Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
File: CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json)
Hash identifier: dRMpGLxXG9MAVsbyCf9fGLA1y4zYKK3v7ZzF85QRZlA=
Subject key identifier: 79:11:8A:6A:3B:BA:01:32:F7:25:61:7A:47:34:AB:AF:C9:7A:8F:A1
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial: 019D25838EF5C9C4A50061522A7B8501BBA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
Manifest number: 1450
Signing time: Wed 25 Mar 2026 15:01:11 +0000
Manifest this update: Wed 25 Mar 2026 15:01:11 +0000
Manifest next update: Thu 26 Mar 2026 15:01:11 +0000
Files and hashes: 1: 1-0vVi4FHHAdgEAN-aAZqxiCjS0I.roa (hash: OTTvBLhkOcop4Nbi1DHyFcQk24Pft/t6CQKmbEUIG7Q=)
2: An2l5nFXJ60Dmnc7ytV8xeoA-4w.roa (hash: XripkKF1BDgNijV9Sww4y4Pa3QzTCZtDgL7y8YpoE00=)
3: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: CbiVPS4pL+1waz5r2SwrTgFfVaPSif6SXAX55O0riKY=)
4: DtNjMaX-knG3kL803vSueqhEdMU.roa (hash: D5yJVp5o771p+zwhuuRghzaJUbXhIq0JcefHW8i9ex0=)
5: aEg8pKYRLzgHoBTbcFWlM2bc9cY.roa (hash: /Iyi+dntnfLdprySjcri6ap8bjxvS/nEOkhR72Tr4I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:8e:f5:c9:c4:a5:00:61:52:2a:7b:85:01:bb:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Validity
Not Before: Mar 25 15:01:11 2026 GMT
Not After : Mar 26 15:01:11 2026 GMT
Subject: CN=79118a6a3bba0132f725617a4734abafc97a8fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f5:49:c1:93:88:b2:ef:7a:97:d0:69:42:e1:
ac:1e:bc:ee:2e:23:4f:5b:b6:39:f3:dd:cb:67:c7:
91:23:8f:0e:6c:c0:3f:7f:66:da:81:e7:38:f1:0d:
df:0b:f0:a7:56:41:cc:fb:44:b8:58:79:3f:1a:79:
ab:58:54:aa:19:19:cf:ec:2f:c7:89:c4:ae:35:98:
8e:95:e7:96:c8:94:55:72:d5:f8:b5:53:3b:93:98:
1f:21:12:b1:c5:f9:e6:61:8a:9f:90:cd:80:8b:dd:
0e:1f:0a:20:7c:39:68:9e:f4:17:e9:50:85:a4:68:
54:0c:80:eb:08:42:bc:0c:ab:42:a9:58:d6:10:3e:
a2:d4:a3:6d:b6:22:59:a9:3e:e2:b1:5b:b6:f0:41:
56:bf:7a:67:71:d1:4c:59:ff:a8:d1:30:da:42:d4:
b2:f4:d6:b9:ba:95:7e:7f:bd:ed:40:b4:eb:89:2a:
e5:73:29:41:b4:bd:4f:7e:05:07:af:78:06:98:a6:
1e:3f:2a:56:92:1c:72:18:ca:26:26:60:a1:ae:f9:
43:7f:b2:16:bf:68:ef:f6:58:60:1b:e8:1e:99:e4:
c0:9b:71:4e:c6:12:0b:d5:77:91:e3:12:a4:35:36:
65:61:e2:f5:6d:b7:9a:40:7a:74:e8:02:5c:ed:31:
52:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:11:8A:6A:3B:BA:01:32:F7:25:61:7A:47:34:AB:AF:C9:7A:8F:A1
X509v3 Authority Key Identifier:
keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7d:ba:7b:d5:df:bc:80:8f:b7:1a:49:60:60:d5:ac:4a:d3:
50:20:46:78:96:74:86:a0:32:68:f9:28:49:a4:95:d2:dc:d0:
6e:79:2c:2e:c9:fc:52:34:7c:29:cc:7b:6e:f7:a2:20:4f:9f:
42:d3:1d:56:19:2c:99:fe:99:2b:f3:8f:38:2e:81:da:e3:b9:
a6:d7:ed:62:b3:6b:5f:56:31:e5:e4:30:07:e1:34:54:e9:80:
b2:ac:f4:5f:cb:fb:f3:3f:44:04:60:57:64:10:87:4b:bc:d0:
0b:bd:3a:1b:e0:f6:dd:da:3e:3d:43:4c:cf:39:26:29:67:6c:
5c:8b:41:49:4a:4b:97:de:2a:1d:29:bf:d2:e3:37:01:46:af:
88:18:21:5b:95:73:32:fd:44:02:da:49:4a:b7:f9:cd:88:c0:
cf:a7:45:50:76:1f:ce:9e:85:08:ae:0f:b7:b3:cd:89:17:2f:
52:26:43:71:a7:e3:e4:5b:3a:bf:7b:cf:26:11:cd:f2:be:f2:
46:a4:16:46:a5:36:e3:58:6f:2e:92:f0:a8:d6:fd:c7:f5:f2:
03:c3:e3:35:4a:9e:bf:cd:8f:aa:4a:42:5b:9f:95:92:75:14:
ad:24:07:37:3e:61:48:01:b2:1b:73:95:97:06:4e:72:06:71:
ae:6b:e1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:18 2026 by rpki-client