
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
File: CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft (raw, json)
Hash identifier: VzfWOqjxk2C5oWxyQedq0/i9sENe5FhAIZRyRzpF+78=
Subject key identifier: 82:D3:10:EC:1F:C9:6B:38:FC:4D:CE:DD:C8:97:AA:F9:DE:7D:B0:17
Authority key identifier: 08:5F:B6:DF:21:05:F2:C0:81:57:86:24:D1:87:31:43:9F:06:F2:6B
Certificate issuer: /CN=085fb6df2105f2c081578624d18731439f06f26b
Certificate serial: 019E9213D6D10FE92CB839B4D5202A6ED06A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
Manifest number: 0175
Signing time: Thu 04 Jun 2026 10:00:34 +0000
Manifest this update: Thu 04 Jun 2026 10:00:34 +0000
Manifest next update: Fri 05 Jun 2026 10:00:34 +0000
Files and hashes: 1: 3Xscd_ZJOuzIHPLw7rwpxL3jTXA.roa (hash: YmDdfUHRtmrSE+rbUcYGzhhvi5z3wkkQ1u00RCAfcEw=)
2: CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl (hash: TuPP8Yb45hJvBlRDoAnhVRgFG8dfhy61niBTOxIRJmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:13:d6:d1:0f:e9:2c:b8:39:b4:d5:20:2a:6e:d0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085fb6df2105f2c081578624d18731439f06f26b
Validity
Not Before: Jun 4 10:00:34 2026 GMT
Not After : Jun 5 10:00:34 2026 GMT
Subject: CN=82d310ec1fc96b38fc4dceddc897aaf9de7db017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:e3:f8:cc:94:c4:f7:d8:ba:14:3d:a2:9c:
b8:05:49:bc:41:5e:0d:cd:62:18:f5:c4:02:5f:90:
87:83:85:b3:2c:6e:c0:57:64:b5:7a:65:b0:08:7c:
ff:ef:66:75:12:9c:dc:89:51:d7:a2:b2:e0:ce:2e:
c5:74:de:4e:de:0a:aa:e0:39:ca:2d:ab:04:07:35:
73:bd:11:e8:c1:c1:42:2b:b1:3c:df:16:54:0b:77:
d0:24:9b:e7:b8:89:6a:77:6e:25:fe:22:53:2a:89:
f2:14:7a:bd:69:56:fc:e9:4e:41:4b:f8:8e:f6:c4:
51:23:55:a3:49:95:61:71:89:63:e8:c3:ec:64:93:
dd:4e:fc:f7:32:36:03:36:9e:e9:3e:47:14:30:54:
54:a8:ee:b5:62:76:12:61:b9:7b:64:f5:f0:ff:ba:
92:59:85:00:62:57:4c:e0:7a:9b:ae:81:99:ee:44:
df:be:b3:e7:80:a7:42:d2:0f:a8:71:bc:2d:cc:3b:
62:ab:ac:7d:ba:1a:fd:1d:58:ae:a4:d4:1e:bd:d1:
8d:b1:66:71:3f:07:41:15:14:5e:6b:41:40:7e:52:
19:0e:9c:4c:94:cc:9d:59:65:9f:84:d5:25:ba:d6:
3a:b4:c5:ab:1f:60:f3:c5:1c:c1:7c:2e:69:7c:55:
d5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D3:10:EC:1F:C9:6B:38:FC:4D:CE:DD:C8:97:AA:F9:DE:7D:B0:17
X509v3 Authority Key Identifier:
keyid:08:5F:B6:DF:21:05:F2:C0:81:57:86:24:D1:87:31:43:9F:06:F2:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cc:4b:49:73:56:e7:fd:71:a0:c3:9b:38:02:78:7f:a8:56:
46:6b:dc:5b:d4:c4:8b:a0:87:ef:39:c0:36:d3:e7:6c:c2:f5:
ad:a6:01:87:c5:89:3f:57:b6:f7:ad:e4:20:9f:dd:a9:22:d6:
e6:1d:97:f3:a4:da:9b:5e:dd:e4:57:f7:bb:fa:23:9a:d2:ef:
c4:b7:3f:0c:4a:65:a3:61:9c:85:6c:55:d5:f6:6b:9d:ff:97:
90:70:eb:03:6f:e4:92:95:80:9a:f8:d2:86:6c:ea:49:e2:c3:
da:6a:d4:44:b3:cd:82:f4:3b:c2:65:60:ee:31:08:dd:3d:ad:
fa:e6:11:d9:e4:01:13:03:9a:ad:2b:89:c1:0e:ac:90:28:fb:
81:60:50:5e:1c:50:a1:58:90:57:7d:6b:7e:88:02:46:d8:b4:
ce:73:65:13:fc:3a:32:6a:ff:f1:96:3b:aa:12:52:b4:65:e2:
bc:40:e3:8e:02:f4:b4:bb:55:4e:55:d4:39:12:74:5c:1e:ac:
76:58:b5:95:ae:1b:55:63:6b:32:1d:88:2f:c9:b4:30:ce:ad:
11:8a:50:1d:64:f5:ee:24:ab:31:58:49:13:ba:10:4d:00:70:
f5:ff:78:72:3f:6d:52:24:4f:ac:a5:98:87:1a:03:e8:bb:39:
1a:aa:2e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 17:16:04 2026 by rpki-client