Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
File: CFr4G5nr9ILzxrU1Hiniii4gs5g.mft (raw, json)
Hash identifier: HSozAprnyKst/4x7JM62/qUsLu6u+lR60MGVt933sws=
Subject key identifier: 3E:3E:58:67:4B:58:99:7F:27:AF:55:1C:E3:B7:9C:24:CC:EB:57:98
Authority key identifier: 08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
Certificate issuer: /CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Certificate serial: 01A000CA4A1B3A8F6C4D784EECE3853CD3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
Manifest number: 07AF
Signing time: Fri 14 Aug 2026 15:00:52 +0000
Manifest this update: Fri 14 Aug 2026 15:00:52 +0000
Manifest next update: Sat 15 Aug 2026 15:00:52 +0000
Files and hashes: 1: 4PSqkbn4bMtBeCnSBAdphuD0N68.roa (hash: 7WdKS6f+17GrfB54aQeANA2RWiVlXakknw1q0Gpsn4w=)
2: CFr4G5nr9ILzxrU1Hiniii4gs5g.crl (hash: OWRZlUL/9SRMV3hWuz0D7euywdKXLZmnxHR6dfhk1aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:4a:1b:3a:8f:6c:4d:78:4e:ec:e3:85:3c:d3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Validity
Not Before: Aug 14 15:00:52 2026 GMT
Not After : Aug 15 15:00:52 2026 GMT
Subject: CN=3e3e58674b58997f27af551ce3b79c24cceb5798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:ff:24:2b:d8:33:63:3d:d0:ba:cf:56:4f:
a3:ec:d2:66:7e:6c:48:4b:7f:01:f7:55:4e:6b:24:
8e:05:89:ad:86:b6:57:46:f8:da:46:b1:ab:b0:43:
d8:2b:11:2c:a9:cd:37:c3:14:a0:b4:fa:61:70:dd:
44:4e:b0:10:11:9d:6a:b0:02:e7:a2:0b:f6:22:9d:
66:fc:4e:4c:31:74:6f:ce:01:aa:c5:90:f5:fd:41:
81:d6:db:3b:fd:3f:ca:8e:4f:11:21:77:28:ec:75:
ca:80:9f:c7:a1:8d:e5:b8:3a:88:ee:2c:d7:00:d6:
c0:14:83:ed:13:38:cf:80:69:99:6b:ea:1f:d3:c1:
4f:45:bc:eb:35:63:86:8b:e6:47:96:d9:89:af:53:
bc:21:93:cd:dd:9b:17:8b:bd:a8:38:a5:80:f4:16:
c8:4c:25:f4:21:e2:82:40:8d:54:37:47:b3:c8:e2:
4d:95:26:63:e6:1c:c5:1e:9b:77:77:8b:6a:15:d1:
ff:29:55:c1:5b:14:85:91:79:e1:46:08:7f:f6:1c:
9d:ac:63:0b:71:3e:27:8a:29:1b:b5:71:a0:25:1f:
db:bc:51:90:cb:de:ce:89:bb:9d:15:a8:96:db:50:
4a:00:35:20:7a:5d:d5:89:52:bc:d0:2b:5f:69:ff:
32:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3E:58:67:4B:58:99:7F:27:AF:55:1C:E3:B7:9C:24:CC:EB:57:98
X509v3 Authority Key Identifier:
keyid:08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:82:be:9c:09:ba:59:40:2f:20:6c:3d:4c:f4:68:b6:54:d9:
55:8c:82:6a:5b:09:2f:94:d6:47:ee:92:93:0c:6c:87:b5:49:
65:d3:d3:df:37:c7:4a:32:d2:b2:39:2f:0f:98:23:0f:af:42:
8a:f1:82:1d:f4:44:7c:76:da:43:17:61:fc:6b:8c:24:76:66:
c6:cf:2e:d9:c7:aa:06:f7:dd:2e:80:57:74:9b:04:f8:12:ae:
da:0d:75:d8:d0:5d:df:fd:c5:80:99:e7:23:d4:1c:86:22:2d:
89:6a:5c:58:9f:50:e8:f6:de:14:b4:ce:13:ef:ce:e0:28:f0:
9e:aa:0f:e6:99:e7:1f:1b:56:b7:98:65:7b:7a:68:7c:04:17:
70:b7:01:f3:af:fe:e3:06:41:cf:0d:8a:35:07:99:91:bf:fb:
f3:3b:0a:03:af:9e:0f:9b:25:6d:73:7c:63:05:e3:2c:7e:0b:
dd:58:20:8d:f9:e0:c8:07:6d:dc:6d:bd:9a:a0:3b:b2:01:6d:
ac:8c:f0:67:0a:46:da:e1:13:32:81:c5:3e:3d:2b:12:e6:ab:
8b:9f:4c:28:76:5d:a5:5c:d8:19:13:b4:c8:8a:d7:08:bf:c6:
5b:24:e7:40:81:58:74:42:1b:e0:c6:0f:dc:2c:0e:ee:23:7a:
d9:c7:f3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:34:42 2026 by rpki-client