Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
File: Cfuz7S8CnEusxuosTH9MHNboDnk.mft (raw, json)
Hash identifier: zYniBSyxS62avKvL4rZl8e2xoKjvtxGC4sgcDDag1sg=
Subject key identifier: F4:84:9B:C5:B1:01:4F:3C:C4:BC:28:DA:6B:FF:EF:2D:B6:9E:AF:CB
Authority key identifier: 09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
Certificate issuer: /CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Certificate serial: 01A0CD11097C8A521012328F910FB14F2D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
Manifest number: 10D2
Signing time: Wed 23 Sep 2026 07:00:40 +0000
Manifest this update: Wed 23 Sep 2026 07:00:40 +0000
Manifest next update: Thu 24 Sep 2026 07:00:40 +0000
Files and hashes: 1: Cfuz7S8CnEusxuosTH9MHNboDnk.crl (hash: SjtP45DDIhR9uI6eAp6+KRx9YLy8Rem777eqVvXlE0I=)
2: tPzvJ8fhXyxuStH7y_RiWlVyHhs.roa (hash: TJabNOMfT1VmMNuU7X4vXm/HGDPktwOUxF0xJ5kPJG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:09:7c:8a:52:10:12:32:8f:91:0f:b1:4f:2d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Validity
Not Before: Sep 23 07:00:40 2026 GMT
Not After : Sep 24 07:00:40 2026 GMT
Subject: CN=f4849bc5b1014f3cc4bc28da6bffef2db69eafcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:24:3e:54:53:61:ac:5c:1f:ee:77:14:c4:
2d:08:bc:2a:c0:e4:e1:4c:29:a5:a6:3b:b4:b2:b5:
87:e4:c1:9d:91:2a:4b:04:21:5e:89:1f:3e:c0:3e:
37:61:92:60:4b:85:bb:a8:fd:25:9b:09:33:d1:77:
11:51:44:ef:7d:4b:8f:3a:4a:a9:d7:0b:de:d5:d2:
cd:36:12:b0:de:8f:34:19:67:6d:41:21:fa:29:df:
94:a3:22:38:3d:7f:60:87:6d:2f:24:97:5f:85:ae:
08:fe:c1:52:43:f7:26:1f:76:84:6f:ee:2d:fb:d9:
4a:fc:63:90:09:f5:7a:7e:94:72:2b:9c:dd:ea:8f:
30:7a:6f:3d:7e:39:3b:e5:a7:9c:69:59:df:da:3d:
93:f0:4c:ae:92:2a:7c:4a:85:2d:94:ce:f5:74:c7:
ea:8c:d7:cc:fa:b5:ca:9f:2a:68:58:a4:e9:70:1a:
72:be:75:de:ac:18:41:e7:98:fb:64:f2:5d:fe:74:
bd:58:a8:b4:27:4e:1b:3b:65:eb:9a:0b:60:1f:11:
af:20:4d:e7:eb:94:92:6d:86:e3:42:fe:a7:84:30:
a5:e2:cc:6e:d2:c5:84:6e:e4:1b:98:06:a3:0a:98:
a8:9c:65:ff:76:d7:25:cd:03:a1:dc:a5:34:cb:a7:
72:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:84:9B:C5:B1:01:4F:3C:C4:BC:28:DA:6B:FF:EF:2D:B6:9E:AF:CB
X509v3 Authority Key Identifier:
keyid:09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f1:d7:c0:e0:43:b6:d8:28:ba:59:b6:ae:66:11:50:93:c6:
68:4d:1a:a3:90:c2:26:6a:54:35:3b:e6:1b:12:fc:00:45:ff:
a6:1c:c4:b6:aa:20:5e:b0:f1:6b:8d:fb:81:7f:df:01:1b:11:
0e:d9:a7:2e:28:2b:fd:f0:7d:76:a2:17:23:99:fb:b5:c3:19:
e4:9e:66:b5:3a:59:78:ce:04:60:e6:fa:a5:34:74:42:45:f0:
5d:3b:eb:46:98:cb:72:f7:01:f1:bc:44:ba:d9:96:63:ca:10:
93:1e:a3:84:1c:68:10:9e:e5:ce:c5:4c:18:02:69:b2:57:2c:
d1:e1:6a:31:33:8b:ab:41:05:0f:d4:a4:06:78:3b:0e:75:9e:
42:77:41:45:3f:f1:f3:5a:f0:12:64:7e:51:31:01:3e:c4:80:
8f:59:db:db:5a:35:a2:aa:be:fe:e8:b0:50:15:a5:b1:6a:dc:
28:2f:3d:60:ff:a3:fc:c3:8b:06:9b:26:59:19:f1:ed:92:20:
79:5e:51:57:71:eb:c1:9f:a5:f8:ba:c8:30:04:0b:d3:f3:26:
e1:9e:1f:83:d1:17:4c:46:37:41:c3:14:b3:e5:76:ce:8b:ef:
54:0c:42:2f:8e:8a:07:76:bc:58:51:02:f8:b9:e5:d3:63:a9:
04:12:d7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:27:46 2026 by rpki-client