Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
File: Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft (raw, json)
Hash identifier: PWXMlTuOUYuGvd1gqZN/03fu7swpb7WwuMsmxqF+s7w=
Subject key identifier: 2F:07:D6:F3:9E:39:83:35:45:E8:E6:5E:17:59:D9:3C:16:96:D9:31
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial: 019D26CD244FF5F01828C4D2DE6EDABE6043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
Manifest number: 16CF
Signing time: Wed 25 Mar 2026 21:01:11 +0000
Manifest this update: Wed 25 Mar 2026 21:01:11 +0000
Manifest next update: Thu 26 Mar 2026 21:01:11 +0000
Files and hashes: 1: 6VbfAtk74cEPjvjgLQEhtLrP81U.roa (hash: rizvPmOdwzBXEQAhSRAxrV7Y3yfCi8vmhR+0fDvXQ4g=)
2: 6jxLWgEtYzUcIeL5nZFYtWqCnfY.roa (hash: Lovb3G8X/XH3FBnrwcuSEwDdeXgPvRqXxr0SbNYBD+M=)
3: Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl (hash: KOngosd+qQAhKFNoplcU78gtm6sF1GedmXtFCHf6P3w=)
4: nyJdPy5Bsxrv9RkeGDs6hh13eEw.roa (hash: E+DEgJCHAZ1XErRECJ9yeRTJenD3kJR7V8Lsa73CEVk=)
5: zmJzZmVY8NtwzftSPErinNzKjGE.roa (hash: yU1t8HphTqzqKJyMuPkrerGT4L8SmhaXm7BHsn47/0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:24:4f:f5:f0:18:28:c4:d2:de:6e:da:be:60:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
Validity
Not Before: Mar 25 21:01:11 2026 GMT
Not After : Mar 26 21:01:11 2026 GMT
Subject: CN=2f07d6f39e39833545e8e65e1759d93c1696d931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:02:03:4a:8e:bf:b7:27:bc:65:a2:19:a9:
3c:59:13:ea:b7:eb:a2:8b:2f:6e:5b:91:22:72:97:
19:30:e2:12:77:3b:16:c0:ea:3c:9d:78:7a:f7:fc:
a7:1b:83:57:f7:78:a0:e6:6f:64:b9:70:71:4d:84:
d6:3f:60:55:d7:f1:51:05:1a:89:bf:c8:86:f2:4a:
27:27:8c:f0:d9:5f:01:b6:b5:a1:86:a9:c8:64:e7:
da:0f:92:5c:75:12:a9:43:0f:98:e7:08:85:0e:eb:
4f:b5:56:06:34:cd:9c:9e:ab:e3:57:5d:91:9e:0a:
f0:00:ad:8b:4a:05:22:fe:d5:e8:ff:bb:0c:2e:84:
17:27:ed:23:d0:ad:66:37:6e:e7:bd:df:79:4a:fe:
f3:6a:90:49:59:a1:14:88:7c:65:35:83:73:8b:c7:
59:93:e0:be:ad:c5:26:d3:cb:f7:9a:7f:05:8a:3d:
1a:e8:de:61:ce:2f:94:12:5b:fb:aa:3e:34:4b:6b:
85:0e:d4:12:d2:bf:ef:05:40:fb:98:8b:52:9b:c8:
c2:96:c9:a4:c5:f4:58:a5:0f:a7:f8:77:8d:00:c8:
42:30:80:4b:bf:31:b9:9f:0e:51:bf:c6:51:55:a5:
e5:b1:70:62:71:10:34:3c:cc:1a:85:cb:dc:f9:fb:
98:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:07:D6:F3:9E:39:83:35:45:E8:E6:5E:17:59:D9:3C:16:96:D9:31
X509v3 Authority Key Identifier:
keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:06:e8:2f:a9:45:d6:a9:90:64:3c:36:da:3d:c7:ea:34:3c:
68:c2:1c:da:7d:9d:9c:32:ec:5c:8f:77:83:12:06:a7:8a:2c:
50:39:4c:0a:1b:d9:42:e0:21:e9:67:45:41:ff:cc:a9:e8:9a:
43:fe:35:af:2e:1b:fa:1a:c9:4e:a7:f9:7d:d5:b6:a4:77:04:
1e:44:2f:bf:2f:fb:5d:8a:8c:66:8f:e5:47:b0:79:f3:85:0c:
de:0b:a6:3d:b6:e7:19:6b:7d:36:57:c7:e2:1f:6a:4f:03:7d:
16:34:c0:64:f6:76:b5:af:4e:19:eb:2e:d8:ec:30:f4:0f:ec:
23:98:e7:ac:89:15:37:fe:e1:cf:f0:0b:2d:63:c6:25:6a:dd:
42:08:30:a1:22:77:00:4a:18:40:78:d9:7c:a5:37:4d:cd:88:
17:34:f3:ca:2f:cd:a4:43:1c:59:64:b4:dc:24:39:f0:b8:42:
81:97:66:62:95:82:bd:25:b9:c4:36:e5:97:a5:6d:e9:15:2e:
b5:19:11:03:1b:c4:f6:81:fd:24:a1:22:41:d3:ca:73:38:b3:
96:e5:9c:cb:d1:f1:31:80:72:b1:5e:4d:2c:05:fb:64:52:e1:
ae:48:5b:b8:6c:3e:e7:bf:d8:cb:61:72:39:31:5c:ae:83:4f:
e1:9c:b4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:59 2026 by rpki-client