Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
File: Cfuz7S8CnEusxuosTH9MHNboDnk.mft (raw, json)
Hash identifier: 7rxp9u+KYurYEWmRBnLswa0JC2q/07XQvovVdoK3pik=
Subject key identifier: A3:AA:A0:11:A9:AB:83:4B:AC:F0:80:94:46:6D:4F:37:F7:98:EC:71
Authority key identifier: 09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
Certificate issuer: /CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Certificate serial: 01A1D981AAEA710752901573F87F3BDE3579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
Manifest number: 115D
Signing time: Sat 14 Nov 2026 10:01:56 +0000
Manifest this update: Sat 14 Nov 2026 10:01:56 +0000
Manifest next update: Sun 15 Nov 2026 10:01:56 +0000
Files and hashes: 1: Cfuz7S8CnEusxuosTH9MHNboDnk.crl (hash: QTYt/zdoNvIYLhCql+/OnDGMy+6p5Z+A5XP7s8XE5uk=)
2: tPzvJ8fhXyxuStH7y_RiWlVyHhs.roa (hash: TJabNOMfT1VmMNuU7X4vXm/HGDPktwOUxF0xJ5kPJG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:81:aa:ea:71:07:52:90:15:73:f8:7f:3b:de:35:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Validity
Not Before: Nov 14 10:01:56 2026 GMT
Not After : Nov 15 10:01:56 2026 GMT
Subject: CN=a3aaa011a9ab834bacf08094466d4f37f798ec71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f5:27:d1:55:14:85:d9:68:de:0c:d8:de:22:
fc:b6:37:4c:49:2d:cf:ca:18:31:a6:69:f7:4b:71:
57:da:54:52:89:37:34:37:4e:9d:ec:af:78:6d:e5:
26:66:60:08:af:f4:98:d4:56:0a:d0:58:57:28:84:
2e:9c:c0:0b:83:cf:6d:c2:68:13:a0:eb:ee:14:c2:
ff:bf:d9:d9:6c:f0:3c:46:28:50:3d:ca:5a:05:ee:
a5:41:59:18:51:60:fe:43:ca:63:a6:bd:6b:c2:8d:
cc:68:42:19:6e:cb:42:16:3d:ad:cf:3e:91:fb:02:
b0:34:f8:2b:35:35:ab:e4:4b:a9:9e:22:55:a2:e0:
ff:c7:e6:82:d7:90:2a:c6:75:87:f5:1d:80:72:08:
2a:4b:aa:db:76:04:81:3b:e8:8c:00:9c:7a:49:06:
75:67:28:04:9f:20:95:80:5a:e8:3c:1c:57:e1:b8:
37:cb:21:b4:a4:fe:9f:26:18:25:bc:d5:5c:de:95:
be:c6:7e:b7:ec:94:a9:f8:b4:95:68:6b:aa:b4:72:
43:d0:98:ea:ab:ec:4d:8a:32:99:e1:b9:44:4b:b9:
29:20:b9:b3:3f:60:35:dc:c2:fe:6f:a0:ac:69:97:
36:a3:85:44:1a:97:88:c5:be:14:b4:c6:64:28:f2:
e6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AA:A0:11:A9:AB:83:4B:AC:F0:80:94:46:6D:4F:37:F7:98:EC:71
X509v3 Authority Key Identifier:
keyid:09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:89:43:7b:3b:d4:55:49:07:d9:2e:62:ec:c0:40:22:17:9b:
04:58:62:18:23:09:69:1e:f4:67:cd:8c:27:0a:88:1c:5f:c8:
f9:7d:8f:13:55:07:5a:29:9a:fe:dc:b3:d6:f0:fd:19:a5:69:
a8:7c:3e:45:81:65:d2:43:bc:88:49:42:08:09:2f:19:66:1a:
05:44:54:a0:04:3d:bb:77:81:7f:4f:da:b1:d0:5e:18:db:a6:
71:49:ea:8d:48:d3:0d:87:d6:26:be:6a:f9:17:3f:1e:c2:e4:
32:9c:a9:cd:d1:49:45:4a:fa:72:10:9c:64:3b:27:c6:6c:31:
14:6c:1d:5d:ff:57:5a:6e:5a:35:40:60:29:f7:86:0b:d9:68:
c6:8d:cd:88:a9:61:99:38:71:cd:9f:4f:d7:f8:02:dc:ac:7b:
b5:7f:7d:57:02:5d:1d:47:ce:50:cf:d4:75:8d:1d:74:25:a1:
c2:a8:f0:0b:15:0b:fb:da:c4:8e:d0:dd:07:69:e9:7a:14:be:
4c:8f:0c:3e:ae:d7:6b:dc:10:61:3c:58:ba:f3:ef:2b:14:c6:
37:35:06:2b:ae:c6:68:45:f9:02:3c:c8:53:00:10:0e:9e:55:
9e:cc:dc:4e:93:8f:d5:94:20:01:9a:ff:c2:ef:f8:b6:b6:8c:
71:3f:c7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:42:14 2026 by rpki-client