Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
File: CFr4G5nr9ILzxrU1Hiniii4gs5g.mft (raw, json)
Hash identifier: aKrI5XBN7I0x13a4pb4QK6h1PBFDPNOnxaILQqEPcuQ=
Subject key identifier: 2E:3E:1B:F0:39:5A:C1:4B:54:1C:0B:7D:4E:63:BF:A9:05:14:33:89
Authority key identifier: 08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
Certificate issuer: /CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Certificate serial: 01A0C9A28BAEEC21FE0C73F43B7B15DFDCE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
Manifest number: 0817
Signing time: Tue 22 Sep 2026 15:01:07 +0000
Manifest this update: Tue 22 Sep 2026 15:01:07 +0000
Manifest next update: Wed 23 Sep 2026 15:01:07 +0000
Files and hashes: 1: 4PSqkbn4bMtBeCnSBAdphuD0N68.roa (hash: 7WdKS6f+17GrfB54aQeANA2RWiVlXakknw1q0Gpsn4w=)
2: CFr4G5nr9ILzxrU1Hiniii4gs5g.crl (hash: w/0+InXl7BtQipMyUGlAfE3nUzkeskDuTOSaT4SQyE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:8b:ae:ec:21:fe:0c:73:f4:3b:7b:15:df:dc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Validity
Not Before: Sep 22 15:01:07 2026 GMT
Not After : Sep 23 15:01:07 2026 GMT
Subject: CN=2e3e1bf0395ac14b541c0b7d4e63bfa905143389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ce:9c:1f:02:32:ac:dc:e7:60:41:2b:e8:46:
36:84:56:5f:4d:27:b3:70:92:bd:c3:a4:39:ae:ea:
f2:4d:d0:bb:05:47:95:da:19:6f:02:12:2e:e8:41:
26:79:23:5d:32:cf:e5:65:e5:e5:96:03:dc:66:0e:
65:55:a9:03:28:3a:53:17:f6:d6:27:85:e4:f3:4f:
82:26:80:f6:cd:ff:1c:43:36:1a:8e:d1:9f:27:f0:
54:d7:49:40:41:46:92:a7:79:5a:74:6e:0d:4a:57:
3c:7a:18:2c:c2:d4:0c:ed:d4:de:62:ab:2e:84:51:
aa:22:d8:4f:6d:54:df:f7:c9:6a:cc:74:c6:50:c3:
69:9f:1d:4e:5e:3e:2c:74:80:c6:82:94:e1:d6:2d:
07:2e:33:ae:65:19:a5:a0:10:00:7d:69:7e:97:1a:
1a:bd:9c:24:5e:70:c0:29:44:c7:cc:24:b2:fa:0a:
d4:89:4c:ce:5f:6d:8f:6a:a2:32:ff:60:e3:c0:59:
86:dc:f9:e3:58:7b:f3:d7:1b:0d:f6:c2:d2:0c:b6:
a0:65:a6:50:3a:f8:fe:c1:55:16:24:66:e5:f0:ed:
8f:fa:77:1f:b4:79:f9:d8:71:9a:a3:30:59:3a:9f:
f2:79:ce:f7:58:f5:6a:b0:33:60:cb:aa:73:5a:93:
39:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3E:1B:F0:39:5A:C1:4B:54:1C:0B:7D:4E:63:BF:A9:05:14:33:89
X509v3 Authority Key Identifier:
keyid:08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c8:61:6f:5b:42:6c:fa:56:9c:ed:73:5b:3d:ad:8d:44:c0:
ec:bd:7d:a6:4c:ae:eb:99:89:a5:9a:10:84:7d:ef:2a:db:47:
93:c7:06:03:b7:27:b6:5c:6d:9b:18:db:39:37:6a:a2:5e:4b:
80:c9:9c:28:26:1c:5a:8e:ff:a1:5f:08:09:96:6f:13:d2:71:
93:9d:51:f8:7e:c1:58:5b:9e:de:f2:e3:5d:4b:1a:6e:1b:c5:
f6:2a:56:c5:18:a4:1b:d4:e3:60:19:70:6c:e5:ce:88:78:e3:
4f:ca:23:bd:c8:0a:9c:20:cf:3c:83:36:3e:bf:39:74:89:ef:
f4:4b:ba:d2:31:1f:89:de:c0:21:32:ad:8a:49:53:53:51:3e:
2d:ec:8c:dc:5e:d1:0f:13:1a:63:55:ae:2b:27:02:79:ab:57:
ba:58:65:91:1c:d9:be:87:e2:fc:f3:79:3f:bc:41:23:0f:50:
64:ee:82:ff:95:13:96:f3:de:9f:5b:e5:b6:f3:76:b4:ca:09:
4f:5f:d5:63:22:46:d5:32:c6:f4:97:2d:82:a1:70:d1:a5:fd:
d5:f1:0d:74:3d:5a:6f:ff:44:ff:85:46:a2:bf:e7:79:5a:3e:
8f:e0:f2:29:62:90:19:21:0d:96:03:a5:b9:b1:f7:80:98:2b:
3e:96:ec:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:02:59 2026 by rpki-client