Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
File: CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json)
Hash identifier: 1f0Rop/ouno5sAPiSDS4rAjzXczxZjPufL31gALUik8=
Subject key identifier: C3:38:8D:5D:3F:C1:61:84:4D:35:64:41:9A:DB:55:5D:2A:D1:89:CC
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial: 019E3004FCA0E249018ECD1D065EFF3F6921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
Manifest number: 14DA
Signing time: Sat 16 May 2026 09:01:33 +0000
Manifest this update: Sat 16 May 2026 09:01:33 +0000
Manifest next update: Sun 17 May 2026 09:01:33 +0000
Files and hashes: 1: 1-0vVi4FHHAdgEAN-aAZqxiCjS0I.roa (hash: OTTvBLhkOcop4Nbi1DHyFcQk24Pft/t6CQKmbEUIG7Q=)
2: An2l5nFXJ60Dmnc7ytV8xeoA-4w.roa (hash: XripkKF1BDgNijV9Sww4y4Pa3QzTCZtDgL7y8YpoE00=)
3: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: J6NeKjLU1uDecmr043rT+SdvGJkOh45vGpwZJaKku/Y=)
4: DtNjMaX-knG3kL803vSueqhEdMU.roa (hash: D5yJVp5o771p+zwhuuRghzaJUbXhIq0JcefHW8i9ex0=)
5: aEg8pKYRLzgHoBTbcFWlM2bc9cY.roa (hash: /Iyi+dntnfLdprySjcri6ap8bjxvS/nEOkhR72Tr4I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:fc:a0:e2:49:01:8e:cd:1d:06:5e:ff:3f:69:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Validity
Not Before: May 16 09:01:33 2026 GMT
Not After : May 17 09:01:33 2026 GMT
Subject: CN=c3388d5d3fc161844d3564419adb555d2ad189cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fe:54:99:36:eb:48:86:98:ff:45:58:99:57:
c5:58:5e:a5:e0:9b:9c:ca:3c:f2:c7:9a:20:91:6e:
c4:64:2c:9d:11:02:39:ee:1e:f1:25:4c:8f:e5:96:
b7:0b:0c:16:d3:87:5a:7f:1b:33:21:d6:c8:ad:8a:
be:b8:aa:03:59:a8:82:cb:fa:36:2f:bb:82:5a:c9:
f3:89:f8:e6:4b:ce:8e:61:b3:ab:67:01:73:6f:c6:
d7:d3:62:e0:3d:89:1e:13:cf:c1:b1:de:7b:7a:91:
a9:49:bf:9c:a1:2c:48:52:f4:1a:55:0a:a7:c7:cf:
81:98:e0:f4:b1:b6:87:38:f1:2f:bc:43:f2:94:96:
3e:87:91:3f:76:23:fd:66:ad:9b:b1:2e:6c:5d:78:
45:e1:fe:6c:a1:88:42:6b:25:5c:5e:b6:7f:c7:91:
26:e5:ae:30:66:b9:7a:99:25:25:b0:e2:b5:09:54:
aa:ad:03:0a:44:ad:71:0f:b9:1f:eb:e0:0a:39:58:
16:ae:74:c4:a1:4e:e3:da:e7:d8:1a:f0:a8:cb:49:
b8:4a:09:f3:dc:80:93:75:22:4d:3e:c6:2b:b9:2f:
b9:49:c7:53:e0:7a:a4:5b:31:d0:4b:3f:79:19:93:
c9:05:18:f9:e4:07:64:99:13:dd:34:55:1a:66:40:
38:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:38:8D:5D:3F:C1:61:84:4D:35:64:41:9A:DB:55:5D:2A:D1:89:CC
X509v3 Authority Key Identifier:
keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c5:b0:ea:72:38:18:e3:2d:39:c9:e5:31:a1:9b:d4:11:0a:
70:cd:5f:5a:ed:b1:62:de:ea:2d:79:56:d9:30:f8:73:7a:f8:
0e:f0:33:af:8e:8f:28:99:cd:09:dd:eb:22:ce:47:ab:13:9d:
37:8c:41:cb:cb:75:c6:42:45:61:20:5c:5f:ef:d6:ed:73:c4:
3b:3f:5c:dc:54:59:68:3e:81:4f:14:96:d0:83:b3:00:df:3f:
48:54:82:d6:3b:59:da:38:e0:e3:cf:ca:2f:f7:35:ce:0f:ff:
50:f5:b0:6d:f8:2e:35:34:b9:0d:71:63:11:40:d8:0b:03:38:
7a:98:93:36:b6:a4:25:44:7b:92:58:bd:9e:2e:91:d3:ba:63:
86:36:62:03:49:e9:ba:fd:1e:dc:bc:cb:14:ea:6c:17:2c:d4:
9d:30:49:c9:e5:2f:50:83:f3:4d:61:57:c0:49:56:dd:bf:ce:
78:95:dc:e1:b5:72:d4:2a:58:88:61:5d:4b:dd:c1:7b:87:2f:
f9:1b:ce:f7:3c:e6:d5:1b:2a:49:c3:2c:22:71:85:c6:09:ba:
1c:7c:15:7d:f2:0c:1c:6c:ff:ca:88:5e:db:1b:f1:cc:73:69:
4c:5e:05:11:b5:77:62:91:c6:6e:50:e6:ab:43:b4:2c:8f:f5:
ab:54:63:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:13 2026 by rpki-client