Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
File: Cfuz7S8CnEusxuosTH9MHNboDnk.mft (raw, json)
Hash identifier: IbnD3jXHKscN60tiwuVb2zO1XKIeuVkFHyFnL9oon1E=
Subject key identifier: D7:C5:D6:AD:4D:8F:B2:00:B1:DC:60:E2:60:CE:9B:F3:CA:F1:FB:0E
Authority key identifier: 09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
Certificate issuer: /CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Certificate serial: 019F90599B102DE7F40F133FC9E4391A9C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
Manifest number: 102E
Signing time: Thu 23 Jul 2026 19:00:19 +0000
Manifest this update: Thu 23 Jul 2026 19:00:19 +0000
Manifest next update: Fri 24 Jul 2026 19:00:19 +0000
Files and hashes: 1: Cfuz7S8CnEusxuosTH9MHNboDnk.crl (hash: VLLphdlZ4RDLmb3lx7HlWz0ETMhrAQpwhrAFGylE8/Y=)
2: tPzvJ8fhXyxuStH7y_RiWlVyHhs.roa (hash: TJabNOMfT1VmMNuU7X4vXm/HGDPktwOUxF0xJ5kPJG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:9b:10:2d:e7:f4:0f:13:3f:c9:e4:39:1a:9c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Validity
Not Before: Jul 23 19:00:19 2026 GMT
Not After : Jul 24 19:00:19 2026 GMT
Subject: CN=d7c5d6ad4d8fb200b1dc60e260ce9bf3caf1fb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3f:33:d7:94:83:0b:29:ab:07:80:27:65:64:
2f:2e:ff:1e:9d:fe:18:7b:b3:d2:53:ba:3d:d5:05:
02:5f:a2:0d:f0:8c:c1:e0:4e:32:b7:bd:37:aa:65:
35:29:73:1e:db:9b:dc:09:6e:34:0a:3b:c1:eb:69:
b6:c1:19:aa:5c:7d:70:8c:62:40:31:b7:f6:34:61:
37:78:9f:0f:eb:ad:76:70:b4:fc:49:3b:a3:12:d1:
9a:6b:d9:d5:e9:7e:ee:f4:f4:cb:7a:a2:ae:1f:76:
59:2d:ea:f9:9b:7c:8a:7c:70:07:83:2d:39:b0:1d:
5f:92:9b:87:e9:23:7b:a1:09:ab:a4:10:75:b5:e9:
a5:5a:75:3e:40:44:71:24:84:cc:d0:b4:e9:2d:57:
4d:b3:88:6f:0b:5a:ca:26:72:96:6e:57:dd:fc:b6:
da:b4:d2:b9:3a:b8:88:bc:ea:3f:44:42:55:73:19:
a4:40:ad:e9:ce:04:58:f5:5a:65:c3:fb:83:6a:b1:
70:4e:52:a5:87:b2:3a:06:62:ca:a9:5f:36:f8:48:
d5:86:84:38:64:22:47:65:2d:ba:0b:87:72:0b:5f:
a0:8c:91:d7:83:90:c4:db:d0:ec:0e:59:9c:a4:08:
34:1a:6a:be:94:df:49:0d:eb:9d:1d:0e:25:6f:3a:
47:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C5:D6:AD:4D:8F:B2:00:B1:DC:60:E2:60:CE:9B:F3:CA:F1:FB:0E
X509v3 Authority Key Identifier:
keyid:09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:96:98:b9:8f:f8:b6:62:83:4c:f5:38:39:77:a0:63:b5:c8:
12:1a:f6:84:23:03:cc:19:91:26:a1:e5:9a:79:d8:f1:d9:73:
