Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
File: CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft (raw, json)
Hash identifier: wMkixYWpBI/iSnHiKsS39CsRlETOrrOxqUlk+8+GoV4=
Subject key identifier: 8B:78:CA:DE:6F:7D:DD:45:40:41:58:5B:E2:4C:A7:00:89:ED:F9:62
Authority key identifier: 08:5F:B6:DF:21:05:F2:C0:81:57:86:24:D1:87:31:43:9F:06:F2:6B
Certificate issuer: /CN=085fb6df2105f2c081578624d18731439f06f26b
Certificate serial: 019D9C63A9643A971B513AD6ADE3766F74CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
Manifest number: F5
Signing time: Fri 17 Apr 2026 17:01:10 +0000
Manifest this update: Fri 17 Apr 2026 17:01:10 +0000
Manifest next update: Sat 18 Apr 2026 17:01:10 +0000
Files and hashes: 1: CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl (hash: eEqJdRJ1jLvKpoXfc0cRamiVGSbj5nMZBmrQeg7iCCI=)
2: ZxK-eh5F5V5sCGHqmkMBiZx765A.roa (hash: Ltp1uKD3CaIpjzzV3gdzBJKlOckUmZmD0RcFdHDISsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:a9:64:3a:97:1b:51:3a:d6:ad:e3:76:6f:74:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085fb6df2105f2c081578624d18731439f06f26b
Validity
Not Before: Apr 17 17:01:10 2026 GMT
Not After : Apr 18 17:01:10 2026 GMT
Subject: CN=8b78cade6f7ddd454041585be24ca70089edf962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:5d:8e:76:a4:c8:fe:9b:50:f7:fe:0f:99:
8d:e4:e7:ad:61:b4:c0:45:40:d2:d0:f1:c5:75:ef:
d7:e1:a4:d6:ad:39:ce:25:f3:3f:4e:ab:27:24:ce:
df:6d:4e:01:57:32:2d:b4:7d:ae:be:bd:d6:be:76:
01:36:25:3a:cf:b5:9c:43:a2:85:ae:41:aa:2c:72:
24:3e:38:2d:dd:e0:f5:bd:80:46:23:72:25:58:61:
50:db:a7:9f:e7:86:d1:2c:e6:45:33:d2:2b:3a:25:
d2:ca:12:2f:c2:7d:a1:e0:a3:39:54:56:7c:90:52:
c4:c4:4e:d3:e9:89:02:c5:77:5e:17:f5:a0:68:d7:
d6:8c:e1:64:fa:bb:14:bd:72:31:03:44:8e:b6:f8:
dc:7a:cc:f9:85:67:29:52:2e:e0:82:77:dc:30:c4:
40:70:38:b7:dd:00:ef:c0:4f:89:b2:17:e5:b7:9c:
69:c3:fc:d0:74:3e:6f:52:80:30:57:6c:f5:5b:75:
b7:4a:6d:db:67:8f:8d:bb:2c:6d:bf:08:1b:1b:81:
0c:e0:89:83:90:59:26:a7:a3:da:0f:02:24:7e:85:
48:22:b1:ca:3d:84:86:0f:29:f6:10:8e:2c:95:40:
a8:88:af:24:ab:af:8f:fd:80:c5:43:9c:ed:9b:e8:
07:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:78:CA:DE:6F:7D:DD:45:40:41:58:5B:E2:4C:A7:00:89:ED:F9:62
X509v3 Authority Key Identifier:
keyid:08:5F:B6:DF:21:05:F2:C0:81:57:86:24:D1:87:31:43:9F:06:F2:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b8:f8:c7:90:ab:d3:a5:c3:c5:42:5c:c0:53:ab:c3:35:17:
54:9c:38:de:34:0d:f1:87:49:b0:db:14:32:33:cf:0c:40:7b:
27:0b:28:32:73:24:5e:e3:a7:3f:ff:83:0b:ad:e9:18:c7:1d:
11:61:d7:b5:10:43:d4:7e:0f:d3:22:6b:68:c0:4b:71:1e:33:
ab:ad:89:50:ac:e9:ad:46:f5:56:ec:e9:16:17:be:2a:f0:66:
c6:f1:bc:7b:74:da:1b:ce:ad:41:d2:26:7b:c9:fc:57:ae:50:
99:90:af:b0:4a:b1:ac:69:5f:20:a7:35:33:8b:95:77:47:9a:
8a:ee:38:db:41:0b:72:3b:83:d0:e6:84:f9:85:21:6b:75:04:
bb:6a:63:4e:c0:03:73:8e:79:a4:f5:b7:83:62:ed:77:55:19:
92:9c:a4:8e:2e:8a:2f:82:b2:8f:cc:c6:94:b5:9b:c9:a1:66:
f2:2d:6d:ae:a6:ef:c3:83:cb:59:f0:28:79:cd:77:75:5f:86:
a6:3a:d8:38:4f:3e:8f:ee:22:15:ff:5b:c2:9f:85:d6:ae:70:
d0:7d:20:f7:a1:e5:85:be:63:9a:4e:8a:5d:d8:3c:18:77:3f:
35:73:70:88:ef:b4:4a:6b:4b:ec:f2:d2:14:33:fc:07:5e:4b:
34:60:ed:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:46:03 2026 by rpki-client