Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
File: Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft (raw, json)
Hash identifier: MAZDdZdCsBQ5QXAhvSUAtXhPm7KNtmVeU3k36JXn3vo=
Subject key identifier: 0C:8E:0E:89:E1:54:8A:ED:AC:7A:44:B6:FB:69:CC:56:00:7F:14:CC
Authority key identifier: 09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
Certificate issuer: /CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Certificate serial: 019F90FEC60BA5EFD7B1776C506D77CCED84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
Manifest number: 1706
Signing time: Thu 23 Jul 2026 22:00:43 +0000
Manifest this update: Thu 23 Jul 2026 22:00:43 +0000
Manifest next update: Fri 24 Jul 2026 22:00:43 +0000
Files and hashes: 1: Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl (hash: Gc9rAIDdoDSAIMB34WnWkCvziixzj08K1MoSOWefBU4=)
2: fjfBNYgsUNX3mydnGn3xY9hxxkI.roa (hash: RcxMT9Fv//tOCCRi6oIZLm/dau+OtJX1wqCmolZkb18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:c6:0b:a5:ef:d7:b1:77:6c:50:6d:77:cc:ed:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Validity
Not Before: Jul 23 22:00:43 2026 GMT
Not After : Jul 24 22:00:43 2026 GMT
Subject: CN=0c8e0e89e1548aedac7a44b6fb69cc56007f14cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:34:b5:a7:d8:3c:77:91:10:7d:91:b8:74:f1:
bf:63:c9:c1:43:85:a2:2f:18:39:7e:c5:ac:10:aa:
5c:9e:e3:be:0f:52:fb:db:62:ee:5c:44:2b:30:3f:
22:aa:0d:1b:e8:77:b0:23:90:93:de:39:7f:be:db:
ee:c3:48:89:8a:0a:47:68:21:42:e3:a6:21:e0:72:
85:4e:2f:23:9b:9b:46:2a:8f:c8:ef:73:16:97:83:
5d:7c:5a:17:60:31:97:46:1c:d2:aa:c0:be:11:14:
e5:82:c4:5e:b3:27:07:05:a2:0b:37:a6:68:0e:a3:
f9:4c:1b:c4:f1:79:cd:93:05:b1:50:21:37:a9:3c:
b9:f2:3e:40:79:e1:35:4b:63:32:a4:62:6e:ce:a0:
71:c9:93:63:6c:0d:aa:2d:0d:21:a6:67:de:9d:02:
fa:3c:8b:2a:6e:83:d4:77:09:68:ee:f3:9a:e6:62:
c0:ae:dc:02:c0:83:d2:9d:40:b2:32:c8:16:a7:1d:
e7:8a:47:0c:b8:a3:5b:fa:94:6d:03:aa:a1:95:ab:
aa:72:f0:cc:30:1c:51:e5:db:b1:26:cd:61:c5:60:
bb:a5:74:5d:25:39:7b:de:af:eb:a9:83:30:34:aa:
a4:dd:63:9c:97:29:5b:bc:83:54:e3:ea:fc:3f:e4:
29:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8E:0E:89:E1:54:8A:ED:AC:7A:44:B6:FB:69:CC:56:00:7F:14:CC
X509v3 Authority Key Identifier:
keyid:09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0d:dc:04:cf:e5:48:40:09:f8:4f:5b:36:b4:60:fc:0d:ce:
56:1b:df:88:65:fe:03:79:04:84:15:72:2f:34:b9:0f:97:4d:
fe:a5:90:1a:9b:0c:41:9c:3b:9d:2a:f1:0f:ed:0f:dd:44:dc:
fe:59:bd:6d:f6:42:d7:21:cf:17:64:0b:22:19:21:74:e5:b7:
bb:b3:45:b6:02:17:f5:88:d9:3b:c5:f7:22:c2:d3:cf:73:27:
31:e0:bd:39:38:04:36:04:a5:65:cf:c2:c8:e3:49:41:aa:d8:
2e:96:f3:79:3e:25:35:18:53:af:fb:2c:a3:61:d6:fa:1c:31:
69:d1:0b:c9:55:04:05:03:95:07:6e:08:07:d8:d6:6e:ec:b1:
37:2e:c6:52:d0:bf:a8:f9:47:cb:3b:50:8c:1b:3d:7c:47:ed:
aa:4d:ff:87:d2:31:26:9d:68:85:06:6c:0e:f5:df:8e:57:e5:
d3:dd:69:55:24:1f:c3:2d:7f:d0:ee:a7:07:b7:6e:47:9c:cc:
94:fc:28:dd:07:3e:fc:fd:47:1c:0c:3e:e6:12:a3:91:32:4a:
44:4b:5a:22:b9:9e:7b:c4:b7:3d:db:4a:b2:92:1a:e6:d4:69:
93:e7:63:e4:48:7c:d9:19:61:57:35:b3:45:62:70:10:05:45:
0d:94:fc:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/sYLpe/XsXdsUG13zO2EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZmVjZDcwNzFiNzI3ZGIzZDEyZjA5ZWZiYjQ1NGUwNGQ0
Zjc0M2QwHhcNMjYwNzIzMjIwMDQzWhcNMjYwNzI0MjIwMDQzWjAzMTEwLwYDVQQD
EygwYzhlMGU4OWUxNTQ4YWVkYWM3YTQ0YjZmYjY5Y2M1NjAwN2YxNGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzS1p9g8d5EQfZG4dPG/Y8nBQ4Wi
Lxg5fsWsEKpcnuO+D1L722LuXEQrMD8iqg0b6HewI5CT3jl/vtvuw0iJigpHaCFC
46Yh4HKFTi8jm5tGKo/I73MWl4NdfFoXYDGXRhzSqsC+ERTlgsResycHBaILN6Zo
DqP5TBvE8XnNkwWxUCE3qTy58j5AeeE1S2MypGJuzqBxyZNjbA2qLQ0hpmfenQL6
PIsqboPUdwlo7vOa5mLArtwCwIPSnUCyMsgWpx3nikcMuKNb+pRtA6qhlauqcvDM
MBxR5duxJs1hxWC7pXRdJTl73q/rqYMwNKqk3WOclylbvINU4+r8P+QppwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyODonhVIrtrHpEtvtpzFYAfxTMMB8GA1UdIwQY
MBaAFAn+zXBxtyfbPRLwnvu0VOBNT3Q9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2Y3TmNIRzNKOXM5RXZDZS03UlU0RTFQZEQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS83MmUzYTEtOTA2Yy00NDhiLTk4ZGEt
NWEyMDZlOGIxMzY5LzEvQ2Y3TmNIRzNKOXM5RXZDZS03UlU0RTFQZEQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS83MmUzYTEtOTA2Yy00NDhiLTk4ZGEtNWEyMDZlOGIxMzY5
LzEvQ2Y3TmNIRzNKOXM5RXZDZS03UlU0RTFQZEQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQ3cBM/l
SEAJ+E9bNrRg/A3OVhvfiGX+A3kEhBVyLzS5D5dN/qWQGpsMQZw7nSrxD+0P3UTc
/lm9bfZC1yHPF2QLIhkhdOW3u7NFtgIX9YjZO8X3IsLTz3MnMeC9OTgENgSlZc/C
yONJQarYLpbzeT4lNRhTr/sso2HW+hwxadELyVUEBQOVB24IB9jWbuyxNy7GUtC/
qPlHyztQjBs9fEftqk3/h9IxJp1ohQZsDvXfjlfl091pVSQfwy1/0O6nB7duR5zM
lPwo3Qc+/P1HHAw+5hKjkTJKREtaIrmee8S3PdtKspIa5tRpk+dj5Eh82RlhVzWz
RWJwEAVFDZT8OQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:31 2026 by rpki-client