Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
File: CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json)
Hash identifier: bQaCqaaV5iOVNGyR871dAYiTRZO/2FomCYyAoAmenh8=
Subject key identifier: A0:88:41:48:33:3E:34:49:AD:00:BF:FC:09:43:73:38:52:5A:0F:8A
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial: 01A0CA46A1225DD52CADC40BBE0E57424DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
Manifest number: 1633
Signing time: Tue 22 Sep 2026 18:00:21 +0000
Manifest this update: Tue 22 Sep 2026 18:00:21 +0000
Manifest next update: Wed 23 Sep 2026 18:00:21 +0000
Files and hashes: 1: 1-0vVi4FHHAdgEAN-aAZqxiCjS0I.roa (hash: OTTvBLhkOcop4Nbi1DHyFcQk24Pft/t6CQKmbEUIG7Q=)
2: An2l5nFXJ60Dmnc7ytV8xeoA-4w.roa (hash: XripkKF1BDgNijV9Sww4y4Pa3QzTCZtDgL7y8YpoE00=)
3: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: 7ZWIAsfUxl2eocF+qHpafMBKZg6mnxnpyJPwbUxN5CQ=)
4: DtNjMaX-knG3kL803vSueqhEdMU.roa (hash: D5yJVp5o771p+zwhuuRghzaJUbXhIq0JcefHW8i9ex0=)
5: aEg8pKYRLzgHoBTbcFWlM2bc9cY.roa (hash: /Iyi+dntnfLdprySjcri6ap8bjxvS/nEOkhR72Tr4I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:a1:22:5d:d5:2c:ad:c4:0b:be:0e:57:42:4d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Validity
Not Before: Sep 22 18:00:21 2026 GMT
Not After : Sep 23 18:00:21 2026 GMT
Subject: CN=a0884148333e3449ad00bffc09437338525a0f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:14:b3:35:63:9b:3a:d6:27:93:71:d0:75:47:
1a:52:19:1a:7b:90:82:38:07:0c:b7:e1:59:7b:77:
e4:31:7b:72:f8:4d:64:23:52:24:7f:e8:5b:a9:22:
b6:03:24:47:cf:17:38:1e:20:6d:6f:4f:51:e2:65:
6b:2e:62:75:69:88:a2:97:e6:0e:09:99:98:97:5e:
32:a3:6f:dd:b6:e8:40:57:aa:3d:f9:bf:8b:56:4d:
33:d2:00:bf:60:b1:f2:33:b8:98:51:cd:a3:be:23:
ca:3c:1d:d0:49:36:55:1c:f0:79:e7:b2:76:7e:d8:
20:b8:ac:00:0e:ba:8a:b6:3a:94:91:0d:3c:65:59:
94:03:0f:ea:95:e5:1b:00:ef:60:09:76:81:e7:75:
32:43:bd:0f:5e:18:68:0b:39:39:91:0e:cb:81:57:
21:27:a9:a2:a6:cb:36:d4:39:d0:d9:73:19:43:97:
06:3e:a0:b1:5a:e1:00:dd:1c:62:f9:6b:10:c2:d9:
c2:3a:91:8d:32:9f:54:03:4a:fd:5d:14:34:ae:ff:
03:63:09:4c:90:bd:7e:c4:0a:bf:7e:8b:1d:27:b6:
87:fa:e9:a5:b1:cc:aa:76:b8:83:4e:24:92:30:60:
2d:7d:2c:08:28:55:bb:20:10:ed:3c:07:bd:48:3e:
2a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:88:41:48:33:3E:34:49:AD:00:BF:FC:09:43:73:38:52:5A:0F:8A
X509v3 Authority Key Identifier:
keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1d:8c:ca:be:4f:a1:18:dc:cd:f8:d8:eb:10:d2:6f:29:77:
b3:68:7c:a8:83:45:2b:3d:2c:46:77:0e:01:bc:69:27:08:ac:
3e:22:32:33:42:41:fb:1c:8e:52:1b:68:5e:c4:db:40:8f:e0:
d3:4b:b1:27:4a:77:62:9c:05:21:a8:38:86:04:9c:95:f9:d7:
2d:80:32:e3:cf:5c:59:4c:b3:56:13:32:f9:e5:84:ff:40:48:
be:77:6c:28:c5:1f:61:77:5b:e8:c0:2d:d5:01:75:71:9d:8c:
fa:d4:d6:ab:fd:9c:e7:88:42:fe:e1:94:1d:9c:87:52:55:91:
09:84:df:ea:75:8e:06:51:f0:24:7e:14:57:f2:ba:30:49:2b:
62:ce:b2:40:fe:5b:b6:aa:2a:a3:34:5c:cf:cb:12:8d:cd:e1:
a1:32:40:3f:62:ae:10:b6:fd:e6:f6:b0:f2:84:2b:76:fb:a1:
ce:69:ca:97:db:50:d7:6d:8a:a4:70:0a:9a:8e:d3:f8:21:34:
5e:76:b6:b5:bc:59:9a:d8:80:0c:d9:94:9d:2c:e4:91:07:71:
bc:d4:26:f0:2d:16:a2:a9:2e:a8:45:cc:02:5d:d9:c8:4c:58:
0a:1c:06:95:87:9d:a7:0a:68:41:06:09:ed:f2:71:64:93:64:
d8:21:60:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKRqEiXdUsrcQLvg5XQk2kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZjBkY2NlYjc0ZjExODVhY2Q5N2FlZWFhYzI1ZGRhNWU5
YjA5MzYwHhcNMjYwOTIyMTgwMDIxWhcNMjYwOTIzMTgwMDIxWjAzMTEwLwYDVQQD
EyhhMDg4NDE0ODMzM2UzNDQ5YWQwMGJmZmMwOTQzNzMzODUyNWEwZjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RSzNWObOtYnk3HQdUcaUhkae5CC
OAcMt+FZe3fkMXty+E1kI1Ikf+hbqSK2AyRHzxc4HiBtb09R4mVrLmJ1aYiil+YO
CZmYl14yo2/dtuhAV6o9+b+LVk0z0gC/YLHyM7iYUc2jviPKPB3QSTZVHPB557J2
ftgguKwADrqKtjqUkQ08ZVmUAw/qleUbAO9gCXaB53UyQ70PXhhoCzk5kQ7LgVch
J6mipss21DnQ2XMZQ5cGPqCxWuEA3Rxi+WsQwtnCOpGNMp9UA0r9XRQ0rv8DYwlM
kL1+xAq/fosdJ7aH+umlscyqdriDTiSSMGAtfSwIKFW7IBDtPAe9SD4qEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCIQUgzPjRJrQC//AlDczhSWg+KMB8GA1UdIwQY
MBaAFAnw3M63TxGFrNl67qrCXdpemwk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgt
OTk2MTg5ZjljZTE0LzEvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgtOTk2MTg5ZjljZTE0
LzEvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADx2Myr5P
oRjczfjY6xDSbyl3s2h8qINFKz0sRncOAbxpJwisPiIyM0JB+xyOUhtoXsTbQI/g
00uxJ0p3YpwFIag4hgSclfnXLYAy489cWUyzVhMy+eWE/0BIvndsKMUfYXdb6MAt
1QF1cZ2M+tTWq/2c54hC/uGUHZyHUlWRCYTf6nWOBlHwJH4UV/K6MEkrYs6yQP5b
tqoqozRcz8sSjc3hoTJAP2KuELb95vaw8oQrdvuhzmnKl9tQ122KpHAKmo7T+CE0
Xna2tbxZmtiADNmUnSzkkQdxvNQm8C0WoqkuqEXMAl3ZyExYChwGlYedpwpoQQYJ
7fJxZJNk2CFgXA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 03:11:47 2026 by rpki-client