c1:f5:4c:c8:ef:00:14:06:a2:23:0c:2b:8f:a6:6f:43:93:06:
cb:80:2f:1d:60:17:57:d1:2e:b7:61:8e:3b:7a:12:71:89:b5:
ea:4f:75:0e:31:f2:7b:33:69:bc:3c:96:51:a6:0c:1a:44:82:
72:f8:c6:d3:4d:a1:de:ab:6d:ec:c1:43:49:39:85:15:00:4f:
c0:af:5a:27:83:af:04:bd:6d:23:26:0b:f2:f1:db:bf:5a:57:
dd:88:7d:5f:b5:20:5d:99:e7:93:9d:99:75:2b:7c:f2:c1:b8:
2b:fb:20:f5:d7:a0:fb:fe:1e:02:e2:56:87:d2:05:33:0b:33:
44:e9:18:72:9d:b1:78:c3:98:b6:aa:06:db:09:a3:9d:99:80:
56:b8:6f:6d:10:de:8b:f0:2e:02:5f:ed:f1:f3:c3:2f:ba:19:
d9:a4:e0:df:d8:b6:6b:ef:0d:c2:fc:3e:42:0d:71:83:48:1e:
5c:69:3a:b0:0c:5c:5e:97:b5:b4:91:da:4d:14:60:b3:d4:7c:
57:b8:2e:b1:57:f1:0e:bd:3c:84:18:b7:2f:22:6b:b4:ca:55:
b3:8b:7c:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWZsQLef0DxM/yeQ5GpyNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZmJiM2VkMmYwMjljNGJhY2M2ZWEyYzRjN2Y0YzFjZDZl
ODBlNzkwHhcNMjYwNzIzMTkwMDE5WhcNMjYwNzI0MTkwMDE5WjAzMTEwLwYDVQQD
EyhkN2M1ZDZhZDRkOGZiMjAwYjFkYzYwZTI2MGNlOWJmM2NhZjFmYjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj8z15SDCymrB4AnZWQvLv8enf4Y
e7PSU7o91QUCX6IN8IzB4E4yt703qmU1KXMe25vcCW40CjvB62m2wRmqXH1wjGJA
Mbf2NGE3eJ8P6612cLT8STujEtGaa9nV6X7u9PTLeqKuH3ZZLer5m3yKfHAHgy05
sB1fkpuH6SN7oQmrpBB1temlWnU+QERxJITM0LTpLVdNs4hvC1rKJnKWblfd/Lba
tNK5OriIvOo/REJVcxmkQK3pzgRY9Vplw/uDarFwTlKlh7I6BmLKqV82+EjVhoQ4
ZCJHZS26C4dyC1+gjJHXg5DE29DsDlmcpAg0Gmq+lN9JDeudHQ4lbzpHPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfF1q1Nj7IAsdxg4mDOm/PK8fsOMB8GA1UdIwQY
MBaAFAn7s+0vApxLrMbqLEx/TBzW6A55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2Z1ejdTOENuRXVzeHVvc1RIOU1ITmJvRG5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85ZDViY2YtMmRiOS00YWZhLWIwMDAt
ODIyOTUzZjhjZjc3LzEvQ2Z1ejdTOENuRXVzeHVvc1RIOU1ITmJvRG5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85ZDViY2YtMmRiOS00YWZhLWIwMDAtODIyOTUzZjhjZjc3
LzEvQ2Z1ejdTOENuRXVzeHVvc1RIOU1ITmJvRG5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZaYuY/4
tmKDTPU4OXegY7XIEhr2hCMDzBmRJqHlmnnY8dlzwfVMyO8AFAaiIwwrj6ZvQ5MG
y4AvHWAXV9Eut2GOO3oScYm16k91DjHyezNpvDyWUaYMGkSCcvjG002h3qtt7MFD
STmFFQBPwK9aJ4OvBL1tIyYL8vHbv1pX3Yh9X7UgXZnnk52ZdSt88sG4K/sg9deg
+/4eAuJWh9IFMwszROkYcp2xeMOYtqoG2wmjnZmAVrhvbRDei/AuAl/t8fPDL7oZ
2aTg39i2a+8Nwvw+Qg1xg0geXGk6sAxcXpe1tJHaTRRgs9R8V7gusVfxDr08hBi3
LyJrtMpVs4t8Fw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:09 2026 by rpki-client