Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
File: CFr4G5nr9ILzxrU1Hiniii4gs5g.mft (raw, json)
Hash identifier: Z5DXaNA9MQ6auXn4SJKVYiAfLWq8A+rM2KR9D52cS+g=
Subject key identifier: 05:12:3B:E0:EB:07:E8:28:6D:A0:D3:83:EE:52:CE:21:D0:9D:8D:AE
Authority key identifier: 08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
Certificate issuer: /CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Certificate serial: 019D9AABACE0AEE7367F52A66F19CB7B01D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
Manifest number: 0671
Signing time: Fri 17 Apr 2026 09:00:35 +0000
Manifest this update: Fri 17 Apr 2026 09:00:35 +0000
Manifest next update: Sat 18 Apr 2026 09:00:35 +0000
Files and hashes: 1: 4PSqkbn4bMtBeCnSBAdphuD0N68.roa (hash: 7WdKS6f+17GrfB54aQeANA2RWiVlXakknw1q0Gpsn4w=)
2: CFr4G5nr9ILzxrU1Hiniii4gs5g.crl (hash: aO74Y60GDAGoQMNB+JP8mFWZVYBRuIL5jSAntQCmhR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:ac:e0:ae:e7:36:7f:52:a6:6f:19:cb:7b:01:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Validity
Not Before: Apr 17 09:00:35 2026 GMT
Not After : Apr 18 09:00:35 2026 GMT
Subject: CN=05123be0eb07e8286da0d383ee52ce21d09d8dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a5:33:d1:e7:be:c1:48:b4:96:d4:07:69:89:
98:ed:4b:d8:aa:11:e5:72:fa:ed:63:8c:ae:9d:9c:
c7:9e:e7:46:a7:4d:52:16:e9:25:a7:3b:33:45:00:
f3:dc:2a:cc:90:a3:26:ad:0f:b1:08:35:7b:33:9d:
95:77:ea:7d:4c:0b:b7:6b:14:20:5a:d5:ed:08:d2:
92:1b:85:8f:5f:0a:d5:46:4f:88:cd:bc:e6:53:22:
8b:bb:1f:8c:31:83:8e:2d:44:cb:24:fb:a9:89:a8:
52:0c:46:94:ad:8e:7c:27:f1:7e:90:35:dc:4b:d1:
33:90:82:5b:ec:1d:43:2a:46:5c:c6:2c:08:74:1b:
13:e8:f2:a4:06:38:68:c5:ec:ca:fb:0a:38:a0:5d:
24:f6:35:fc:0d:1b:9a:0f:72:f4:b8:31:3e:a7:63:
bc:d5:86:06:da:69:67:b8:75:58:b4:f1:33:78:ed:
2d:b0:a3:d4:c6:13:8e:e7:71:5a:14:6f:8d:75:07:
95:22:40:5b:3c:fb:ec:f2:e4:69:9e:a2:ab:76:92:
71:56:08:e3:0f:02:9f:cf:20:59:8f:82:a7:6b:24:
0e:ff:22:ba:2d:05:f8:b8:c3:54:25:c4:6b:53:8b:
14:08:09:e3:d0:69:64:35:32:f1:22:3c:ec:cc:9c:
d7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:12:3B:E0:EB:07:E8:28:6D:A0:D3:83:EE:52:CE:21:D0:9D:8D:AE
X509v3 Authority Key Identifier:
keyid:08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e4:5a:7f:8f:f4:fa:a1:45:89:64:f6:5a:9d:46:b2:38:b1:
b8:16:74:50:09:d2:78:d2:ac:b0:8f:ae:36:6b:2b:14:ce:0c:
0c:54:b8:c8:16:16:95:26:9b:c3:3a:4e:19:dc:0c:94:b0:5c:
96:cf:bd:6c:c1:14:9d:7d:b9:23:2b:7c:8d:b1:ea:09:3d:68:
7b:8b:43:3a:a8:6f:1c:1f:b6:50:8b:01:52:d9:2f:db:4c:d7:
b4:89:80:e3:be:af:bf:08:6b:e9:ad:ac:bd:b0:e8:63:58:45:
0a:c7:5d:b5:77:ef:68:b9:69:10:e6:fe:c8:f0:53:11:de:fc:
ce:34:f4:34:d2:78:4a:3a:7e:cb:5f:c6:48:86:da:87:3c:73:
10:33:42:5a:99:16:21:60:b9:79:e0:2f:72:e1:00:e5:a9:85:
a0:fd:5b:ae:61:1b:f2:46:68:fa:1d:68:b1:82:42:23:11:01:
89:c8:3d:64:7b:54:c4:b2:00:72:49:25:2c:42:27:0e:25:12:
98:a2:94:a2:26:18:40:95:82:f3:39:d9:6f:b1:8f:13:27:e8:
63:e5:0d:7e:b2:ec:d9:7a:7d:00:4d:bc:f3:70:90:ce:f3:72:
8c:12:31:a8:38:78:4d:53:f9:3d:f6:8d:00:f7:df:a3:65:74:
9c:e1:55:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:07:03 2026 by rpki-client