Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
File: CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft (raw, json)
Hash identifier: A2eH9Mo74Rmjiw2aA+NCJuHMstfWlfTyNSEPjNHistg=
Subject key identifier: 2C:AE:14:BF:BB:CA:3F:B5:EA:CA:7D:09:0F:3E:94:05:64:E2:5E:82
Authority key identifier: 08:5F:B6:DF:21:05:F2:C0:81:57:86:24:D1:87:31:43:9F:06:F2:6B
Certificate issuer: /CN=085fb6df2105f2c081578624d18731439f06f26b
Certificate serial: 019F8F0FFD3C0A8C49CC3D15BB6A40E7FA4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
Manifest number: 01F8
Signing time: Thu 23 Jul 2026 13:00:17 +0000
Manifest this update: Thu 23 Jul 2026 13:00:17 +0000
Manifest next update: Fri 24 Jul 2026 13:00:17 +0000
Files and hashes: 1: 3Xscd_ZJOuzIHPLw7rwpxL3jTXA.roa (hash: YmDdfUHRtmrSE+rbUcYGzhhvi5z3wkkQ1u00RCAfcEw=)
2: CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl (hash: l7LlKAPchGLWT1eOi34EZpPo4WvcKJ0G35mjQEuBsw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:0f:fd:3c:0a:8c:49:cc:3d:15:bb:6a:40:e7:fa:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085fb6df2105f2c081578624d18731439f06f26b
Validity
Not Before: Jul 23 13:00:17 2026 GMT
Not After : Jul 24 13:00:17 2026 GMT
Subject: CN=2cae14bfbbca3fb5eaca7d090f3e940564e25e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:36:a4:bb:cf:1d:82:cd:ae:00:52:4d:dd:97:
50:ff:84:f4:8f:d2:f8:a3:06:61:7d:a3:3c:d9:0e:
71:e2:2f:98:bd:be:4c:c4:93:c8:10:08:ec:7b:a7:
1e:98:c6:e8:3a:4a:d2:53:2b:18:40:bc:f7:ef:d3:
b5:11:36:db:4a:39:19:64:ff:c1:7a:26:7c:75:e0:
f5:6f:f7:d4:02:49:b5:1b:1b:7a:00:d6:a5:70:55:
63:14:e1:41:49:30:aa:79:f7:b1:33:a1:ed:82:75:
2b:ab:95:69:92:de:db:9c:fb:a0:a2:47:52:f3:8e:
62:38:a4:fa:de:0c:ac:f3:b2:75:9a:d4:5a:5c:1d:
ed:4b:f3:7d:13:75:0b:e8:12:0e:e0:0f:8b:22:76:
a5:6a:28:bc:eb:7e:20:dc:09:bd:5a:86:a0:c2:2e:
cc:9b:9a:a8:e3:fa:a5:db:c8:85:7b:d1:bf:78:68:
6c:c2:3a:d2:d9:1a:76:d0:ab:d6:3c:1c:d4:9b:dd:
f0:00:f2:0f:b8:58:61:ba:62:f7:db:50:ae:fc:19:
ed:8a:0d:24:34:60:32:d1:4b:6e:63:48:60:14:69:
4e:5d:d3:5b:73:e6:df:24:da:83:b8:89:78:4c:a9:
f2:d0:9f:83:53:06:98:cb:fe:2d:3f:4a:fc:d2:05:
46:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AE:14:BF:BB:CA:3F:B5:EA:CA:7D:09:0F:3E:94:05:64:E2:5E:82
X509v3 Authority Key Identifier:
keyid:08:5F:B6:DF:21:05:F2:C0:81:57:86:24:D1:87:31:43:9F:06:F2:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:19:a0:1f:e2:00:67:d0:b6:c6:44:e8:1c:c0:5c:f2:1f:81:
ad:f1:a4:bb:0a:ec:29:3a:90:99:63:e6:42:59:29:4e:dd:9f:
3d:8a:a2:52:ca:2f:a4:78:84:0b:16:9f:47:22:f8:e9:6c:a2:
17:91:cc:31:34:cb:e1:91:03:5d:55:bb:17:b1:60:b4:fe:57:
e7:ae:80:8b:fa:5e:fc:07:d8:0a:d4:e4:f8:86:48:f1:a5:2b:
b2:d6:47:29:66:7f:ff:fe:a3:06:55:61:85:e1:f3:61:ea:8a:
98:b5:fc:7e:2f:07:1f:6f:0e:64:a9:13:05:a1:d7:d7:4f:2d:
ee:f2:bd:3a:3e:d4:10:2e:d0:c4:98:9d:df:01:d9:3f:85:a8:
f2:01:d1:40:6e:61:94:39:c0:c9:ab:fa:8f:57:24:a5:32:fd:
46:0a:8c:24:b9:7d:9b:84:79:60:ad:71:26:dd:88:86:a1:47:
9d:c3:b6:c1:6c:7d:d8:7b:8b:9b:cc:1a:4e:24:5a:46:b6:50:
08:55:b8:bd:cb:10:bf:fa:12:66:31:34:ad:49:e0:0e:c8:45:
ca:c0:e1:e9:3d:3f:8a:f8:70:7d:0e:01:0c:29:b6:8c:ab:71:
e7:cf:73:3d:c6:1d:c0:d5:e3:f6:bf:0e:69:c6:1e:65:3e:46:
5b:50:36:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:30:19 2026 by rpki-client