Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
File: CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft (raw, json)
Hash identifier: nFqKABM2q3RC3jBXnoMpihUn2E4zmsmrc7AAwsViEOA=
Subject key identifier: D1:DC:8D:69:B8:F2:2D:98:80:C7:79:C2:18:1D:7E:04:08:D6:98:28
Authority key identifier: 08:5F:B6:DF:21:05:F2:C0:81:57:86:24:D1:87:31:43:9F:06:F2:6B
Certificate issuer: /CN=085fb6df2105f2c081578624d18731439f06f26b
Certificate serial: 019D322C17AA74C35E9086427ABC7FC7DC52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
Manifest number: BE
Signing time: Sat 28 Mar 2026 02:00:43 +0000
Manifest this update: Sat 28 Mar 2026 02:00:43 +0000
Manifest next update: Sun 29 Mar 2026 02:00:43 +0000
Files and hashes: 1: CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl (hash: ZjaDbtkpVpT0S+JMleeJtk6WHh4xO+nThvlxtSNXLuk=)
2: ZxK-eh5F5V5sCGHqmkMBiZx765A.roa (hash: Ltp1uKD3CaIpjzzV3gdzBJKlOckUmZmD0RcFdHDISsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:17:aa:74:c3:5e:90:86:42:7a:bc:7f:c7:dc:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085fb6df2105f2c081578624d18731439f06f26b
Validity
Not Before: Mar 28 02:00:43 2026 GMT
Not After : Mar 29 02:00:43 2026 GMT
Subject: CN=d1dc8d69b8f22d9880c779c2181d7e0408d69828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fa:99:cc:57:3d:15:7a:e9:d5:68:23:25:0f:
b0:df:d3:10:94:23:a4:95:ef:a8:b2:17:c1:29:0a:
18:47:96:f9:bf:fc:c0:5f:89:17:73:43:6f:88:39:
a5:bf:f3:21:d8:38:a5:af:bd:2a:44:9d:c7:52:12:
48:5d:83:94:2d:8e:12:10:be:7b:b6:65:03:4e:a8:
3d:18:c1:15:95:3e:1e:38:32:59:e7:37:7f:12:b7:
32:d6:1d:64:67:d2:e6:31:06:7c:33:3d:3f:c9:32:
d9:f3:be:ac:56:9b:a2:d3:6f:bc:5d:2e:78:0c:af:
70:79:31:4e:af:f5:26:11:4f:76:96:4f:9f:9a:a1:
23:bf:6d:9b:3a:ac:e8:a4:67:e0:3c:3f:b6:2a:17:
e3:ae:00:71:91:6e:80:c7:dd:85:91:76:92:e5:6d:
de:c7:6c:18:e5:45:3e:76:8a:06:e5:3e:70:55:fc:
2a:c8:c0:44:46:34:e4:dc:77:2f:e0:0e:76:8e:e8:
d1:a3:86:24:a6:2e:54:f3:06:b4:2c:06:e7:88:7f:
2e:1a:dd:03:e2:3a:68:e9:57:a9:a4:6c:4d:c1:0d:
bd:42:f8:8c:90:64:1a:b3:f5:53:92:38:cb:5c:f7:
79:55:63:95:63:a7:75:0e:80:32:dc:a5:4d:7f:b5:
b6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DC:8D:69:B8:F2:2D:98:80:C7:79:C2:18:1D:7E:04:08:D6:98:28
X509v3 Authority Key Identifier:
keyid:08:5F:B6:DF:21:05:F2:C0:81:57:86:24:D1:87:31:43:9F:06:F2:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:64:29:c3:23:a9:c6:3a:9b:69:4f:37:bc:09:17:ec:09:06:
84:ba:29:f1:ba:b6:83:59:2a:18:cb:1c:87:e5:b6:5b:30:3d:
69:37:4a:ee:df:a3:6d:cd:90:c8:2c:6e:9f:a5:8d:a4:95:3c:
51:67:3e:1b:4c:a0:ca:10:35:23:07:9b:ab:aa:cc:31:58:aa:
f9:d2:1b:71:af:09:36:88:cb:89:9f:59:6c:b5:2a:16:b8:18:
b9:d6:77:68:43:39:d7:4a:12:d1:6f:26:d3:cb:11:80:48:ae:
21:37:1d:c5:65:76:ac:ec:77:2d:65:a1:23:09:a8:dd:f5:9c:
e4:6d:ce:99:65:7e:50:7e:41:71:c4:59:da:65:32:91:85:4a:
8f:9d:56:e0:e9:ac:39:a1:06:19:b3:31:6d:37:35:02:d1:7c:
46:aa:3d:84:7d:fc:29:4e:a6:b7:2e:49:25:a4:a3:a5:3f:0f:
15:5b:96:a7:4c:fc:97:97:0f:de:1e:3d:48:64:4d:1f:f2:50:
e7:44:ee:ed:aa:36:87:3b:77:12:3e:df:1e:3d:aa:46:9f:0f:
06:04:91:26:1a:9e:19:18:84:73:0e:5e:fb:1d:63:f6:18:98:
66:8a:20:16:3f:56:61:fd:10:4a:7f:3b:a6:bb:f5:4f:12:88:
70:17:49:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:48:20 2026 by rpki-client