9E:9C:3C
X509v3 Authority Key Identifier:
keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:62:ba:b5:3e:06:b7:9f:13:9b:c9:55:96:40:a5:a8:c1:d2:
63:2c:a4:b7:c9:52:66:8c:72:ce:fd:c8:09:70:ce:ef:87:6a:
c3:f4:6f:4c:ef:0c:5c:f7:0b:03:b7:52:82:a3:69:d0:7c:d1:
ef:34:e2:da:c6:da:33:84:fc:76:bc:f1:2d:85:d5:99:43:a0:
38:0b:7c:b8:c3:77:9f:8e:87:e9:ee:dd:80:38:58:fe:ff:16:
85:af:8e:30:5d:67:e6:be:fd:8c:08:05:d1:91:8f:bb:2a:b0:
c5:04:f5:b6:61:ae:48:9e:75:e5:30:be:6d:c5:69:b2:38:22:
f6:91:22:19:dd:2c:8c:47:cd:b7:59:f1:62:8c:81:f1:ec:5e:
e9:e6:5e:11:b0:6c:d1:09:ad:f9:66:ae:24:fb:58:23:9f:22:
68:ce:48:27:52:f6:4e:4b:b7:ce:67:f6:29:e4:de:fa:2a:67:
c0:47:8f:ce:09:d7:46:34:74:d7:14:23:c1:72:36:37:a6:b9:
3b:09:02:05:36:2b:80:30:21:ae:c7:b0:81:21:de:41:e0:56:
3e:ed:6e:4f:e5:d1:8b:2d:5a:bd:c0:80:46:6b:d3:e5:8e:d0:
64:0b:21:ed:4e:a4:d1:9e:21:f1:c7:1b:d4:f1:75:e5:db:77:
a6:a3:b4:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb5LcC5jo20EyuALE28NqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZjBkY2NlYjc0ZjExODVhY2Q5N2FlZWFhYzI1ZGRhNWU5
YjA5MzYwHhcNMjYwODE0MTgwMTI0WhcNMjYwODE1MTgwMTI0WjAzMTEwLwYDVQQD
Eyg0OGRkNWE0YzAyMDY3YWMwNDhjNjRkMjBmOWMzMDk1MTU4OWU5YzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xU7m9RDtO+UF8nEqDWk1LIDMRzO
bH/iww1D+WMITLp96oHVaQzFjrHXZHO8gaGm61QcnpO74Mje4hBPPSRG8fRwm4is
tolyDOZ1xXr3WQvH45oi1X6X3i7VnHXOuf0ZPT2kZms+a7rbvO02IMFL1jV5Oyp+
ca6re8+2g7HAMbfIp+iGZKF1U6A4AoQRK0F34s2orJPmvxnx3rBdoYkXy4KIqpnS
fwFfioqumiVFOC+m7dWVNaasK9jjJeOGFP2AVVfdLhl3pgoIWI64U/pnDtVnmkRy
ZzuO2r3dsftT68LcgLqSECpUPqavO1bvfpmDVaaHiggKYQtAoI0h03TQzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjdWkwCBnrASMZNIPnDCVFYnpw8MB8GA1UdIwQY
MBaAFAnw3M63TxGFrNl67qrCXdpemwk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgt
OTk2MTg5ZjljZTE0LzEvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgtOTk2MTg5ZjljZTE0
LzEvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFGK6tT4G
t58Tm8lVlkClqMHSYyykt8lSZoxyzv3ICXDO74dqw/RvTO8MXPcLA7dSgqNp0HzR
7zTi2sbaM4T8drzxLYXVmUOgOAt8uMN3n46H6e7dgDhY/v8Wha+OMF1n5r79jAgF
0ZGPuyqwxQT1tmGuSJ515TC+bcVpsjgi9pEiGd0sjEfNt1nxYoyB8exe6eZeEbBs
0Qmt+WauJPtYI58iaM5IJ1L2Tku3zmf2KeTe+ipnwEePzgnXRjR01xQjwXI2N6a5
OwkCBTYrgDAhrsewgSHeQeBWPu1uT+XRiy1avcCARmvT5Y7QZAsh7U6k0Z4h8ccb
1PF15dt3pqO09g==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:03 2026 by rpki-client