Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
File: cFtQehAZ98Rlc33FlzbAb93c7-c.mft (raw, json)
Hash identifier: 9aqaqlwlOJhubFBFlHG2e3urgFYR64a0IId0u8UDYys=
Subject key identifier: F6:B4:BB:07:53:38:8D:08:16:1E:0F:F6:B3:9D:FA:55:B6:FE:42:27
Authority key identifier: 70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
Certificate issuer: /CN=705b507a1019f7c465737dc59736c06fdddcefe7
Certificate serial: 019D27DFE22CD53894A1C3A8DBC93CD8421D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
Manifest number: 088D
Signing time: Thu 26 Mar 2026 02:01:16 +0000
Manifest this update: Thu 26 Mar 2026 02:01:16 +0000
Manifest next update: Fri 27 Mar 2026 02:01:16 +0000
Files and hashes: 1: F-PjRsH19rPMcZ81IXF5CCgR1KU.roa (hash: L/C4Dl9kXu9PUSNWiV3aolnjjZ77+ByzduDuRCwuQ1M=)
2: cFtQehAZ98Rlc33FlzbAb93c7-c.crl (hash: GeDCy1kMP5Jcf8QApGgyZnQ61GoIcCpa0KJ8Zuysa4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:e2:2c:d5:38:94:a1:c3:a8:db:c9:3c:d8:42:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705b507a1019f7c465737dc59736c06fdddcefe7
Validity
Not Before: Mar 26 02:01:16 2026 GMT
Not After : Mar 27 02:01:16 2026 GMT
Subject: CN=f6b4bb0753388d08161e0ff6b39dfa55b6fe4227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f9:90:81:55:85:1b:45:1e:3c:f4:53:d6:4d:
cc:25:6f:fb:94:c9:9b:bb:e5:9e:a1:dc:a5:5e:de:
2d:ab:c1:58:3d:2e:3c:06:9f:ef:af:66:e5:5f:d2:
44:4a:09:45:0b:29:ec:18:71:e6:88:da:4f:11:c0:
c0:fc:b2:61:b5:33:c3:a3:ac:7d:77:51:8f:70:4a:
04:f9:db:bd:ef:e3:ca:4b:4a:e0:55:bc:2f:54:4d:
37:8e:39:8a:fd:ce:3a:7c:41:00:48:3c:47:1a:37:
83:00:76:7d:90:d8:42:27:7b:58:9d:4a:82:43:d4:
4f:e0:3d:f3:99:76:71:17:46:0b:8f:13:19:d3:90:
14:e8:f8:85:01:d5:a7:81:76:1b:c3:95:55:c5:6c:
37:87:7a:0c:35:a2:08:1b:a7:b7:00:59:4a:fb:0a:
ff:dd:d8:af:1c:8d:9c:c8:6b:d1:12:7e:36:9e:3d:
01:6c:e8:cf:80:26:77:34:b4:36:a6:1b:4d:18:54:
ab:19:33:aa:4c:6d:f8:f6:8d:a6:a6:58:c8:b4:a9:
e4:f6:ff:53:c0:b8:21:58:11:69:41:6b:ab:c0:1a:
a1:a8:59:4f:ba:88:f5:b8:05:73:9b:d7:91:93:4e:
d6:44:04:fd:33:5b:82:44:38:51:0d:1f:7f:66:ff:
aa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B4:BB:07:53:38:8D:08:16:1E:0F:F6:B3:9D:FA:55:B6:FE:42:27
X509v3 Authority Key Identifier:
keyid:70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:aa:73:2b:a7:a6:7f:a9:a0:ce:84:00:68:9b:44:65:c3:12:
6c:91:f9:21:e1:3a:b1:8e:91:1c:5d:53:6a:d5:18:a1:a1:8e:
ed:71:42:8b:ce:fa:c5:51:45:3b:d5:84:85:86:7e:ae:7f:08:
02:48:74:5b:e1:07:ec:40:00:a5:76:8c:f8:9f:58:57:a5:60:
47:26:cb:5d:43:6d:03:79:bb:c0:63:48:16:c7:6f:9a:6c:66:
40:d0:6f:5f:0f:3a:21:2d:2a:ef:48:b5:d6:b5:a1:51:3f:7b:
a6:aa:8a:9f:c3:2d:ef:e1:6f:5d:05:98:50:47:63:96:a9:f1:
70:6e:7c:35:a7:01:43:d7:de:bd:aa:6c:85:28:e7:64:a3:0a:
73:49:e4:22:da:4e:b9:32:67:46:97:ec:2a:96:23:3a:61:78:
e9:6d:eb:db:57:20:a4:e3:e8:6b:25:aa:80:0e:47:2f:01:08:
97:c3:c7:86:02:b3:c7:86:e5:50:1f:e5:4a:c8:b5:da:a4:1a:
43:d3:5d:60:fd:5c:4d:96:57:8b:07:7d:72:1c:5f:d7:bc:32:
4b:9c:66:b2:dd:6b:2d:23:7b:8a:db:20:31:2d:bc:b8:f5:92:
2a:73:38:d2:f1:0a:68:ef:1a:3e:a9:ed:dd:8a:d0:aa:e5:c6:
2b:18:95:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:45 2026 by rpki-client