Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
File: CFr4G5nr9ILzxrU1Hiniii4gs5g.mft (raw, json)
Hash identifier: j+1/I9CmBhJBa2n/pPR+o8EjtddKNR3EF7a4cWq93R8=
Subject key identifier: B7:9D:F0:3E:0F:3D:F0:A2:F5:59:3D:07:E3:BE:98:C5:D9:3B:50:B3
Authority key identifier: 08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
Certificate issuer: /CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Certificate serial: 01A13F709766D30A9BEF640486B238D784BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
Manifest number: 0854
Signing time: Thu 15 Oct 2026 12:01:45 +0000
Manifest this update: Thu 15 Oct 2026 12:01:45 +0000
Manifest next update: Fri 16 Oct 2026 12:01:45 +0000
Files and hashes: 1: 4PSqkbn4bMtBeCnSBAdphuD0N68.roa (hash: 7WdKS6f+17GrfB54aQeANA2RWiVlXakknw1q0Gpsn4w=)
2: CFr4G5nr9ILzxrU1Hiniii4gs5g.crl (hash: 8bdmJJZLo3I2++yjtSc1gKeW2VLVJTJrq/brtWANN6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:97:66:d3:0a:9b:ef:64:04:86:b2:38:d7:84:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Validity
Not Before: Oct 15 12:01:45 2026 GMT
Not After : Oct 16 12:01:45 2026 GMT
Subject: CN=b79df03e0f3df0a2f5593d07e3be98c5d93b50b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:79:df:04:b9:62:49:1b:09:92:0b:97:17:63:
0a:e9:c2:25:dc:0d:d8:11:8c:ca:7a:33:41:d5:57:
36:e4:6a:23:14:ad:da:90:34:4d:95:f3:f0:a8:2e:
b9:a6:92:b2:12:6f:20:7c:8e:83:68:c8:69:30:ff:
02:c3:21:80:8b:ba:c5:a5:88:c8:24:f0:f6:28:fe:
a3:dd:a4:ff:13:4a:51:1c:04:1a:46:05:5c:5c:d5:
47:22:e0:92:02:d0:c9:8a:da:00:99:a7:41:64:a8:
c8:55:6f:c7:c0:1d:2d:00:85:79:4b:39:f0:de:d5:
14:ec:9f:94:09:60:cc:0a:66:a2:c2:50:10:27:8d:
ca:94:7b:d1:48:81:d5:1b:82:51:78:70:4a:f8:23:
21:6c:9b:95:dd:eb:40:fe:0b:fc:f8:8e:99:7f:cd:
91:b3:20:e2:57:78:03:dd:8d:42:5c:36:42:6b:5f:
64:38:e5:0a:42:5d:93:db:c9:d1:7e:1d:5e:7e:2a:
fb:ed:a2:37:55:8d:fc:24:a1:b3:3e:49:21:92:e9:
70:f2:bd:08:84:f7:0f:a0:b2:6c:af:b8:83:89:18:
4c:ee:81:bb:11:a8:13:ae:7f:e1:2e:9b:6e:ea:0b:
a7:67:34:58:1a:06:36:c6:76:e7:94:6b:14:cf:a3:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9D:F0:3E:0F:3D:F0:A2:F5:59:3D:07:E3:BE:98:C5:D9:3B:50:B3
X509v3 Authority Key Identifier:
keyid:08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f0:b9:48:f9:ac:69:9c:3c:90:e3:21:f7:e4:92:15:55:d4:
11:1d:1c:b5:e8:6c:12:81:ed:96:68:7e:c0:b8:e9:d4:61:f2:
42:06:66:2c:a7:75:f9:e3:e6:fa:42:0b:a5:68:58:41:28:cc:
64:66:c2:d8:37:88:f0:b7:bb:68:4e:61:76:81:47:9b:ad:eb:
4a:ae:a6:fd:be:8d:16:82:31:4d:56:1d:80:c7:6f:28:7c:63:
90:f7:73:04:8f:b4:1f:48:9b:8c:8e:35:ec:3e:42:24:c7:71:
b0:ad:d8:08:fa:48:43:bb:88:3c:77:30:3f:11:ea:8a:95:88:
67:9d:ab:ee:0d:92:a9:0a:df:f9:32:9c:42:eb:c2:23:19:4a:
cd:36:d2:fc:68:3b:51:fb:05:5c:28:28:d2:d9:a9:eb:76:21:
83:73:cb:9b:8a:d8:ca:c2:e4:c0:f5:e4:9f:e8:68:ba:f4:5b:
9a:98:12:1b:e7:7c:1b:e4:ff:96:ca:79:73:c3:65:a4:9c:c0:
d3:28:06:0f:41:46:21:90:90:96:dc:f5:e7:88:5f:c7:c3:36:
6e:08:f2:93:01:4a:b3:a5:74:c5:53:8f:0a:fd:9e:44:95:69:
73:bf:27:7c:bb:3c:44:d3:f0:50:00:9f:e5:e6:f9:0d:a7:b6:
fe:83:e0:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/cJdm0wqb72QEhrI414S8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NWFmODFiOTllYmY0ODJmM2M2YjUzNTFlMjllMjhhMmUy
MGIzOTgwHhcNMjYxMDE1MTIwMTQ1WhcNMjYxMDE2MTIwMTQ1WjAzMTEwLwYDVQQD
EyhiNzlkZjAzZTBmM2RmMGEyZjU1OTNkMDdlM2JlOThjNWQ5M2I1MGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3nfBLliSRsJkguXF2MK6cIl3A3Y
EYzKejNB1Vc25GojFK3akDRNlfPwqC65ppKyEm8gfI6DaMhpMP8CwyGAi7rFpYjI
JPD2KP6j3aT/E0pRHAQaRgVcXNVHIuCSAtDJitoAmadBZKjIVW/HwB0tAIV5Sznw
3tUU7J+UCWDMCmaiwlAQJ43KlHvRSIHVG4JReHBK+CMhbJuV3etA/gv8+I6Zf82R
syDiV3gD3Y1CXDZCa19kOOUKQl2T28nRfh1efir77aI3VY38JKGzPkkhkulw8r0I
hPcPoLJsr7iDiRhM7oG7EagTrn/hLptu6gunZzRYGgY2xnbnlGsUz6OakwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLed8D4PPfCi9Vk9B+O+mMXZO1CzMB8GA1UdIwQY
MBaAFAha+BuZ6/SC88a1NR4p4oouILOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wODQwZTktNzE5OS00ZTAzLTg0ZmQt
YzI4ZDE0YzdiNzMxLzEvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wODQwZTktNzE5OS00ZTAzLTg0ZmQtYzI4ZDE0YzdiNzMx
LzEvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/C5SPms
aZw8kOMh9+SSFVXUER0ctehsEoHtlmh+wLjp1GHyQgZmLKd1+ePm+kILpWhYQSjM
ZGbC2DeI8Le7aE5hdoFHm63rSq6m/b6NFoIxTVYdgMdvKHxjkPdzBI+0H0ibjI41
7D5CJMdxsK3YCPpIQ7uIPHcwPxHqipWIZ52r7g2SqQrf+TKcQuvCIxlKzTbS/Gg7
UfsFXCgo0tmp63Yhg3PLm4rYysLkwPXkn+houvRbmpgSG+d8G+T/lsp5c8NlpJzA
0ygGD0FGIZCQltz154hfx8M2bgjykwFKs6V0xVOPCv2eRJVpc78nfLs8RNPwUACf
5eb5Dae2/oPgKQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:24:15 2026 by rpki-client