Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
File: CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft (raw, json)
Hash identifier: hIZazYdDKU2q9+PcXWQCgj+JXruJ1O1GHHB7jXTxgGc=
Subject key identifier: 51:89:FC:A9:4C:24:19:F4:58:DB:7D:9B:EE:CA:E6:B9:CE:B0:A3:A5
Authority key identifier: 08:5F:B6:DF:21:05:F2:C0:81:57:86:24:D1:87:31:43:9F:06:F2:6B
Certificate issuer: /CN=085fb6df2105f2c081578624d18731439f06f26b
Certificate serial: 019F85690AB6AD70E090E26027D60BE3100C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
Manifest number: 01F3
Signing time: Tue 21 Jul 2026 16:01:21 +0000
Manifest this update: Tue 21 Jul 2026 16:01:21 +0000
Manifest next update: Wed 22 Jul 2026 16:01:21 +0000
Files and hashes: 1: 3Xscd_ZJOuzIHPLw7rwpxL3jTXA.roa (hash: YmDdfUHRtmrSE+rbUcYGzhhvi5z3wkkQ1u00RCAfcEw=)
2: CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl (hash: QB4cLope/IydHkLZ8IUcIEURgK9PDNoa1+NBQ9lj9Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:69:0a:b6:ad:70:e0:90:e2:60:27:d6:0b:e3:10:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085fb6df2105f2c081578624d18731439f06f26b
Validity
Not Before: Jul 21 16:01:21 2026 GMT
Not After : Jul 22 16:01:21 2026 GMT
Subject: CN=5189fca94c2419f458db7d9beecae6b9ceb0a3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:df:03:a2:c0:67:c1:c9:6f:29:0e:24:4d:
5e:7b:c1:60:8c:00:a8:83:bd:c2:5f:65:d0:89:47:
1b:b8:27:58:4e:a8:c5:59:6b:b2:89:5b:b5:0c:39:
ac:fb:fb:6f:47:7a:e9:8b:6b:f2:b0:fe:3b:fb:80:
74:fd:81:79:60:bc:d5:40:c4:13:ec:c8:fd:bd:da:
ab:29:ee:69:ec:f1:a6:29:df:5d:12:81:12:ab:6b:
59:77:ab:8c:c0:74:f5:17:29:e3:39:8b:4f:d0:1c:
ca:04:43:47:e5:5f:cf:4d:47:3e:23:ac:56:67:24:
7f:4b:2a:6c:9c:84:70:f1:dc:80:0f:26:f5:78:63:
11:4d:75:d8:ff:ae:3e:81:50:24:37:2c:1d:6f:6b:
59:c3:d5:9c:d0:d0:49:89:a9:0e:4d:4f:e9:3b:72:
2f:53:24:57:09:44:2b:61:95:b6:5c:33:81:b6:3d:
2a:89:73:26:50:3f:2a:68:79:aa:02:da:b0:62:17:
b7:d0:fc:5b:ac:45:56:9c:fc:f7:62:95:07:83:25:
1b:7d:3a:05:f3:a9:0a:de:2a:3f:bf:63:c2:1d:4c:
d6:4d:e7:ff:58:f9:34:a4:a8:70:ff:cd:bb:4a:f7:
57:9c:24:98:fb:b4:6c:c5:db:b5:b1:d8:0c:74:1c:
69:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:89:FC:A9:4C:24:19:F4:58:DB:7D:9B:EE:CA:E6:B9:CE:B0:A3:A5
X509v3 Authority Key Identifier:
keyid:08:5F:B6:DF:21:05:F2:C0:81:57:86:24:D1:87:31:43:9F:06:F2:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3a:f2:fc:46:76:7a:70:b5:f7:8c:b4:58:f8:cd:27:94:8e:
2a:c1:44:b7:94:c1:1f:4e:f5:b9:0f:62:94:f9:43:7b:4c:a9:
eb:ca:dd:15:b2:46:b2:ca:ea:24:5e:6e:db:8c:b8:07:1b:11:
bb:4d:bd:19:fb:39:3d:12:b9:7d:4c:28:96:b9:38:0a:ce:56:
28:a8:5d:07:86:54:77:e5:02:9e:e8:7a:c2:37:59:76:f6:8c:
09:e3:c9:65:af:2e:39:02:46:6c:08:3e:76:17:ad:a9:5d:e5:
99:1c:10:39:1f:c6:bd:f3:57:66:18:54:6f:83:da:1b:a2:5f:
1e:e0:3c:eb:9f:b0:1e:c1:ce:a6:54:5f:85:4f:d5:79:d0:38:
f0:a3:ca:51:a2:b3:33:d7:e7:7f:51:52:3f:3f:15:3b:18:84:
37:45:79:e3:b8:30:2c:df:14:d3:3e:88:6e:49:54:49:29:67:
27:35:60:d6:0f:cf:d3:b5:73:32:95:da:89:a5:73:d8:e1:fc:
71:54:2e:b3:94:62:71:38:e6:a5:9e:03:50:9c:71:77:a7:54:
4b:85:94:a9:52:a3:9a:7a:cd:3c:66:62:1d:ce:74:d2:1e:dd:
9a:de:ce:35:25:5c:f7:1c:9e:32:db:34:3f:41:72:bf:66:02:
de:7f:89:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:46:59 2026 by rpki-client