Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
File: CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft (raw, json)
Hash identifier: avBD1Ck5dkZERc/ICkbrMUGZ1bnSJQMG9ajT7dFNPxI=
Subject key identifier: 9C:B5:7A:3E:6C:42:3C:8A:75:F0:71:3E:10:D0:06:CF:3C:C1:9F:B3
Authority key identifier: 08:5F:B6:DF:21:05:F2:C0:81:57:86:24:D1:87:31:43:9F:06:F2:6B
Certificate issuer: /CN=085fb6df2105f2c081578624d18731439f06f26b
Certificate serial: 019ED3BDD17E20F3E2B53F5C3B3A3D38A2E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
Manifest number: 0197
Signing time: Wed 17 Jun 2026 04:01:32 +0000
Manifest this update: Wed 17 Jun 2026 04:01:32 +0000
Manifest next update: Thu 18 Jun 2026 04:01:32 +0000
Files and hashes: 1: 3Xscd_ZJOuzIHPLw7rwpxL3jTXA.roa (hash: YmDdfUHRtmrSE+rbUcYGzhhvi5z3wkkQ1u00RCAfcEw=)
2: CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl (hash: EuhO6C4Eu6q+KYXCAIYVoqYE9XQ1MpW5P43IOQH0beQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:bd:d1:7e:20:f3:e2:b5:3f:5c:3b:3a:3d:38:a2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085fb6df2105f2c081578624d18731439f06f26b
Validity
Not Before: Jun 17 04:01:32 2026 GMT
Not After : Jun 18 04:01:32 2026 GMT
Subject: CN=9cb57a3e6c423c8a75f0713e10d006cf3cc19fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:5e:50:2d:e6:23:62:bc:b2:57:2e:23:fb:
cf:46:e8:17:c7:df:82:4d:af:e6:28:3d:d7:64:36:
a4:65:e6:ca:78:b6:89:3e:3d:7a:79:bb:b0:b4:6f:
50:3c:17:9e:cc:1e:00:52:42:1d:d2:7e:e6:80:3b:
46:32:ee:5a:27:27:d4:d8:62:37:a3:bb:c4:7a:7f:
09:9e:8a:e3:d6:cb:a6:e2:e2:33:93:68:90:1a:42:
2b:61:ae:bb:2d:2a:f1:38:ee:68:4f:88:8f:f3:b3:
01:74:8c:08:f7:5e:b0:a9:70:46:77:42:fa:4d:a6:
fe:50:ea:e1:43:80:2f:b0:e1:0d:24:2c:52:d5:cd:
e7:9c:5c:1f:a6:47:34:b7:dd:3c:1f:7d:1a:32:e2:
87:04:40:1b:12:b9:cb:25:b9:6b:86:8a:be:f3:e6:
04:0a:a6:35:30:07:3a:fd:83:04:9e:7d:fa:29:32:
a7:37:f1:a8:58:54:9e:53:a0:8a:7a:ea:5e:92:bc:
0d:f7:8e:de:5e:ea:0f:8e:ae:95:7c:77:3e:f3:40:
cc:a8:5a:17:61:29:17:a0:fa:78:8a:11:91:6a:53:
47:a1:48:40:51:a3:85:63:69:f8:bc:58:9a:df:12:
e0:a7:1d:06:fa:0f:fb:ad:e0:83:11:ea:5b:8b:e8:
bf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B5:7A:3E:6C:42:3C:8A:75:F0:71:3E:10:D0:06:CF:3C:C1:9F:B3
X509v3 Authority Key Identifier:
keyid:08:5F:B6:DF:21:05:F2:C0:81:57:86:24:D1:87:31:43:9F:06:F2:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3f:9a:61:d9:82:20:10:bc:f9:6d:51:2f:62:2a:46:e5:2e:
92:58:39:17:70:eb:93:77:d5:34:99:a0:e9:b4:63:02:56:d9:
2f:c9:b2:3e:90:c3:1e:96:b9:39:5d:ec:62:9e:58:c7:cb:09:
f7:19:fc:b5:34:62:9f:08:83:c4:20:1e:72:90:d0:2f:0e:43:
06:0c:20:f9:a6:59:0d:06:59:93:e0:b3:c6:60:18:75:a4:4e:
8e:44:04:08:b2:08:80:4e:1c:75:06:b3:9e:0c:84:76:9d:9a:
9e:86:2c:a6:82:89:0d:5d:54:c6:93:50:c7:3a:ba:02:b0:65:
f2:86:fb:a4:89:ac:ab:d7:e8:db:63:79:3f:11:4e:e7:81:9a:
79:e4:0d:bd:b2:45:3f:f1:2f:16:2c:6b:37:24:99:05:f0:7a:
48:a4:c2:39:6e:6b:e2:be:2f:02:d7:13:2a:61:e6:3c:69:78:
68:0f:46:f0:c7:5b:89:40:8c:ee:4e:56:30:df:8f:f8:ab:de:
0f:79:b1:c6:0f:f3:3f:14:2f:2e:8b:db:86:53:37:59:53:08:
03:0a:95:29:99:49:83:cf:4a:45:fc:77:2f:79:4a:49:a4:0a:
a1:f3:10:df:08:9f:5f:37:4a:50:af:0f:fb:5e:31:0a:bd:98:
74:32:a5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:22:21 2026 by rpki-client