Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
File: cFUm-asN0naCP8Hw66od5jt9ZWw.mft (raw, json)
Hash identifier: f7q0rKn2wl91xDvo/9YTVSdSDyBMr22Nbo/DnWDXw6Q=
Subject key identifier: B7:1E:44:65:05:09:18:8D:F7:44:8A:E3:E2:49:51:EA:1F:E6:06:F5
Authority key identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
Certificate issuer: /CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Certificate serial: 019F92ED77C90D61D1371C64E337ACB04E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
Manifest number: 0830
Signing time: Fri 24 Jul 2026 07:01:03 +0000
Manifest this update: Fri 24 Jul 2026 07:01:03 +0000
Manifest next update: Sat 25 Jul 2026 07:01:03 +0000
Files and hashes: 1: cFUm-asN0naCP8Hw66od5jt9ZWw.crl (hash: Gmc9mBtybLPwxVSg+FjJIEKnfn3PvT/pvU8C5sF94fQ=)
2: utX8EvzxjtNKF1hFOEPAnrUCzm8.roa (hash: klBKnxuMcoS0m9Xk0/1QlfvOXmiMTMvpWtNw0ziiP1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:77:c9:0d:61:d1:37:1c:64:e3:37:ac:b0:4e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Validity
Not Before: Jul 24 07:01:03 2026 GMT
Not After : Jul 25 07:01:03 2026 GMT
Subject: CN=b71e44650509188df7448ae3e24951ea1fe606f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:6d:52:9e:29:71:1b:42:a8:15:1a:01:ce:
74:f1:30:20:a9:6e:82:57:ec:5a:89:29:27:0a:0f:
d3:b0:73:bd:da:34:90:90:84:50:4d:9b:5f:4f:e8:
24:ea:59:54:29:ba:26:6f:97:e7:c1:00:92:9f:b3:
64:53:79:fb:62:42:39:04:4e:59:35:04:00:12:2a:
f9:00:f8:0e:aa:ec:3b:31:1e:6f:82:7a:4f:65:c7:
c6:4c:33:98:15:6a:c8:1a:14:1a:6e:d8:9d:c9:97:
d0:74:bf:c4:8a:61:9b:56:ac:68:00:45:00:a1:7d:
57:c5:61:25:35:be:1c:9a:4d:5a:89:76:00:fa:aa:
31:7e:9e:da:8e:27:f6:d5:50:7c:49:e1:ad:08:95:
0a:20:43:5a:45:83:01:01:29:ca:30:88:cf:89:9e:
a6:17:71:48:ae:58:ce:94:21:21:8d:98:67:2f:9a:
9b:e0:04:be:c4:4b:4d:94:c7:32:78:cb:2c:5c:8c:
c4:25:aa:66:0a:37:88:66:76:50:d8:61:9a:93:72:
0d:81:cb:05:a4:d3:c5:ea:cf:ae:ae:70:e3:89:ad:
8f:1d:c5:e2:a4:06:49:bf:62:ff:bc:be:d8:06:28:
b1:7a:84:3e:2d:f9:7d:ae:b0:62:c1:49:a0:ce:ff:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1E:44:65:05:09:18:8D:F7:44:8A:E3:E2:49:51:EA:1F:E6:06:F5
X509v3 Authority Key Identifier:
keyid:70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3a:42:19:f5:1b:a1:c7:c1:72:82:bc:87:85:e6:1d:d2:d8:
70:b2:5d:76:9e:3d:9b:64:90:7e:e2:f2:3b:b4:a9:f7:c4:b1:
c4:f2:d3:b3:38:89:9a:87:b9:2f:d2:2b:0b:f7:65:f0:a0:98:
b0:10:f5:d7:57:f6:b5:e0:f5:00:a6:ce:ea:23:fc:ae:63:4a:
a5:f8:16:8e:06:1b:3d:d1:a9:8b:23:ef:6c:4e:08:01:66:50:
c8:f1:d3:7f:0a:29:eb:25:dd:1a:6c:e4:b9:0a:04:de:c7:2d:
60:36:54:57:1e:1b:c4:11:d3:3a:10:89:0b:89:eb:86:85:7b:
ab:d4:5f:29:3f:21:59:ed:94:65:c1:fc:80:d9:c2:f1:13:5d:
12:28:eb:04:7f:40:f5:82:a1:54:f9:7e:ed:10:ac:ac:42:ed:
74:08:5d:ca:e0:1f:5e:7e:f0:6e:11:7e:eb:14:15:7a:7e:d3:
b7:e0:01:42:9b:d9:8d:8e:ee:01:ba:17:d7:b1:a5:f6:0c:9f:
70:01:60:af:7c:d2:43:d1:d7:d4:3a:36:5c:89:45:55:c9:c8:
78:ed:a0:f5:57:35:b6:9e:22:97:2e:95:b3:86:47:41:c3:1a:
74:de:9a:01:7f:90:90:ff:da:38:8d:bb:4e:c7:9b:64:d8:76:
c5:54:85:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:04 2026 by rpki-client