Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
File: CFr4G5nr9ILzxrU1Hiniii4gs5g.mft (raw, json)
Hash identifier: UcwfpuA/5kTCJuly85MD34Da+jbPUoCcxBX8oDIbgDk=
Subject key identifier: DE:55:B7:83:22:C4:F9:8A:9B:4E:45:28:82:E9:B5:22:57:9F:24:02
Authority key identifier: 08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
Certificate issuer: /CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Certificate serial: 01A0D34B38BA500C1359E11C8019B2C0755B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
Manifest number: 081C
Signing time: Thu 24 Sep 2026 12:01:57 +0000
Manifest this update: Thu 24 Sep 2026 12:01:57 +0000
Manifest next update: Fri 25 Sep 2026 12:01:57 +0000
Files and hashes: 1: 4PSqkbn4bMtBeCnSBAdphuD0N68.roa (hash: 7WdKS6f+17GrfB54aQeANA2RWiVlXakknw1q0Gpsn4w=)
2: CFr4G5nr9ILzxrU1Hiniii4gs5g.crl (hash: oie8zmb5L68/dEuj0rHbPEO50kUHNcSqwdZ7OLBZGpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4b:38:ba:50:0c:13:59:e1:1c:80:19:b2:c0:75:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Validity
Not Before: Sep 24 12:01:57 2026 GMT
Not After : Sep 25 12:01:57 2026 GMT
Subject: CN=de55b78322c4f98a9b4e452882e9b522579f2402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:8e:cd:f9:64:63:5b:3d:64:cc:52:89:20:
be:6d:63:ff:23:5d:6a:03:4e:c8:fd:c2:e5:d6:be:
46:e9:e0:7b:ff:3d:86:c5:83:54:72:7e:30:07:f9:
69:a6:80:18:70:46:46:11:60:0e:19:18:8f:70:b5:
59:d3:37:ec:af:80:cd:2d:91:64:ef:96:c7:ea:1d:
d0:11:c2:49:87:8d:48:90:c5:e3:63:81:5a:95:01:
52:c3:5a:a6:72:1d:b0:e1:db:21:19:22:d0:2e:e8:
5c:23:8e:d3:43:e7:70:49:3f:d6:58:bd:57:5c:ea:
b6:14:3a:e3:ca:68:6c:82:0d:f5:ec:b2:1b:10:b7:
59:5b:b4:fd:72:c4:0e:a0:07:85:4c:f0:7b:42:9c:
17:96:05:13:ad:f3:87:1f:f2:3b:a6:96:77:7e:f2:
aa:e7:45:c9:8e:d9:1a:39:89:68:d8:b5:d8:e4:81:
9b:9a:e8:58:e7:c5:66:b9:09:ff:c1:9c:a8:53:dd:
3b:cf:b7:87:ee:4c:72:23:0e:6c:a9:45:d5:8f:b7:
e9:06:0e:c8:e6:e1:c9:e9:cc:cd:de:a5:d1:30:c3:
25:5e:04:25:ed:b3:55:06:cd:1b:28:fa:13:d3:5b:
12:ed:7c:bd:ba:ab:ed:17:69:7a:5e:7a:8a:22:73:
c4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:55:B7:83:22:C4:F9:8A:9B:4E:45:28:82:E9:B5:22:57:9F:24:02
X509v3 Authority Key Identifier:
keyid:08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:bd:5b:3c:73:23:e5:46:76:c0:af:b2:57:cb:c7:25:d9:e9:
88:88:92:83:e0:ee:1f:bf:86:44:2a:12:0a:9a:50:d1:d7:92:
65:1d:fb:68:7e:ae:ce:2e:c4:a7:cf:60:a1:30:a0:50:73:6c:
89:d6:bd:da:61:8a:39:78:19:10:62:0f:ed:77:3b:a8:3d:c8:
d6:43:08:bd:25:46:56:d9:6d:09:2f:89:84:e1:85:47:a5:e4:
d3:0e:3f:76:bc:47:e9:81:02:24:ef:bf:1c:f3:f6:aa:6e:a6:
b0:23:85:70:45:6e:4e:65:eb:60:57:39:1c:d1:b0:9f:36:44:
35:bc:b2:80:56:20:a3:32:e7:9d:87:68:3a:ce:6c:ca:9c:29:
47:81:ea:a4:e7:0e:b0:53:4a:d3:e6:78:e1:5e:02:96:2b:d4:
56:66:df:65:bc:96:02:e6:fc:6e:81:a2:72:e2:8b:ce:bb:9e:
09:b3:23:0b:f3:3e:a4:54:a8:6c:cb:7d:c0:51:e2:9b:2e:13:
9d:c8:9c:25:db:14:b4:b1:05:0f:73:23:dd:e4:af:74:b9:c2:
e3:22:89:77:bf:85:8f:92:f1:2e:58:bc:46:ae:29:af:46:6a:
81:dc:35:2b:37:23:81:fa:6e:88:11:2f:44:3c:1c:5e:04:d3:
9a:72:d9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:19:19 2026 by rpki-client