Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
File: cfXp6ogwX30xahKh1J2w6fuJbOE.mft (raw, json)
Hash identifier: J1KX4c1W/qco17d3IpFBVWwDzJ0QGQZ5Bxsv8OJzuxU=
Subject key identifier: B9:52:B4:5C:5B:A1:A9:81:28:D2:97:AE:FA:B9:BE:5A:C7:D4:28:84
Authority key identifier: 71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
Certificate issuer: /CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Certificate serial: 019D2960963BCDE16C2DB706BA526CFA5D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
Manifest number: 06D0
Signing time: Thu 26 Mar 2026 09:01:28 +0000
Manifest this update: Thu 26 Mar 2026 09:01:28 +0000
Manifest next update: Fri 27 Mar 2026 09:01:28 +0000
Files and hashes: 1: cfXp6ogwX30xahKh1J2w6fuJbOE.crl (hash: 3PQcaPAbzvNqMjRHwnvK4lhISqabbE+8rK506v9oFPA=)
2: lo1A7pYq1tLNUztFqwS_GAzqH1I.roa (hash: 7Dv6Q1axncu2GBqJKqrxuiYDDZvukjLzUniOctEKoGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:96:3b:cd:e1:6c:2d:b7:06:ba:52:6c:fa:5d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Validity
Not Before: Mar 26 09:01:28 2026 GMT
Not After : Mar 27 09:01:28 2026 GMT
Subject: CN=b952b45c5ba1a98128d297aefab9be5ac7d42884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:64:0c:b6:b2:04:c1:12:d4:8a:d7:e1:b3:7b:
e7:ee:14:97:48:99:74:6c:b1:e1:b6:98:e4:04:d8:
5e:e4:c7:4a:9f:83:7f:5c:71:8a:56:d2:bd:05:f9:
7e:84:10:64:fc:0e:4b:5d:45:47:d3:d2:58:d1:cb:
aa:a9:a4:32:e7:15:5b:f6:05:22:97:62:e3:70:f4:
79:2d:f7:bd:8d:90:56:6e:ea:69:b1:dc:4b:85:cf:
d1:3d:f1:50:74:05:7e:30:03:43:14:18:0c:db:97:
d2:56:30:10:c9:16:e2:36:3d:8c:61:ae:b7:c5:aa:
fd:d1:fe:b9:d2:9e:ba:83:f2:58:3c:e3:7b:6e:35:
65:cd:dd:22:52:7b:6a:0c:75:3a:40:af:bc:ca:b3:
4c:b3:87:39:60:83:00:d5:55:49:9a:9a:17:2b:01:
5b:52:0f:ad:c2:5a:29:4c:cb:56:45:4a:54:fe:60:
dd:54:be:9d:5d:17:ab:df:1f:0e:76:d8:dd:d3:31:
ca:bf:6b:4e:dc:46:c2:5d:74:69:34:f6:c0:f3:29:
e5:ed:59:73:bd:da:c6:12:3d:a1:bc:a7:d0:59:0e:
93:6f:d7:26:86:e2:50:28:51:17:80:7e:68:51:02:
ab:18:2b:57:74:a1:be:67:50:c4:df:77:ab:a8:35:
d7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:52:B4:5C:5B:A1:A9:81:28:D2:97:AE:FA:B9:BE:5A:C7:D4:28:84
X509v3 Authority Key Identifier:
keyid:71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e0:ee:9f:c9:9a:e7:dd:8c:c5:6b:a7:4d:31:06:38:10:e5:
8b:3b:07:36:8b:e5:5f:32:0b:86:6d:9a:b5:3c:c4:ef:40:c7:
b7:52:61:3b:45:b0:82:f2:73:1d:f8:d9:73:20:56:16:f1:b7:
0e:7d:66:d2:c8:2d:80:68:a1:a7:76:c0:e0:d0:37:d2:87:d7:
83:f5:d4:f9:04:b9:9d:b1:51:da:5e:ad:6c:18:ee:ed:b7:a0:
ce:db:fd:88:2b:1f:4a:f8:63:9d:53:47:02:d4:18:c4:bd:8a:
dd:24:23:6b:1e:de:26:14:13:35:89:89:bb:1b:1f:bb:29:de:
21:0a:a6:5e:ff:ad:84:43:fd:6a:f9:b8:da:19:20:d6:16:fa:
59:1d:3b:29:ed:df:ea:22:d1:54:cf:a9:e2:5a:77:5b:b9:23:
4d:4a:bc:30:4a:53:50:c7:17:52:36:8a:97:d8:7a:b4:f3:57:
ef:72:88:2a:84:9d:92:b6:a5:f2:00:c9:16:d3:ae:dc:17:c3:
23:36:09:8b:f0:39:85:b6:d5:86:4c:dc:9d:a1:db:ff:f0:49:
1d:ac:82:7b:f5:e7:f6:48:86:4e:ce:1f:38:f6:44:09:d3:73:
ed:ee:cb:78:df:61:17:cd:39:3b:8c:93:51:7f:4f:64:2d:27:
d5:e1:04:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:26:16 2026 by rpki-client