Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
File: CFr4G5nr9ILzxrU1Hiniii4gs5g.mft (raw, json)
Hash identifier: 2UQZqKAAFTVbW9qi+keHVkqn/10+pabYdlk1p8EPMoQ=
Subject key identifier: EC:B1:5C:E3:E3:EE:27:B7:42:E5:E1:FE:54:C7:73:E5:12:1A:FF:5D
Authority key identifier: 08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
Certificate issuer: /CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Certificate serial: 019D3A1D0F76C40C72071BEFD510A9991EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
Manifest number: 063F
Signing time: Sun 29 Mar 2026 15:01:16 +0000
Manifest this update: Sun 29 Mar 2026 15:01:16 +0000
Manifest next update: Mon 30 Mar 2026 15:01:16 +0000
Files and hashes: 1: 4PSqkbn4bMtBeCnSBAdphuD0N68.roa (hash: 7WdKS6f+17GrfB54aQeANA2RWiVlXakknw1q0Gpsn4w=)
2: CFr4G5nr9ILzxrU1Hiniii4gs5g.crl (hash: SOlVP1zXSzUbpmbcOq/sm+NMtH5+Tzp0Gpm4T6/rULY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1d:0f:76:c4:0c:72:07:1b:ef:d5:10:a9:99:1e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Validity
Not Before: Mar 29 15:01:16 2026 GMT
Not After : Mar 30 15:01:16 2026 GMT
Subject: CN=ecb15ce3e3ee27b742e5e1fe54c773e5121aff5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8b:8c:8c:c0:33:92:e6:e2:13:b4:d5:d8:b0:
a7:bf:4a:94:8a:aa:14:90:5d:c2:ee:90:21:8d:96:
c9:ee:de:c7:ea:aa:3d:54:ee:16:fd:c2:f4:be:eb:
0a:87:fe:97:42:f0:08:76:cf:82:70:a9:3b:b2:e2:
a7:4f:a7:81:e2:fa:88:90:45:50:5e:b7:21:31:71:
47:af:c1:5f:3b:f0:6e:5c:11:4c:44:0f:0b:bc:e0:
9d:19:19:1e:7d:17:a5:7a:e0:e3:ce:e1:e9:a5:31:
40:cc:cc:2c:52:5a:51:19:f7:51:76:9d:f7:26:9c:
61:3b:48:22:26:1a:88:af:96:d0:c0:8f:53:36:42:
a0:64:41:68:fb:a0:3e:32:af:ec:7b:d4:69:73:dc:
72:55:68:58:e8:45:63:d4:3d:18:4a:7a:15:b2:d1:
bc:e2:f7:27:fc:e4:ea:ec:01:ba:3e:59:18:a4:83:
ba:39:08:11:e5:8a:bd:73:f9:40:b3:5f:6f:c6:bc:
84:3f:36:f2:1e:38:d3:98:10:0f:59:bd:f5:a4:8f:
0d:23:82:ea:f7:8f:7f:91:10:04:69:a4:f4:17:10:
89:4b:01:03:c9:51:70:12:13:34:22:c2:84:85:33:
8b:9e:c0:2b:df:57:5a:86:d9:3c:46:59:e6:11:58:
1a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B1:5C:E3:E3:EE:27:B7:42:E5:E1:FE:54:C7:73:E5:12:1A:FF:5D
X509v3 Authority Key Identifier:
keyid:08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:99:c6:7d:de:44:c4:9d:a9:35:e5:a7:6f:a3:b8:d9:a7:07:
3b:64:c4:dc:80:9e:c4:35:ff:a3:9b:58:c6:35:7c:4f:95:ce:
c0:43:c0:99:68:3e:03:87:62:cd:b7:55:1b:c1:b6:6a:72:8f:
3b:d7:f0:59:54:d9:8f:ac:61:b9:74:90:62:c1:98:9f:f6:f8:
94:8f:9a:6f:e8:f4:3c:34:ac:33:3a:cc:1d:7e:ca:8e:6e:e4:
fd:b8:d6:65:d6:0a:d7:b2:78:18:7d:bf:cc:0c:1e:4b:6d:7f:
f2:44:e5:46:58:37:48:75:17:99:51:e1:10:ba:84:77:01:97:
b4:bb:f2:d9:bc:e8:c3:af:af:4e:8f:3b:ae:9b:1c:bb:7c:d4:
f4:13:16:99:97:f5:a7:53:cc:95:60:a0:4c:d9:c9:cc:fe:86:
9b:01:d4:f3:a8:04:ae:70:c4:8e:77:2b:71:1a:70:3c:a0:72:
dd:bb:5c:b5:32:09:43:a0:ff:b4:80:c2:6c:7d:c9:cf:4b:bc:
43:44:03:3a:b4:66:d5:7b:97:01:4c:75:c7:1f:60:47:16:c8:
99:73:12:5f:34:d1:fb:2b:b9:e8:a5:30:ce:dd:82:9b:e8:0b:
63:15:2e:5a:43:6c:7c:21:c2:68:37:c6:a1:70:86:d7:ab:8d:
2a:2a:2f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:19 2026 by rpki-client