Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
File: CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft (raw, json)
Hash identifier: mv4t+QQnG3J1/H7EueyTdkPQal/1hJR5Ezba8rT5PKg=
Subject key identifier: D9:2B:FA:88:DA:2A:F2:A9:90:FE:A1:9E:17:DD:A9:C4:6C:CE:F9:B9
Authority key identifier: 08:5F:B6:DF:21:05:F2:C0:81:57:86:24:D1:87:31:43:9F:06:F2:6B
Certificate issuer: /CN=085fb6df2105f2c081578624d18731439f06f26b
Certificate serial: 019CAFB5AC6722348651C7D14CB857C05B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
Manifest number: 7A
Signing time: Mon 02 Mar 2026 18:00:44 +0000
Manifest this update: Mon 02 Mar 2026 18:00:44 +0000
Manifest next update: Tue 03 Mar 2026 18:00:44 +0000
Files and hashes: 1: CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl (hash: yEGRTmeROIqBisIBhGk7amYKYcuHON/tIkP0//Ev3WE=)
2: UVxThjD7JuYaC5fpz56hPaeRyGI.roa (hash: v+ejiGxpiq86CoXHDwODc79zDlDa70a1evg2QwdLwWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b5:ac:67:22:34:86:51:c7:d1:4c:b8:57:c0:5b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085fb6df2105f2c081578624d18731439f06f26b
Validity
Not Before: Mar 2 18:00:44 2026 GMT
Not After : Mar 3 18:00:44 2026 GMT
Subject: CN=d92bfa88da2af2a990fea19e17dda9c46ccef9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:d7:d5:6a:98:5c:ec:c8:77:dd:b1:dc:98:
bf:b3:f3:42:26:8e:5a:d7:f5:b5:2a:60:cc:58:4d:
e3:92:99:e6:06:14:b5:b6:63:50:a2:92:70:01:6f:
32:a2:18:8c:4f:ee:07:31:8f:83:b9:0b:7d:f5:d1:
06:09:c9:5e:90:70:ae:01:1d:d2:71:3c:a2:04:73:
e9:28:5e:be:2d:93:5a:aa:0b:ff:26:96:46:72:7f:
f3:fc:86:ba:91:47:ad:36:45:a9:23:2e:fc:55:de:
11:49:3c:10:f5:4c:b9:68:01:11:ba:58:47:bc:7c:
c8:86:9a:22:a1:ce:41:46:bf:39:a3:59:8c:ac:6e:
7d:56:91:81:e7:fd:89:10:c3:e1:c6:83:27:ea:3e:
b8:9c:4f:64:fa:24:b0:28:f1:c1:00:2b:eb:a7:38:
6d:1f:81:31:c1:cb:22:27:6a:c0:28:86:a1:9b:01:
02:e2:9b:16:9f:d2:23:6a:4d:91:d3:f0:33:0c:98:
d1:c5:30:29:79:66:b0:fe:1c:ab:a0:58:cf:0a:68:
d3:09:1c:43:18:04:7c:11:e1:10:ce:c7:eb:07:b9:
ea:5c:80:e0:70:ae:e7:b5:bb:d1:84:32:cc:2e:24:
bc:6d:3a:29:fa:82:cd:d1:84:79:ba:ec:58:f4:17:
41:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2B:FA:88:DA:2A:F2:A9:90:FE:A1:9E:17:DD:A9:C4:6C:CE:F9:B9
X509v3 Authority Key Identifier:
keyid:08:5F:B6:DF:21:05:F2:C0:81:57:86:24:D1:87:31:43:9F:06:F2:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:19:af:f5:f8:09:a5:dc:13:f9:c9:1a:9a:67:90:d3:de:84:
ed:cc:8d:07:c6:03:64:5f:a5:9b:37:ad:e6:a1:f5:a4:ee:ad:
0e:42:00:a8:e6:0b:e2:b8:0f:e6:89:45:87:1a:c0:e3:51:d7:
8f:a9:68:90:e4:dd:d1:99:1b:e1:ab:cd:8c:cc:57:07:8e:13:
c3:e7:1e:20:bb:c2:58:ba:55:14:3a:cc:3f:86:18:18:df:60:
a9:75:96:ec:15:5e:3a:ae:ce:de:5f:77:f8:b5:b4:63:18:d0:
ee:1d:96:ac:65:7e:3c:9d:35:cd:eb:4a:f7:31:1f:aa:4a:39:
0a:a3:f5:34:56:dc:8c:e5:8f:08:4b:e8:08:96:23:3f:d9:e1:
a4:70:51:79:9a:45:02:28:9a:67:31:7a:ad:ed:2c:0c:4d:65:
01:00:bf:96:78:27:7e:e6:7a:bc:d4:02:d3:42:20:2d:78:32:
fe:64:c7:46:bc:94:fe:5d:d7:52:cc:dc:68:b9:78:4b:17:47:
8a:1f:2a:26:10:9c:f8:11:72:df:8a:9c:e0:c3:c9:94:e7:1b:
58:dd:a6:dc:9e:97:e5:2b:be:50:f0:0f:4d:2f:ac:a1:d2:d1:
bb:20:26:fd:14:5e:2b:79:f0:60:0a:26:2c:a6:9c:b6:93:b1:
99:18:41:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:21:24 2026 by rpki-client