Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
File: cFo7sRdTjbbbnFz9WnlL899pfCc.mft (raw, json)
Hash identifier: I9aaIkKSMsynwEYLwaB+hXXMOeUc93iLhVX6CDoAArs=
Subject key identifier: 15:D4:0B:1B:9D:9C:41:A2:E6:04:31:67:4F:23:37:C0:E1:E0:3B:B3
Authority key identifier: 70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27
Certificate issuer: /CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
Certificate serial: 019D2996D238627C7C56B97ED24F54A0C429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 10:00:43 +0000
Manifest this update: Thu 26 Mar 2026 10:00:43 +0000
Manifest next update: Fri 27 Mar 2026 10:00:43 +0000
Files and hashes: 1: cFo7sRdTjbbbnFz9WnlL899pfCc.crl (hash: mNwtqLd9nNGtoRUr6a77el6xpFop5DSrA1n79IGsxDo=)
2: wBt38qnB5TIvgtAY54fHp1P6RJw.roa (hash: au9ASBmMM46Wgb5mYkdl7Sf9gWiSJoDf30mXBiLkT2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:d2:38:62:7c:7c:56:b9:7e:d2:4f:54:a0:c4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
Validity
Not Before: Mar 26 10:00:43 2026 GMT
Not After : Mar 27 10:00:43 2026 GMT
Subject: CN=15d40b1b9d9c41a2e60431674f2337c0e1e03bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:28:3c:75:c8:23:b6:9d:4f:6d:e8:9a:d0:
b2:d1:00:05:c5:6a:f6:f2:61:e8:00:81:68:2d:7f:
b3:a7:24:b9:98:5f:ac:6d:f4:2f:89:e6:73:79:3c:
4a:db:0c:dd:ef:24:1b:e5:05:a9:34:5a:c1:ad:78:
79:95:57:e7:8f:b1:af:bd:42:a3:ad:b9:e2:cd:a4:
d9:51:b8:fc:b9:dc:6c:f4:d1:d0:4e:2f:de:10:57:
96:c7:53:55:f3:88:b3:ae:28:a0:ef:de:b1:48:fb:
04:2f:46:48:5b:3b:6f:c9:d8:f1:8c:c3:ea:12:8b:
a8:a4:56:71:19:fc:72:01:54:da:4f:cf:2d:6b:e8:
00:9a:4f:bd:17:5c:a9:39:e3:56:16:c8:e2:c2:87:
79:35:03:fb:32:f2:0f:a6:a1:d0:13:95:a2:7e:c0:
68:0f:81:90:12:0f:f7:bd:0d:5e:e2:67:5d:f5:9b:
b8:ee:75:fc:b4:9f:0c:25:02:57:25:ea:d5:e7:1b:
3c:24:10:c3:fc:50:61:09:8a:87:09:a6:3f:26:ff:
9b:e4:84:81:7b:8c:33:67:9a:a7:d1:16:ab:d1:00:
46:4d:ce:6f:d9:fd:91:0d:f0:8c:62:4a:02:9a:2c:
f5:c0:3e:ba:16:d0:47:5e:dd:db:5d:96:7c:d9:1f:
fe:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D4:0B:1B:9D:9C:41:A2:E6:04:31:67:4F:23:37:C0:E1:E0:3B:B3
X509v3 Authority Key Identifier:
keyid:70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:27:3d:c9:a3:b9:9f:05:e4:78:37:1a:7b:e3:a1:d1:11:73:
7f:70:c0:02:cb:f0:bd:28:0e:35:06:17:a6:74:f3:38:1c:bb:
8c:76:8c:23:f6:46:e3:90:03:05:3c:76:e8:ac:c4:1c:36:5c:
4a:f1:de:fe:ec:27:71:fa:cb:ab:e8:16:9f:d9:3e:5a:27:66:
be:01:c0:69:49:cd:95:a5:7b:57:78:1f:7e:41:b2:7a:05:51:
4c:0f:44:15:f8:2e:a4:9b:19:e6:4c:3e:94:86:ee:c4:b6:e7:
a8:9e:cd:2b:9c:d3:e6:56:3a:75:31:8c:82:ce:ba:84:3a:1b:
ba:ee:54:a8:9e:54:d6:50:08:8a:f3:73:20:e9:8b:43:d9:bc:
99:79:43:eb:34:5a:1d:0b:f5:fb:db:bb:e9:64:df:0d:00:db:
22:0b:af:48:48:41:3e:89:74:86:d9:f2:e1:9d:24:66:69:b5:
7c:d8:bd:fa:96:a1:2f:a6:65:a3:37:ce:e4:ed:62:a5:14:15:
0b:83:44:81:d2:15:11:8f:a3:c5:df:1c:b2:d1:e5:49:74:31:
63:cf:38:0a:56:26:de:90:88:02:19:7e:19:07:05:73:8b:cf:
d8:4e:9c:56:ed:0a:e7:6d:8b:91:cb:ed:05:be:69:51:b4:7c:
be:76:e8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:21:25 2026 by rpki-client