Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
File: CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json)
Hash identifier: yF6l18ae9U7lzkFuBLZx/N82YceMeMb6jsMfnitBK4Y=
Subject key identifier: 0B:13:25:84:8E:76:5C:69:D5:59:C6:4D:4E:DF:2E:21:F3:B5:99:20
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial: 019F17C33286C25CD7015D7CE0E2B5FC2173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
Manifest number: 1552
Signing time: Tue 30 Jun 2026 09:01:36 +0000
Manifest this update: Tue 30 Jun 2026 09:01:36 +0000
Manifest next update: Wed 01 Jul 2026 09:01:36 +0000
Files and hashes: 1: 1-0vVi4FHHAdgEAN-aAZqxiCjS0I.roa (hash: OTTvBLhkOcop4Nbi1DHyFcQk24Pft/t6CQKmbEUIG7Q=)
2: An2l5nFXJ60Dmnc7ytV8xeoA-4w.roa (hash: XripkKF1BDgNijV9Sww4y4Pa3QzTCZtDgL7y8YpoE00=)
3: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: 2OS6uhvgHpyfH6J1RmTT0vM3aRyhqnJDp0S1bQug9K4=)
4: DtNjMaX-knG3kL803vSueqhEdMU.roa (hash: D5yJVp5o771p+zwhuuRghzaJUbXhIq0JcefHW8i9ex0=)
5: aEg8pKYRLzgHoBTbcFWlM2bc9cY.roa (hash: /Iyi+dntnfLdprySjcri6ap8bjxvS/nEOkhR72Tr4I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:32:86:c2:5c:d7:01:5d:7c:e0:e2:b5:fc:21:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Validity
Not Before: Jun 30 09:01:36 2026 GMT
Not After : Jul 1 09:01:36 2026 GMT
Subject: CN=0b1325848e765c69d559c64d4edf2e21f3b59920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cb:35:3c:9c:35:53:14:a7:0d:96:8b:a9:73:
63:87:01:91:58:06:45:97:4f:bb:56:cc:a1:57:7c:
0d:8f:0c:f2:31:7c:09:59:f5:43:a8:74:f9:0a:7f:
83:bd:2a:a4:20:55:8f:b3:69:f0:7c:9e:c4:da:05:
1d:f4:02:1b:44:17:26:b0:55:7a:80:66:0e:11:89:
55:97:b2:3e:09:91:c3:cd:13:c2:72:5c:c1:81:00:
11:58:f4:02:ed:c9:2f:e6:b6:cf:47:f8:51:22:88:
ea:9e:7e:cd:2b:60:1e:c6:62:9d:69:7e:e0:80:b5:
53:47:6e:80:27:c3:9d:05:3d:11:ed:64:51:cd:26:
4b:a6:66:d9:93:dd:19:09:55:72:fc:4b:84:29:c4:
fb:7f:10:c9:e9:68:43:47:65:ea:8a:d5:46:9c:73:
e4:d9:8f:76:15:3b:9c:05:18:6d:45:f2:f3:e5:57:
d9:35:ca:a4:0f:c8:ae:da:03:a2:31:fc:f1:db:c4:
8f:0b:45:65:7d:55:ad:82:41:5a:72:42:85:df:fd:
0b:d9:06:32:84:1a:ef:13:7f:1a:6e:0a:98:e7:46:
29:90:ac:3d:b9:d8:e1:c4:40:27:0a:ff:c0:b1:fa:
d0:00:25:2c:22:9b:3f:91:19:74:f4:fd:e0:57:f8:
14:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:13:25:84:8E:76:5C:69:D5:59:C6:4D:4E:DF:2E:21:F3:B5:99:20
X509v3 Authority Key Identifier:
keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:83:11:02:38:03:4e:b8:1d:fb:54:4d:f3:48:5e:19:9f:58:
f7:71:4c:38:d1:cd:de:ed:6a:4e:2e:79:31:fc:81:ef:f4:31:
59:01:6e:94:55:9e:86:55:af:c1:31:28:42:9d:96:b9:05:7d:
a4:9c:53:46:39:a4:47:ea:4e:45:9e:d3:da:1c:2b:31:15:3d:
5d:94:37:59:74:8e:41:65:63:86:f8:f4:f2:31:2c:61:59:94:
a9:48:52:70:30:3a:a8:ee:80:ee:77:da:e9:e5:3c:bb:db:75:
c4:00:53:66:62:71:5d:4e:04:b6:61:b2:9b:8c:3a:3b:b2:68:
8d:23:51:75:d1:db:3e:36:5c:f6:5c:e6:93:72:90:bd:e6:1f:
dc:ac:44:ec:0f:c2:28:ff:18:d2:59:d2:bb:bb:a1:9f:12:03:
80:3e:bf:92:3d:7c:db:76:de:02:fd:bf:64:6d:f7:7e:a3:02:
cd:d9:95:f6:e0:6f:50:75:51:8b:5a:6f:12:c1:11:87:e7:f6:
c9:c8:2a:7b:86:af:e2:72:37:16:63:e3:be:e5:43:8a:bb:70:
25:68:fb:83:7c:bd:87:a9:0f:75:6c:80:51:5d:54:d7:af:6e:
09:75:fb:a0:8f:fb:98:4e:f1:f6:1b:73:8a:47:0c:1a:5d:b4:
a9:20:f6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:02 2026 by rpki-client