Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
File: CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json)
Hash identifier: Sm6brjkTYsw78iJyXnGakByB3l1HHoW+cIeF096DmiQ=
Subject key identifier: 9A:1D:8E:18:C2:F3:B6:82:E9:63:9E:25:10:DE:19:C8:5A:50:75:69
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial: 019D38D31309E309A4E9540A4C3890DF880C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
Manifest number: 145A
Signing time: Sun 29 Mar 2026 09:00:50 +0000
Manifest this update: Sun 29 Mar 2026 09:00:50 +0000
Manifest next update: Mon 30 Mar 2026 09:00:50 +0000
Files and hashes: 1: 1-0vVi4FHHAdgEAN-aAZqxiCjS0I.roa (hash: OTTvBLhkOcop4Nbi1DHyFcQk24Pft/t6CQKmbEUIG7Q=)
2: An2l5nFXJ60Dmnc7ytV8xeoA-4w.roa (hash: XripkKF1BDgNijV9Sww4y4Pa3QzTCZtDgL7y8YpoE00=)
3: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: bxY7LzYSru5SxE5qwFsUVw4R9QDwP/r31kHZaKOfTg0=)
4: DtNjMaX-knG3kL803vSueqhEdMU.roa (hash: D5yJVp5o771p+zwhuuRghzaJUbXhIq0JcefHW8i9ex0=)
5: aEg8pKYRLzgHoBTbcFWlM2bc9cY.roa (hash: /Iyi+dntnfLdprySjcri6ap8bjxvS/nEOkhR72Tr4I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:13:09:e3:09:a4:e9:54:0a:4c:38:90:df:88:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Validity
Not Before: Mar 29 09:00:50 2026 GMT
Not After : Mar 30 09:00:50 2026 GMT
Subject: CN=9a1d8e18c2f3b682e9639e2510de19c85a507569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:75:31:e3:65:d9:1f:6c:f9:d5:85:ab:82:
9a:9e:3f:a5:d1:6e:5a:7b:fc:84:ba:f3:b8:ce:2b:
09:21:45:fd:bc:78:d5:59:d5:36:42:f5:66:69:e3:
df:f0:49:81:73:73:59:2f:aa:21:3f:22:b6:58:a5:
f9:e5:a0:1a:2e:94:d4:17:01:50:ee:51:0b:91:0d:
39:2a:82:c8:67:ab:c2:7a:b9:14:47:14:5c:e2:fb:
ff:7b:92:79:89:83:f6:8f:b5:56:04:ad:39:99:3f:
1e:25:0d:76:1a:6f:ea:9a:1a:c3:8c:d4:4a:26:4b:
09:71:e0:eb:84:fa:18:a5:ad:99:df:7a:be:55:18:
d2:1b:e9:da:07:06:4f:f2:4d:29:78:2d:79:16:ed:
47:78:fa:4d:bf:c1:4d:82:ac:cc:e9:69:9b:86:35:
45:48:ca:1f:78:17:40:b6:72:ae:ac:ee:07:c3:61:
ab:e3:eb:b1:45:86:09:af:9a:86:2a:e9:36:f3:4b:
89:d9:62:44:17:aa:4a:a0:57:1c:ec:1e:0f:3f:e5:
26:1b:ab:c0:d5:bd:38:59:c3:de:b8:e7:67:5a:6a:
d2:58:cd:1e:76:73:54:0a:81:c3:0d:21:48:59:dd:
5f:a0:6e:7f:da:f1:93:fd:4c:61:96:92:57:71:75:
85:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1D:8E:18:C2:F3:B6:82:E9:63:9E:25:10:DE:19:C8:5A:50:75:69
X509v3 Authority Key Identifier:
keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:28:52:a6:dc:2f:9e:ef:35:5c:41:53:b3:f1:18:41:94:e8:
de:f6:c5:7e:55:84:17:7c:5a:79:6a:06:04:ad:2d:23:05:af:
1b:23:46:99:ae:56:78:23:61:fe:72:fd:3a:00:17:3e:5b:56:
39:3e:0b:7f:00:e9:fb:ad:75:cc:50:dc:48:69:0a:0f:dc:44:
b1:0f:67:ff:4c:21:07:10:85:7c:6a:65:57:98:fb:3e:52:14:
77:d1:1b:f5:e6:0e:3c:24:62:8b:4c:eb:d7:c3:66:e5:1c:aa:
4c:7f:47:26:70:bf:f6:02:c3:fb:e8:88:f1:59:a8:e4:9c:33:
70:0c:6b:bb:bf:a8:2f:22:5d:62:68:e3:3c:e0:34:5c:73:99:
04:81:38:94:5c:d5:db:3c:69:94:54:6c:58:ff:9f:6e:53:aa:
d2:40:88:85:e1:46:cb:d5:9d:fb:72:f4:84:bf:17:b4:46:2d:
06:34:99:c2:21:0c:27:2b:9d:f2:68:c0:5e:9f:e7:83:5a:63:
79:75:11:46:07:e7:db:87:4f:7a:a9:9f:6e:b1:3e:c8:7a:7d:
0d:db:20:8f:89:b6:68:aa:f9:18:de:99:6e:29:a5:f3:9d:17:
7d:9d:ef:27:26:9a:6a:42:93:e5:60:84:d7:50:b2:a6:c7:2a:
09:09:c3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:39 2026 by rpki-client