Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
File: CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft (raw, json)
Hash identifier: MIDI7OhqgXU0Rci/hZBsGyshmk6VM5wsfe8I1LI0F6w=
Subject key identifier: DF:41:F9:4B:59:2A:A3:8B:36:9E:06:DF:E1:AF:91:DF:DB:2D:09:C8
Authority key identifier: 08:5F:B6:DF:21:05:F2:C0:81:57:86:24:D1:87:31:43:9F:06:F2:6B
Certificate issuer: /CN=085fb6df2105f2c081578624d18731439f06f26b
Certificate serial: 01A11AF5690E8B1559A1881E3E35E2DF3C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
Manifest number: 02C5
Signing time: Thu 08 Oct 2026 10:00:53 +0000
Manifest this update: Thu 08 Oct 2026 10:00:53 +0000
Manifest next update: Fri 09 Oct 2026 10:00:53 +0000
Files and hashes: 1: 3Xscd_ZJOuzIHPLw7rwpxL3jTXA.roa (hash: YmDdfUHRtmrSE+rbUcYGzhhvi5z3wkkQ1u00RCAfcEw=)
2: CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl (hash: cssNRvfjdDbEf/A5l1se5grS5Dfqlw1ut0UOiB/rzDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f5:69:0e:8b:15:59:a1:88:1e:3e:35:e2:df:3c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085fb6df2105f2c081578624d18731439f06f26b
Validity
Not Before: Oct 8 10:00:53 2026 GMT
Not After : Oct 9 10:00:53 2026 GMT
Subject: CN=df41f94b592aa38b369e06dfe1af91dfdb2d09c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:c7:be:33:25:fd:9a:c3:fc:e4:ab:c2:17:
c7:7a:e6:c6:b7:6d:68:19:11:c1:67:36:60:d2:ef:
ce:90:e7:40:50:48:29:3c:c7:89:15:9d:4c:31:8e:
98:ae:02:ca:61:0e:9e:9a:ba:c3:26:f1:75:a1:1c:
05:66:70:45:8a:4a:1b:ba:76:dc:ed:e7:3d:66:c5:
00:5d:b2:47:c2:29:2e:5e:ed:ba:d1:5f:7e:a6:1b:
c9:f5:9d:46:2d:78:78:78:b8:5b:7f:c2:5c:37:52:
ca:75:de:81:2f:3c:9b:14:88:f0:2d:18:7d:9b:61:
a8:d7:43:e1:c8:32:fc:ba:a4:6f:1f:e1:9f:e9:ff:
6f:84:ae:4b:f0:aa:52:eb:63:57:21:33:9c:9b:47:
13:63:c7:be:47:ec:8d:1e:4e:7e:94:4e:c8:3d:c8:
33:f0:24:98:95:3d:3b:50:1f:74:e6:c7:06:46:d5:
ca:e3:07:91:24:25:0a:14:a7:af:24:d4:a4:44:f0:
b0:37:ca:dd:8c:c2:f7:01:7a:de:b2:f1:cb:21:d4:
24:0a:73:e2:a4:43:81:7e:ce:2c:6f:f5:a5:09:d2:
68:25:47:4a:15:62:a1:79:5a:38:f3:eb:ee:0b:ef:
3c:ed:e1:3d:14:3d:c4:85:67:86:11:da:a8:66:5a:
58:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:41:F9:4B:59:2A:A3:8B:36:9E:06:DF:E1:AF:91:DF:DB:2D:09:C8
X509v3 Authority Key Identifier:
keyid:08:5F:B6:DF:21:05:F2:C0:81:57:86:24:D1:87:31:43:9F:06:F2:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:50:47:ae:af:70:c4:85:1f:5c:b3:34:02:ea:e0:63:98:49:
16:9b:47:1a:b2:c9:4b:a8:1d:0a:87:03:75:28:7d:5f:a2:5b:
4c:de:c0:a7:66:a2:81:03:3c:80:e6:54:48:f4:3e:7c:d1:ee:
1b:51:67:65:ad:7b:f6:58:38:ec:f2:aa:c6:54:34:b4:9c:d3:
52:bd:1f:2a:90:3e:bf:29:6e:60:10:4c:d7:6d:52:bf:8c:48:
f1:fc:f7:15:0b:76:8c:31:51:60:7d:41:54:31:b6:5b:20:66:
d8:7b:89:9c:f3:e8:19:bc:ac:d5:b2:3e:83:77:f9:6d:82:e6:
2a:54:93:59:43:45:48:34:65:b0:f4:c0:d4:19:25:e4:03:02:
44:2a:17:90:ce:8c:da:7e:d4:80:14:a5:6e:68:9e:39:6f:65:
6f:18:b9:14:e2:89:f0:51:9b:c9:1a:b8:cd:14:a1:b0:82:d2:
de:c4:61:5f:1d:05:51:ea:81:63:28:60:3b:35:4b:a1:51:db:
c8:44:b6:36:a1:04:ce:ff:d6:4b:7c:e8:e4:9f:c3:4d:7b:a2:
36:3b:b8:73:1f:8f:04:09:ae:08:28:49:fa:db:33:1b:31:bc:
2c:f7:da:f0:51:a6:7b:84:5b:6c:37:8a:6f:7e:04:c4:16:6f:
10:af:14:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:07:12 2026 by rpki-client