Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
File: CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft (raw, json)
Hash identifier: og9rXCeEL7JXgo8FrzaWIx5rI7mwDpsmC06Od1l2DwQ=
Subject key identifier: 60:4E:18:01:ED:01:52:5A:E1:60:F1:56:CA:40:57:58:1E:5B:F0:C8
Authority key identifier: 08:5F:B6:DF:21:05:F2:C0:81:57:86:24:D1:87:31:43:9F:06:F2:6B
Certificate issuer: /CN=085fb6df2105f2c081578624d18731439f06f26b
Certificate serial: 019E1C46FD173DA5C7B0E4A588F06FD6982B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
Manifest number: 0138
Signing time: Tue 12 May 2026 13:01:14 +0000
Manifest this update: Tue 12 May 2026 13:01:14 +0000
Manifest next update: Wed 13 May 2026 13:01:14 +0000
Files and hashes: 1: 3Xscd_ZJOuzIHPLw7rwpxL3jTXA.roa (hash: YmDdfUHRtmrSE+rbUcYGzhhvi5z3wkkQ1u00RCAfcEw=)
2: CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl (hash: aclo2uZ8hdLmxFZfnGpGCUM8fMVjPWJR7Ax8yff8CDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:fd:17:3d:a5:c7:b0:e4:a5:88:f0:6f:d6:98:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085fb6df2105f2c081578624d18731439f06f26b
Validity
Not Before: May 12 13:01:14 2026 GMT
Not After : May 13 13:01:14 2026 GMT
Subject: CN=604e1801ed01525ae160f156ca4057581e5bf0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0d:7d:9d:ef:7b:71:ce:c1:70:2a:1d:28:2b:
07:90:df:75:ee:5b:47:3c:6c:cd:02:61:12:07:66:
f7:9b:68:d2:a6:5e:f4:09:03:c8:90:c1:10:dd:3d:
0e:bb:60:d7:af:30:73:8d:1a:e3:63:c4:9f:6f:eb:
dc:33:bd:85:9d:70:cb:b7:46:54:8b:2d:a2:64:f0:
3f:98:d1:2f:c3:ba:d0:78:1e:d8:10:36:2c:17:b9:
8d:7e:f1:bb:99:64:ba:8d:2e:81:27:da:62:ea:28:
99:60:c6:0c:fd:12:a6:41:83:e9:55:70:f2:63:10:
c1:90:52:46:bd:08:c9:da:a5:cc:6a:c4:e0:67:9f:
30:3e:b3:a3:ae:c2:0a:39:7b:b4:d5:12:5c:26:a9:
82:c9:1b:84:f6:af:71:66:b4:09:2f:12:7d:3a:ff:
cb:be:90:ac:52:8d:99:ed:0e:8f:81:60:ae:dd:03:
2e:59:5c:09:ad:82:e2:7b:78:2c:1c:03:bc:9b:08:
20:01:03:da:c9:37:52:b9:01:67:94:10:b6:a2:7c:
67:04:9d:21:75:62:90:ff:27:cc:8b:a6:ce:fa:55:
bb:e5:79:1e:ab:fd:98:d5:b7:45:92:f3:00:25:b0:
f1:b0:ff:37:b5:24:fc:ae:56:37:88:10:7d:a0:5f:
14:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4E:18:01:ED:01:52:5A:E1:60:F1:56:CA:40:57:58:1E:5B:F0:C8
X509v3 Authority Key Identifier:
keyid:08:5F:B6:DF:21:05:F2:C0:81:57:86:24:D1:87:31:43:9F:06:F2:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:eb:fa:d4:1b:f6:3c:62:08:5c:33:f3:31:43:24:29:15:7d:
06:f2:2e:8b:af:44:25:ad:bf:19:a5:9c:b6:9b:25:a1:05:c1:
df:63:60:0e:05:0e:1b:86:eb:6b:40:c2:81:c2:ad:03:fe:b0:
f5:4a:2c:85:17:76:db:f2:ea:95:44:5f:c0:68:7e:73:b4:26:
dd:ce:4f:7a:d0:bb:65:20:7b:cf:a9:e1:f6:90:70:ff:76:5d:
0b:91:0d:d5:2e:6e:95:d2:3a:da:f6:7d:3f:17:2e:7e:df:e9:
9a:a3:07:ce:9d:6b:93:85:cb:a2:62:dc:cd:11:3a:cb:6a:e2:
2b:40:ae:68:51:2c:21:0a:6f:d8:0a:62:fc:5d:cb:be:98:8d:
1f:62:8b:2f:b2:5d:a1:b7:05:6b:dd:10:f3:ca:49:36:d6:c5:
ee:8a:f1:dc:cc:da:09:9d:8a:b8:c5:1d:a1:6b:fc:d8:e1:eb:
98:5e:3d:62:2e:71:42:a3:b9:50:98:47:d8:78:68:ea:20:6e:
25:f7:f1:c3:f3:b9:1c:9b:45:03:01:9a:cd:81:36:17:ed:0a:
64:42:26:dd:62:d4:cd:69:af:57:cd:f7:8b:69:32:da:45:13:
e6:4d:89:ee:b0:75:a3:9d:6e:2a:26:39:6a:a7:eb:01:8c:a8:
e9:94:f4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:18 2026 by rpki-client