Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
File: CFr4G5nr9ILzxrU1Hiniii4gs5g.mft (raw, json)
Hash identifier: wOz3mbl8J0DSo1rLEfZX2wYliMB16T09tojLx0HO6sg=
Subject key identifier: CB:73:EB:12:35:73:D7:7B:52:F3:DB:E9:1A:11:48:C1:6E:B5:B0:D6
Authority key identifier: 08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
Certificate issuer: /CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Certificate serial: 019F1153074B66B2C919FE7D1BDD8339EE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
Manifest number: 0733
Signing time: Mon 29 Jun 2026 03:01:21 +0000
Manifest this update: Mon 29 Jun 2026 03:01:21 +0000
Manifest next update: Tue 30 Jun 2026 03:01:21 +0000
Files and hashes: 1: 4PSqkbn4bMtBeCnSBAdphuD0N68.roa (hash: 7WdKS6f+17GrfB54aQeANA2RWiVlXakknw1q0Gpsn4w=)
2: CFr4G5nr9ILzxrU1Hiniii4gs5g.crl (hash: wDEVwCpK5mqXS1hLsDxVkaQnm/SPxvXPlAuUdGv6iOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:53:07:4b:66:b2:c9:19:fe:7d:1b:dd:83:39:ee:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Validity
Not Before: Jun 29 03:01:21 2026 GMT
Not After : Jun 30 03:01:21 2026 GMT
Subject: CN=cb73eb123573d77b52f3dbe91a1148c16eb5b0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:f3:a1:11:7b:46:72:a4:30:1a:79:0c:ab:
b0:23:3a:77:cf:83:56:81:33:45:df:93:bc:ad:36:
6b:2a:68:a9:95:bc:8b:7e:91:12:9c:01:af:13:34:
a0:e7:c5:12:b4:57:27:8d:6b:1a:dc:58:38:68:7c:
7d:b6:c2:9b:05:53:8f:43:85:b8:5e:bd:df:11:38:
3a:d7:ba:9e:cc:3c:9e:87:43:e4:2d:22:e5:d7:3f:
d1:80:b5:7d:d9:0e:4b:9f:a9:c8:1d:25:4c:9c:5c:
df:b8:c4:2d:30:ec:08:56:54:5e:1d:e3:8c:fe:f9:
f1:24:01:53:5f:02:b5:9f:c3:d7:b1:2c:48:d7:d4:
9c:e3:38:04:ed:c4:85:87:51:da:57:d0:97:b4:21:
4e:ca:28:7b:8c:ee:fb:3a:56:ff:5c:69:f6:10:08:
14:f7:d6:2f:0f:a4:35:58:bd:51:a5:5f:45:09:c9:
8b:64:67:77:bf:31:f4:83:4b:c4:76:8d:4a:ec:20:
7d:8f:b9:a1:81:01:14:ab:c4:92:b8:0d:07:ac:44:
cf:78:90:7e:15:d7:97:f8:32:1e:51:a6:91:dc:2c:
82:39:cd:49:67:9c:50:7e:4d:a4:a3:d5:0c:16:ac:
b7:c3:8c:15:56:f6:f2:af:69:83:aa:34:93:65:f4:
07:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:73:EB:12:35:73:D7:7B:52:F3:DB:E9:1A:11:48:C1:6E:B5:B0:D6
X509v3 Authority Key Identifier:
keyid:08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2b:22:8f:6d:e8:04:3c:e2:80:58:2d:c6:a1:27:2b:51:c2:
db:52:74:ee:c3:85:0d:e4:f6:7d:61:10:91:99:2c:23:cd:6c:
02:07:89:5a:f0:88:7b:f2:b4:40:f9:c9:33:28:34:dd:48:48:
da:97:69:e2:76:ce:f4:06:da:a2:63:f2:19:4a:4c:90:5e:76:
1c:74:c2:61:70:72:d7:a2:ad:10:f3:6b:b7:62:d1:04:f8:44:
6f:42:29:d6:a4:b1:88:71:79:ae:48:a5:f6:ff:9f:57:fe:54:
a5:36:28:c8:ad:0a:dd:a5:86:5e:c4:f9:f2:b0:ce:be:e3:de:
43:96:90:13:8f:2c:28:9e:5d:ef:0c:5b:d0:c5:9b:ae:20:54:
30:a3:f5:31:d4:2a:b1:09:f2:63:6e:98:54:8e:3f:67:4f:93:
e1:8c:c5:9f:66:98:79:4b:ac:6a:39:da:89:9c:1f:9d:2d:b8:
f3:ea:22:a4:1e:ef:d6:2c:cd:d1:63:9c:66:9d:27:10:b5:3f:
01:f7:db:15:d9:12:ff:3d:b9:15:50:70:0b:ae:a2:2a:41:9f:
37:91:68:b6:44:aa:68:56:d2:5c:86:12:25:57:a0:0a:98:2c:
05:f7:58:e8:68:89:61:fc:64:2c:d5:e4:4b:4c:87:45:4b:11:
d7:f8:d9:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RUwdLZrLJGf59G92DOe4JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NWFmODFiOTllYmY0ODJmM2M2YjUzNTFlMjllMjhhMmUy
MGIzOTgwHhcNMjYwNjI5MDMwMTIxWhcNMjYwNjMwMDMwMTIxWjAzMTEwLwYDVQQD
EyhjYjczZWIxMjM1NzNkNzdiNTJmM2RiZTkxYTExNDhjMTZlYjViMGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9rzoRF7RnKkMBp5DKuwIzp3z4NW
gTNF35O8rTZrKmiplbyLfpESnAGvEzSg58UStFcnjWsa3Fg4aHx9tsKbBVOPQ4W4
Xr3fETg617qezDyeh0PkLSLl1z/RgLV92Q5Ln6nIHSVMnFzfuMQtMOwIVlReHeOM
/vnxJAFTXwK1n8PXsSxI19Sc4zgE7cSFh1HaV9CXtCFOyih7jO77Olb/XGn2EAgU
99YvD6Q1WL1RpV9FCcmLZGd3vzH0g0vEdo1K7CB9j7mhgQEUq8SSuA0HrETPeJB+
FdeX+DIeUaaR3CyCOc1JZ5xQfk2ko9UMFqy3w4wVVvbyr2mDqjSTZfQHhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtz6xI1c9d7UvPb6RoRSMFutbDWMB8GA1UdIwQY
MBaAFAha+BuZ6/SC88a1NR4p4oouILOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wODQwZTktNzE5OS00ZTAzLTg0ZmQt
YzI4ZDE0YzdiNzMxLzEvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wODQwZTktNzE5OS00ZTAzLTg0ZmQtYzI4ZDE0YzdiNzMx
LzEvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVisij23o
BDzigFgtxqEnK1HC21J07sOFDeT2fWEQkZksI81sAgeJWvCIe/K0QPnJMyg03UhI
2pdp4nbO9AbaomPyGUpMkF52HHTCYXBy16KtEPNrt2LRBPhEb0Ip1qSxiHF5rkil
9v+fV/5UpTYoyK0K3aWGXsT58rDOvuPeQ5aQE48sKJ5d7wxb0MWbriBUMKP1MdQq
sQnyY26YVI4/Z0+T4YzFn2aYeUusajnaiZwfnS248+oipB7v1izN0WOcZp0nELU/
AffbFdkS/z25FVBwC66iKkGfN5FotkSqaFbSXIYSJVegCpgsBfdY6GiJYfxkLNXk
S0yHRUsR1/jZnA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 12:29:47 2026 by rpki-client