Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
File: Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft (raw, json)
Hash identifier: BkiLGss3iZvWiFVDDJ7QE+C0/msk+xUelP7Gmq84yFo=
Subject key identifier: 42:EC:85:FF:D5:ED:85:81:38:22:81:E0:A4:F9:1D:0C:66:E3:88:9D
Authority key identifier: 09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
Certificate issuer: /CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Certificate serial: 019E1E3577B93BE63FF42B36C1A646C36CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
Manifest number: 1646
Signing time: Tue 12 May 2026 22:01:20 +0000
Manifest this update: Tue 12 May 2026 22:01:20 +0000
Manifest next update: Wed 13 May 2026 22:01:20 +0000
Files and hashes: 1: Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl (hash: 4ed18ak3r9Wkyf6PWdkXuqCQjdQcWHugs58lhkc5Gbg=)
2: fjfBNYgsUNX3mydnGn3xY9hxxkI.roa (hash: RcxMT9Fv//tOCCRi6oIZLm/dau+OtJX1wqCmolZkb18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:77:b9:3b:e6:3f:f4:2b:36:c1:a6:46:c3:6c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Validity
Not Before: May 12 22:01:20 2026 GMT
Not After : May 13 22:01:20 2026 GMT
Subject: CN=42ec85ffd5ed8581382281e0a4f91d0c66e3889d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:1f:ce:0e:2a:9b:c3:eb:4d:96:cf:74:d8:
e8:5d:ab:ea:b0:42:d6:d9:a3:6d:72:62:3f:2a:cc:
12:af:0c:d7:54:40:83:da:87:4b:92:a0:77:75:b4:
70:ac:43:f4:fb:f4:68:62:64:aa:94:f3:6f:82:cc:
3c:a7:c4:52:2f:05:80:9a:49:ef:eb:33:07:dc:a6:
a2:31:0b:72:86:5d:0b:ee:2f:cd:42:5e:3d:62:00:
9a:3a:32:7d:5c:1e:18:ab:44:52:6d:98:71:6d:89:
4c:db:8d:bd:2c:aa:24:a9:1c:d9:3a:10:aa:1f:8e:
f5:e5:8c:08:c3:f7:02:dd:9b:9d:1a:f9:c2:8e:96:
9a:5f:3a:eb:c3:c6:5c:6a:7e:30:fa:da:ec:5d:0c:
2a:01:05:74:f8:c6:08:d3:ca:58:b0:e5:de:ee:65:
0c:36:61:78:ea:44:8a:09:84:e9:4e:63:e3:5a:f1:
b9:35:c4:d7:4a:1c:2a:01:bf:25:9f:48:7d:c4:d4:
d2:87:07:0c:0f:e7:25:8d:ae:a0:f9:d5:f9:47:de:
ff:6a:b7:82:87:c4:69:cd:2e:c1:ff:1a:e8:24:ff:
18:49:84:e0:54:8e:ce:20:e2:6d:4a:83:29:d3:20:
e4:b9:25:e5:ac:41:21:0d:3c:9a:97:da:c5:3e:97:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EC:85:FF:D5:ED:85:81:38:22:81:E0:A4:F9:1D:0C:66:E3:88:9D
X509v3 Authority Key Identifier:
keyid:09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:57:be:f4:b5:97:25:7d:d8:78:19:f2:7d:f4:74:fc:c8:ce:
26:5b:3d:c3:0c:d3:db:d8:98:44:63:1f:44:d9:22:77:9e:ad:
