Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
File: CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft (raw, json)
Hash identifier: 5yC3KYjp0c6nOGFDrrm/lw3UVee/1gZU8rBjdQQt324=
Subject key identifier: 76:C6:69:9C:08:D4:50:63:40:62:3A:ED:9D:E6:A6:63:9E:83:D4:B4
Authority key identifier: 08:5F:B6:DF:21:05:F2:C0:81:57:86:24:D1:87:31:43:9F:06:F2:6B
Certificate issuer: /CN=085fb6df2105f2c081578624d18731439f06f26b
Certificate serial: 019D37F77FCC7C15C3905189A7ABA8468411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
Manifest number: C1
Signing time: Sun 29 Mar 2026 05:00:59 +0000
Manifest this update: Sun 29 Mar 2026 05:00:59 +0000
Manifest next update: Mon 30 Mar 2026 05:00:59 +0000
Files and hashes: 1: CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl (hash: MmIYj2z6DxK0j1F8yBgNBLbYS5cYaXbAiBU89Yb4ndQ=)
2: ZxK-eh5F5V5sCGHqmkMBiZx765A.roa (hash: Ltp1uKD3CaIpjzzV3gdzBJKlOckUmZmD0RcFdHDISsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:7f:cc:7c:15:c3:90:51:89:a7:ab:a8:46:84:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085fb6df2105f2c081578624d18731439f06f26b
Validity
Not Before: Mar 29 05:00:59 2026 GMT
Not After : Mar 30 05:00:59 2026 GMT
Subject: CN=76c6699c08d4506340623aed9de6a6639e83d4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:11:00:20:28:66:74:6d:9b:d9:bd:ac:00:56:
2f:0d:b2:84:99:66:f1:0a:53:7a:8a:83:3f:83:fb:
05:c4:ae:c9:11:73:48:65:13:ea:9b:41:85:e9:16:
ce:f2:45:b8:32:2b:98:94:51:1d:21:c7:f9:41:2f:
57:c6:8a:c7:b3:d6:1e:1d:ba:5d:04:b1:2a:59:0c:
5d:b4:fb:35:af:4a:51:ef:25:04:d2:d3:53:c8:04:
fc:5c:66:d9:54:b4:dc:df:7b:ef:91:2e:3d:eb:5e:
86:10:46:1d:0f:a5:ec:49:79:fa:21:c8:49:f9:3a:
90:64:4a:19:0b:36:80:28:49:de:18:f8:f7:26:80:
3a:a6:a5:65:e6:c3:e4:56:73:16:1f:80:4f:5c:01:
33:f6:75:e8:d9:08:ed:3b:fb:99:fa:a6:e3:15:d0:
5c:de:23:f1:d9:c6:d4:19:11:0d:0b:01:eb:95:bc:
8a:27:18:5e:3e:c8:d5:0c:fa:23:cf:28:e1:b6:23:
41:30:fb:bd:ac:2b:83:d7:3d:65:4d:17:c2:0a:2d:
c2:d9:02:c9:44:80:61:c9:72:3f:34:89:50:8f:4a:
9a:02:5a:bc:a7:44:47:3d:8e:51:ce:44:f0:dc:d8:
b0:4e:43:9f:77:cc:c0:7e:c1:4c:ee:c6:90:fc:a3:
1f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C6:69:9C:08:D4:50:63:40:62:3A:ED:9D:E6:A6:63:9E:83:D4:B4
X509v3 Authority Key Identifier:
keyid:08:5F:B6:DF:21:05:F2:C0:81:57:86:24:D1:87:31:43:9F:06:F2:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c6:3b:4d:84:5d:af:12:3b:85:04:25:f7:cf:c2:a7:72:3d:
