Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
File: CDcIEWsEvCt2dT4aQwt8vuCc26U.mft (raw, json)
Hash identifier: Ngplyzpw9fRdjzCgY5EHObFsn8KUvS5PsTcgJm7kKFk=
Subject key identifier: 78:87:CD:23:3A:E7:C3:A8:85:4D:97:5C:EF:9A:DA:DC:B2:FF:77:F9
Authority key identifier: 08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
Certificate issuer: /CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Certificate serial: 019EBDDAD918260F89F363EB7E95AB8C3BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
Manifest number: 0D41
Signing time: Fri 12 Jun 2026 22:01:36 +0000
Manifest this update: Fri 12 Jun 2026 22:01:36 +0000
Manifest next update: Sat 13 Jun 2026 22:01:36 +0000
Files and hashes: 1: CDcIEWsEvCt2dT4aQwt8vuCc26U.crl (hash: e/SoS2yMuP5BfyD6K6UZi287RC+qc2TddCrBRDiROXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:d9:18:26:0f:89:f3:63:eb:7e:95:ab:8c:3b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Validity
Not Before: Jun 12 22:01:36 2026 GMT
Not After : Jun 13 22:01:36 2026 GMT
Subject: CN=7887cd233ae7c3a8854d975cef9adadcb2ff77f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:30:3d:f6:79:cf:d1:bc:a8:2a:34:2d:3c:
88:2c:30:6b:b5:c7:55:94:f5:87:ad:e5:df:c6:3c:
0d:f0:6d:c0:87:fe:b5:a1:60:41:ed:49:36:ab:0c:
76:75:a1:ff:d4:c0:8d:0e:58:4b:05:f4:eb:40:5d:
0f:94:ff:e8:b8:6b:9a:8a:84:df:66:4c:8f:cf:32:
e1:31:d6:d1:de:98:02:6b:34:3b:22:98:10:11:2c:
2f:14:55:8b:97:7f:1b:1f:7c:a3:b9:4a:50:b4:0e:
f4:9e:0b:f0:4d:3e:4d:8a:b1:4b:67:bf:70:0c:5c:
ac:62:34:3b:b6:8d:63:1e:b2:13:6c:be:93:fb:40:
4b:29:e7:05:9e:44:c1:36:66:0e:2f:ea:37:a8:36:
ee:b4:f2:93:20:c2:21:0c:ee:60:45:cc:2e:a4:a0:
fc:1d:b5:7d:aa:4c:b8:af:d1:56:3c:7c:50:95:e6:
2b:63:67:63:18:f2:38:23:87:b5:17:cf:a0:72:7c:
9f:25:55:67:9a:9e:02:98:fa:88:bf:f7:bf:8a:43:
8e:dd:f9:1b:cb:1b:5d:97:a5:70:12:ad:96:d9:d7:
00:8b:6f:c8:9d:71:4d:b5:5b:d5:73:cd:c3:53:39:
8a:83:28:e6:57:59:74:06:21:0a:ad:13:1a:80:22:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:87:CD:23:3A:E7:C3:A8:85:4D:97:5C:EF:9A:DA:DC:B2:FF:77:F9
X509v3 Authority Key Identifier:
keyid:08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7c:35:70:2a:f2:8b:24:33:fa:c3:3e:3e:f5:04:8a:5c:1d:
ab:0c:7a:7b:96:11:06:6c:56:e5:c7:67:b3:cd:55:31:04:d3:
06:7a:64:e9:eb:2a:38:ae:04:2f:88:19:e4:1e:d0:cc:0d:6d:
4e:98:c6:73:91:60:26:99:cb:08:ee:2e:ff:a7:71:5f:0d:82:
8b:5b:f0:a8:fb:0a:3b:9d:0d:24:e7:74:af:eb:ec:d4:88:32:
e7:08:87:0b:24:ff:d0:7d:c4:7f:2e:26:46:b8:b6:66:10:28:
c4:57:45:20:48:c0:59:67:97:da:b8:7c:16:33:22:40:dd:05:
2e:72:a4:90:ab:70:11:d6:44:71:69:dc:f6:71:6c:50:a9:a9:
03:23:40:13:07:30:8a:ba:9c:33:89:8f:85:a9:14:9c:71:f9:
9c:27:ce:e4:0e:5e:71:88:7f:22:97:3b:f5:82:1a:62:35:98:
5a:84:27:e0:52:c5:98:6e:b7:c1:42:8b:57:dc:0c:00:c5:ac:
dd:d9:2f:9d:5c:95:b8:2e:c7:ec:ee:dd:85:0e:a4:e1:4e:1a:
ff:00:d2:13:1f:cc:e5:0d:ae:4e:9e:89:bb:d0:02:fa:67:76:
a9:47:96:7a:0d:56:66:a0:f3:cf:f4:8f:86:76:23:de:be:1f:
d6:cc:67:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:46:10 2026 by rpki-client