Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
File: cFUm-asN0naCP8Hw66od5jt9ZWw.mft (raw, json)
Hash identifier: 2PpC5nzX4TUCjmF8+Z4cTqYLFMvW8QbZrhvIMXYjUPA=
Subject key identifier: BA:36:6C:99:FE:D4:55:8D:E2:18:36:54:48:F9:B6:36:C9:7A:C6:92
Authority key identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
Certificate issuer: /CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Certificate serial: 019D28F243D77B6BB3A46777FC0F6CEFD5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
Manifest number: 06F0
Signing time: Thu 26 Mar 2026 07:00:58 +0000
Manifest this update: Thu 26 Mar 2026 07:00:58 +0000
Manifest next update: Fri 27 Mar 2026 07:00:58 +0000
Files and hashes: 1: cFUm-asN0naCP8Hw66od5jt9ZWw.crl (hash: 1O/Wns2xWmekm9PzG3AHCuseiSOp2Bh1YY8BS+hjLas=)
2: utX8EvzxjtNKF1hFOEPAnrUCzm8.roa (hash: klBKnxuMcoS0m9Xk0/1QlfvOXmiMTMvpWtNw0ziiP1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:43:d7:7b:6b:b3:a4:67:77:fc:0f:6c:ef:d5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Validity
Not Before: Mar 26 07:00:58 2026 GMT
Not After : Mar 27 07:00:58 2026 GMT
Subject: CN=ba366c99fed4558de218365448f9b636c97ac692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:38:93:51:db:5f:d2:cf:dd:10:bf:40:4e:79:
89:5f:ec:c3:98:51:16:7a:b9:66:e8:64:11:b9:81:
66:7e:4e:4f:1d:c3:92:30:60:62:29:a2:13:26:79:
44:af:12:b2:70:f4:86:2e:04:d5:24:4d:b7:c5:c2:
78:76:4e:0c:14:ea:78:b3:bb:51:dc:e1:82:bd:0b:
e2:e0:ba:15:46:eb:0b:a4:2a:8c:a5:00:9a:58:2f:
e2:f1:d4:66:fc:11:ad:ac:30:5f:37:94:6a:5a:b9:
db:fe:ae:43:04:6d:fa:2b:88:1a:1d:9a:76:23:90:
ed:a0:08:f0:a4:1e:28:ea:f2:d0:58:02:34:07:fe:
df:d7:ce:a3:f4:de:82:c1:6f:9f:5a:3c:93:09:2c:
6d:8e:ab:63:a6:66:a0:f8:53:f4:3c:ee:c8:9b:42:
1a:8b:00:a2:e8:d5:74:29:14:ba:cf:b4:f5:b5:84:
e7:27:a9:cb:2e:ef:2f:19:32:16:c8:87:51:48:2b:
77:90:4c:18:f7:53:c1:58:90:bd:83:06:61:1d:61:
88:9f:a8:59:78:4e:9b:ec:63:9c:fd:b7:02:ce:c7:
50:e0:0e:8a:0e:f6:1d:ef:6f:24:2f:14:2b:a7:9a:
c2:94:f8:d7:e6:00:02:8b:d1:d8:61:90:0b:db:74:
fc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:36:6C:99:FE:D4:55:8D:E2:18:36:54:48:F9:B6:36:C9:7A:C6:92
X509v3 Authority Key Identifier:
keyid:70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:ee:82:53:44:4e:40:d3:b6:f2:a2:2b:54:ab:d8:44:1d:96:
30:9a:21:02:76:e2:62:f4:a8:e1:c1:cf:eb:0b:d6:89:ae:56:
56:2b:05:22:00:96:ea:8c:5e:f3:45:7f:66:9e:45:c2:29:11:
9c:87:d5:25:3a:e5:98:4e:07:dc:0e:3c:ab:6e:b8:f2:7b:d2:
cd:a7:75:3e:fc:98:ab:5c:9d:51:d3:29:fc:b2:21:ab:60:5b:
54:78:db:2d:d7:95:bb:fb:54:f7:d2:dc:43:9b:e6:b3:ff:27:
d4:da:e0:20:97:33:8a:88:f9:b3:f1:9e:a0:28:d2:29:8b:b9:
e5:34:c4:dc:61:41:76:94:5a:6e:40:0a:5d:3f:df:28:ee:8a:
0d:69:51:0a:97:77:25:97:83:1e:a4:d0:eb:06:49:9e:28:e1:
61:58:79:88:39:0e:f3:34:f8:f2:77:c1:90:0a:fb:b1:39:a9:
57:76:aa:13:2f:8f:7e:5e:56:25:31:44:99:53:80:93:c0:43:
ba:6b:7f:5c:2e:62:84:0e:a0:22:73:e8:4a:21:ad:8f:7f:88:
f9:6e:de:14:0c:8c:14:ee:2a:a2:ab:d1:3f:8a:06:48:34:15:
17:44:54:50:45:e6:c8:bd:1d:83:12:d2:35:3f:46:e0:67:0a:
bf:7b:6c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:50 2026 by rpki-client