35:46:1e:d0:68:cf:c6:f2:e3:8a:64:ac:a0:0f:fb:20:b9:e5:
6a:93:19:67:8b:7e:6d:31:be:0b:24:a2:d1:d3:a7:f1:37:76:
2e:59:a7:84:73:c4:ba:f9:41:2c:09:06:7b:a3:1e:bc:f8:bb:
f7:98:3f:1d:97:f5:1c:8c:24:ac:b6:8c:2c:e0:ff:76:47:00:
1c:50:2e:df:fd:60:2b:ae:b0:08:3e:0d:88:20:97:35:aa:c6:
bf:b4:94:75:5b:9e:37:45:7a:8a:86:46:1d:b3:90:7e:de:f0:
5f:46:61:63:1e:9e:00:cc:34:6a:0c:04:88:0d:b2:d1:9d:98:
e9:bc:d9:f3:fe:ba:df:a2:7f:d4:2d:92:1c:91:82:b3:94:62:
da:c7:55:07:97:98:54:e3:a9:f8:43:23:0a:df:f0:c3:70:71:
e9:0f:f9:ea:67:7f:dd:09:57:08:d1:0a:27:53:d5:97:b0:29:
0c:b6:fc:91:d1:05:14:fb:21:e0:e1:57:3b:3c:46:d7:12:4d:
19:e9:9d:76:67:84:72:5f:1a:30:18:ef:58:4a:f6:8f:b9:90:
26:a0:ad:a9:5b:66:48:f8:e0:c0:fa:5a:12:7b:df:18:9b:22:
70:9e:fa:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0393/MfBXDkFGJp6uoRoQRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NWZiNmRmMjEwNWYyYzA4MTU3ODYyNGQxODczMTQzOWYw
NmYyNmIwHhcNMjYwMzI5MDUwMDU5WhcNMjYwMzMwMDUwMDU5WjAzMTEwLwYDVQQD
Eyg3NmM2Njk5YzA4ZDQ1MDYzNDA2MjNhZWQ5ZGU2YTY2MzllODNkNGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hEAIChmdG2b2b2sAFYvDbKEmWbx
ClN6ioM/g/sFxK7JEXNIZRPqm0GF6RbO8kW4MiuYlFEdIcf5QS9XxorHs9YeHbpd
BLEqWQxdtPs1r0pR7yUE0tNTyAT8XGbZVLTc33vvkS49616GEEYdD6XsSXn6IchJ
+TqQZEoZCzaAKEneGPj3JoA6pqVl5sPkVnMWH4BPXAEz9nXo2QjtO/uZ+qbjFdBc
3iPx2cbUGRENCwHrlbyKJxhePsjVDPojzyjhtiNBMPu9rCuD1z1lTRfCCi3C2QLJ
RIBhyXI/NIlQj0qaAlq8p0RHPY5RzkTw3NiwTkOfd8zAfsFM7saQ/KMf8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbGaZwI1FBjQGI67Z3mpmOeg9S0MB8GA1UdIwQY
MBaAFAhftt8hBfLAgVeGJNGHMUOfBvJrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0YtMjN5RUY4c0NCVjRZazBZY3hRNThHOG1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iZDNlYjgtNDk2Ni00ZDU3LTk0NDAt
MTdmZTY1ODUwMTMyLzEvQ0YtMjN5RUY4c0NCVjRZazBZY3hRNThHOG1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9iZDNlYjgtNDk2Ni00ZDU3LTk0NDAtMTdmZTY1ODUwMTMy
LzEvQ0YtMjN5RUY4c0NCVjRZazBZY3hRNThHOG1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvMY7TYRd
rxI7hQQl98/Cp3I9NUYe0GjPxvLjimSsoA/7ILnlapMZZ4t+bTG+CySi0dOn8Td2
LlmnhHPEuvlBLAkGe6MevPi795g/HZf1HIwkrLaMLOD/dkcAHFAu3/1gK66wCD4N
iCCXNarGv7SUdVueN0V6ioZGHbOQft7wX0ZhYx6eAMw0agwEiA2y0Z2Y6bzZ8/66
36J/1C2SHJGCs5Ri2sdVB5eYVOOp+EMjCt/ww3Bx6Q/56md/3QlXCNEKJ1PVl7Ap
DLb8kdEFFPsh4OFXOzxG1xJNGemddmeEcl8aMBjvWEr2j7mQJqCtqVtmSPjgwPpa
EnvfGJsicJ76Gg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:13 2026 by rpki-client