6e:b1:d5:35:01:4e:f1:89:be:93:7b:ca:85:12:98:38:13:15:
b2:9e:7e:19:9c:2d:2e:65:98:3c:5f:bf:6f:72:3e:2c:90:5e:
5e:76:94:32:39:32:49:30:e3:13:31:64:10:bd:db:a3:b8:02:
f7:81:2c:c1:ca:68:c7:2d:fa:a6:a7:07:d3:e8:23:f2:44:59:
1f:2c:20:79:84:8d:33:f0:c6:a3:6b:cc:d9:d5:cb:39:21:47:
c2:65:b7:96:d9:5d:48:de:28:e9:71:e2:57:e3:c8:9e:3a:d6:
e9:59:f6:6c:71:53:2b:44:08:b0:7a:e6:fa:2b:fa:fe:07:ad:
ef:05:1d:33:1e:3b:d1:75:d9:d3:6d:05:7b:95:a4:f0:9d:61:
98:47:0a:6e:36:67:da:76:dd:d6:a6:0d:77:c1:8f:37:04:ef:
bb:b9:a4:e7:b2:77:82:81:45:1a:c3:8b:1f:53:7d:2a:5d:9a:
a4:b4:24:2a:33:b4:a2:60:8d:98:b6:de:fd:49:e0:9a:2f:5b:
7d:94:12:e1:1a:2b:c7:9f:f1:ba:85:b2:d9:12:be:7b:92:df:
41:b2:31:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNXe5O+Y/9Cs2waZGw2zQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZmVjZDcwNzFiNzI3ZGIzZDEyZjA5ZWZiYjQ1NGUwNGQ0
Zjc0M2QwHhcNMjYwNTEyMjIwMTIwWhcNMjYwNTEzMjIwMTIwWjAzMTEwLwYDVQQD
Eyg0MmVjODVmZmQ1ZWQ4NTgxMzgyMjgxZTBhNGY5MWQwYzY2ZTM4ODlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVsfzg4qm8PrTZbPdNjoXavqsELW
2aNtcmI/KswSrwzXVECD2odLkqB3dbRwrEP0+/RoYmSqlPNvgsw8p8RSLwWAmknv
6zMH3KaiMQtyhl0L7i/NQl49YgCaOjJ9XB4Yq0RSbZhxbYlM2429LKokqRzZOhCq
H4715YwIw/cC3ZudGvnCjpaaXzrrw8Zcan4w+trsXQwqAQV0+MYI08pYsOXe7mUM
NmF46kSKCYTpTmPjWvG5NcTXShwqAb8ln0h9xNTShwcMD+clja6g+dX5R97/areC
h8RpzS7B/xroJP8YSYTgVI7OIOJtSoMp0yDkuSXlrEEhDTyal9rFPpf4wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELshf/V7YWBOCKB4KT5HQxm44idMB8GA1UdIwQY
MBaAFAn+zXBxtyfbPRLwnvu0VOBNT3Q9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2Y3TmNIRzNKOXM5RXZDZS03UlU0RTFQZEQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS83MmUzYTEtOTA2Yy00NDhiLTk4ZGEt
NWEyMDZlOGIxMzY5LzEvQ2Y3TmNIRzNKOXM5RXZDZS03UlU0RTFQZEQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS83MmUzYTEtOTA2Yy00NDhiLTk4ZGEtNWEyMDZlOGIxMzY5
LzEvQ2Y3TmNIRzNKOXM5RXZDZS03UlU0RTFQZEQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUle+9LWX
JX3YeBnyffR0/MjOJls9wwzT29iYRGMfRNkid56tbrHVNQFO8Ym+k3vKhRKYOBMV
sp5+GZwtLmWYPF+/b3I+LJBeXnaUMjkySTDjEzFkEL3bo7gC94Eswcpoxy36pqcH
0+gj8kRZHywgeYSNM/DGo2vM2dXLOSFHwmW3ltldSN4o6XHiV+PInjrW6Vn2bHFT
K0QIsHrm+iv6/get7wUdMx470XXZ020Fe5Wk8J1hmEcKbjZn2nbd1qYNd8GPNwTv
u7mk57J3goFFGsOLH1N9Kl2apLQkKjO0omCNmLbe/Ungmi9bfZQS4Rorx5/xuoWy
2RK+e5LfQbIxow==
-----END CERTIFICATE-----
Generated at Wed May 13 02:56:19 2026 by rpki-client