Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
File: cfXp6ogwX30xahKh1J2w6fuJbOE.mft (raw, json)
Hash identifier: XcSe1fr0RsjfYumn1l71fkWyc77aazRBzSMH2d1SyEg=
Subject key identifier: 06:1D:69:DA:24:3E:7F:F9:50:FC:82:FF:A6:99:7D:A7:F2:F1:46:5A
Authority key identifier: 71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
Certificate issuer: /CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Certificate serial: 019E209230A087202F3ED7996DD3FE9FE223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
Manifest number: 0750
Signing time: Wed 13 May 2026 09:01:51 +0000
Manifest this update: Wed 13 May 2026 09:01:51 +0000
Manifest next update: Thu 14 May 2026 09:01:51 +0000
Files and hashes: 1: cfXp6ogwX30xahKh1J2w6fuJbOE.crl (hash: rkArG3+bX5op9tvTdr/UaIdrYwtL2LKEhOPHWRYobB0=)
2: lo1A7pYq1tLNUztFqwS_GAzqH1I.roa (hash: 7Dv6Q1axncu2GBqJKqrxuiYDDZvukjLzUniOctEKoGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:30:a0:87:20:2f:3e:d7:99:6d:d3:fe:9f:e2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Validity
Not Before: May 13 09:01:51 2026 GMT
Not After : May 14 09:01:51 2026 GMT
Subject: CN=061d69da243e7ff950fc82ffa6997da7f2f1465a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:c3:90:47:0b:6d:97:67:c7:15:cf:04:0f:
af:51:35:2d:3c:41:a8:87:76:20:96:ac:66:ad:6a:
84:e7:f8:3f:ca:e3:6e:11:fb:2e:f1:e6:88:06:ee:
da:92:8c:6f:03:13:8b:ea:a5:73:96:d1:a4:58:25:
ae:de:29:f2:ea:f7:fc:5f:0b:25:d3:5b:dc:6c:88:
63:c7:a1:f6:3c:98:71:72:86:d5:8a:b1:65:6d:29:
75:36:5c:3a:b2:0d:42:66:81:f0:09:22:42:2b:10:
07:a2:dd:b6:9b:5f:ae:98:c0:72:af:cb:c7:bc:5a:
f1:de:cc:b0:57:a5:a4:fe:35:5d:eb:e7:cf:33:9b:
26:0b:c3:c4:0e:dd:99:55:ca:36:74:a5:89:1c:b0:
d8:56:08:9c:b7:ce:5b:b2:5f:43:00:5f:d4:76:e1:
a5:a3:d4:01:86:66:5d:f9:a7:0a:0c:3a:ce:2a:dc:
53:4a:59:34:48:a0:42:e6:de:95:15:be:bc:85:18:
16:41:1b:ac:d2:2c:22:7e:fe:73:44:bf:f1:25:28:
b1:b6:bd:3c:a8:d8:94:80:d8:21:a9:d4:65:46:3b:
6f:d7:ac:32:37:fe:f2:57:64:fa:40:e9:5b:4b:38:
23:da:5b:10:c1:2c:c3:a2:6a:01:b9:06:e1:5c:36:
58:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1D:69:DA:24:3E:7F:F9:50:FC:82:FF:A6:99:7D:A7:F2:F1:46:5A
X509v3 Authority Key Identifier:
keyid:71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:34:ae:c4:e7:e8:0a:2d:ce:60:8f:fd:93:d9:7f:81:aa:81:
28:3b:6e:63:75:b9:eb:5a:b4:d3:6a:0f:88:9a:76:b1:1e:7a:
5a:4c:dd:ea:76:66:76:b4:0a:82:c4:63:6a:cd:a3:d2:01:f3:
90:3a:d8:c2:7d:78:aa:f3:d9:1d:b2:76:bd:60:f7:64:06:47:
6f:8a:e0:a5:f2:cc:88:68:3c:1f:12:79:b0:e9:f6:d3:65:ee:
be:a8:1a:0f:2c:62:7f:cd:1c:22:6d:a6:a0:ae:37:67:38:22:
de:74:6c:b5:d4:1f:ce:06:95:be:d5:3f:3a:d1:e0:0a:48:2f:
df:ee:17:a4:ed:23:f7:bc:5c:94:23:53:8c:9b:8d:95:2a:bf:
3e:dd:28:98:6c:18:a7:4b:c2:1c:53:ab:de:fa:19:72:e5:9c:
97:be:b4:8a:ca:fb:ff:c7:71:a4:1e:c6:1b:a5:8f:f1:8c:ef:
b5:6a:43:52:85:a0:de:9c:69:e2:b7:a5:af:bd:fc:90:2f:1c:
74:e5:ab:23:cc:c2:65:d4:b2:c7:80:f9:c4:43:d1:c2:b1:33:
3d:5e:54:b8:ab:32:42:b7:66:b1:11:70:6f:5c:58:6f:62:85:
d3:9d:e8:67:26:0e:26:6b:08:1a:45:d4:e0:b6:ef:28:f8:56:
84:7f:a4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:13:00 2026 by rpki-client