Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
File: CFr4G5nr9ILzxrU1Hiniii4gs5g.mft (raw, json)
Hash identifier: fOEi08o5E+qu9tzrOpI3GKMJQrdhJjSEmWx6J4RyTTo=
Subject key identifier: AC:B3:87:38:52:8F:4E:6F:BF:95:B8:46:19:C0:78:F3:98:7F:05:D3
Authority key identifier: 08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
Certificate issuer: /CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Certificate serial: 019EC036975BA2CF6851DB135E7ECFD23C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
Manifest number: 0709
Signing time: Sat 13 Jun 2026 09:01:03 +0000
Manifest this update: Sat 13 Jun 2026 09:01:03 +0000
Manifest next update: Sun 14 Jun 2026 09:01:03 +0000
Files and hashes: 1: 4PSqkbn4bMtBeCnSBAdphuD0N68.roa (hash: 7WdKS6f+17GrfB54aQeANA2RWiVlXakknw1q0Gpsn4w=)
2: CFr4G5nr9ILzxrU1Hiniii4gs5g.crl (hash: aE2Nf7cpQxhuhe0LRWpLffnWX79wsJNDRMl3QAaqvOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:97:5b:a2:cf:68:51:db:13:5e:7e:cf:d2:3c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Validity
Not Before: Jun 13 09:01:03 2026 GMT
Not After : Jun 14 09:01:03 2026 GMT
Subject: CN=acb38738528f4e6fbf95b84619c078f3987f05d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f4:03:1e:e0:c1:2d:81:6e:3e:04:a8:36:d5:
12:71:90:ee:12:89:5f:26:96:c7:8f:44:14:91:27:
83:7e:a3:22:23:bc:fe:76:ee:b6:b6:11:c1:e4:33:
67:2d:ac:05:50:b1:be:57:48:7e:52:65:0d:8e:d2:
09:0f:db:04:1c:e3:bc:84:31:e5:e8:1b:69:72:fa:
81:c2:98:de:9c:9f:2f:61:e2:ca:f9:fe:56:76:e9:
e1:48:8a:8b:1e:1e:69:3d:17:88:ad:15:b6:8e:a3:
65:a6:c7:e1:6d:42:6e:d9:ba:c6:43:a1:11:15:47:
fe:a5:e9:24:6b:17:73:d4:3e:59:47:d1:9f:25:91:
bc:1c:99:fd:75:af:c3:03:a0:98:e5:fc:09:1a:5f:
c8:03:ef:22:d0:d4:2d:34:78:88:91:a2:af:9c:04:
93:20:2b:dd:d7:4f:e9:7d:44:32:9e:0f:00:82:3b:
18:40:9d:f4:5c:1e:fb:59:6e:06:50:fc:f9:a4:52:
fa:5c:d6:a2:61:fd:52:ad:6e:a0:40:ec:65:b0:ab:
15:8e:d2:aa:0f:13:4d:19:fa:d8:93:fb:33:f0:50:
dc:82:f3:70:69:4c:9a:98:d5:46:e5:f3:2b:9f:5c:
50:40:4b:ab:a8:0b:55:28:e6:30:c5:77:1d:1d:4b:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B3:87:38:52:8F:4E:6F:BF:95:B8:46:19:C0:78:F3:98:7F:05:D3
X509v3 Authority Key Identifier:
keyid:08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f0:ec:5d:df:e9:de:3e:39:c8:74:16:00:b7:7c:36:5f:25:
f6:5d:3d:9c:d8:5c:8d:53:3f:6b:d2:85:d9:4a:92:cd:de:41:
16:b1:a4:a1:9b:5f:60:e5:d1:81:67:50:93:44:42:83:98:28:
ce:82:a6:9a:a9:e0:3e:05:42:b9:93:5b:ba:72:63:57:9b:f5:
ba:2f:e2:37:1d:d6:11:01:19:8a:23:f3:52:88:2a:97:9d:1d:
53:13:ad:b7:8b:44:ec:1c:93:32:e5:fd:3d:af:b0:6e:c1:5a:
80:47:4b:9e:71:13:e0:4e:f9:72:66:66:8e:3f:aa:57:c1:ec:
3d:82:5d:78:7a:1f:3a:e0:a5:06:8d:e2:06:78:bd:fe:2e:3e:
97:94:ea:35:df:7e:2c:da:31:89:74:31:00:fe:27:b5:6c:3e:
d8:9b:a3:0d:96:ff:31:98:b7:50:61:7c:76:42:54:a7:8f:5b:
17:f5:6d:d9:ca:3b:e3:84:df:af:9a:da:73:46:70:08:19:b2:
65:9e:64:04:87:a6:33:59:8c:6c:c3:fa:b4:05:87:de:4c:c4:
37:1a:1a:50:da:d2:4e:e1:41:e9:76:1f:89:33:50:f2:10:1d:
2c:cf:9d:74:c2:48:b6:a5:1b:f9:a8:a1:ef:43:4f:86:8f:fc:
93:eb:50:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:34:31 2026 by rpki-client