Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
File: CDcIEWsEvCt2dT4aQwt8vuCc26U.mft (raw, json)
Hash identifier: rKWNMsbz2hr9/Ucixr4QofMuK4wy4t7T587zZMjxvYg=
Subject key identifier: 00:FB:1F:43:B2:FD:40:0F:6F:6F:92:DA:C4:E3:2B:DD:14:D5:D1:4C
Authority key identifier: 08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
Certificate issuer: /CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Certificate serial: 019D984FC319252EAFA0A5E466937FEC6A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
Manifest number: 0CA9
Signing time: Thu 16 Apr 2026 22:00:57 +0000
Manifest this update: Thu 16 Apr 2026 22:00:57 +0000
Manifest next update: Fri 17 Apr 2026 22:00:57 +0000
Files and hashes: 1: CDcIEWsEvCt2dT4aQwt8vuCc26U.crl (hash: WXAa5k2QUZMXyjKBSQWG/pO8H4Sdh0wWQo4AiZ+oVqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:c3:19:25:2e:af:a0:a5:e4:66:93:7f:ec:6a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Validity
Not Before: Apr 16 22:00:57 2026 GMT
Not After : Apr 17 22:00:57 2026 GMT
Subject: CN=00fb1f43b2fd400f6f6f92dac4e32bdd14d5d14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:3c:d6:a2:3f:cb:c9:4b:8f:15:31:0b:49:
e7:6c:6e:52:7b:45:7f:ea:01:e9:7a:6a:57:fa:a5:
85:cf:ff:50:98:ac:5f:47:f1:96:00:ff:cb:e6:0e:
d8:4f:a8:55:8c:c0:ec:2f:25:fe:bb:18:b9:d0:e9:
f9:85:26:cc:ed:ab:4e:f1:18:98:23:bf:e6:e2:93:
97:e1:61:cb:26:9e:ea:bc:bc:af:86:0a:a7:29:a9:
0b:2e:86:27:03:bb:49:92:86:92:91:ae:a6:df:d9:
4a:f2:27:5b:0e:9d:83:ac:98:6e:c1:b4:a7:b6:ea:
2e:a0:fd:51:84:09:21:03:cb:db:e5:5c:f1:d7:41:
62:fa:51:b1:7c:dc:56:85:b8:72:ae:66:f7:5c:e0:
b3:c4:4f:90:02:4d:57:5e:52:15:23:f1:bb:57:fa:
f9:ec:b7:5b:f2:eb:f5:34:c3:9a:13:c7:26:30:b6:
eb:b3:43:94:21:6b:85:ab:cc:f5:51:40:95:85:32:
cb:ea:1c:42:b2:16:8c:e0:89:39:b2:2f:9b:b2:4e:
31:53:f4:d2:be:4f:52:b4:f6:5c:11:29:0e:d8:c9:
3f:f5:4d:ba:72:2d:e1:4e:44:f4:bb:b1:f7:59:0c:
79:a4:ba:d0:9e:51:5f:21:29:9d:10:d6:89:d9:e3:
95:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FB:1F:43:B2:FD:40:0F:6F:6F:92:DA:C4:E3:2B:DD:14:D5:D1:4C
X509v3 Authority Key Identifier:
keyid:08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:61:0e:35:67:2b:2b:f1:2e:56:9d:69:30:68:f4:aa:1d:7d:
cf:4c:30:bc:d8:56:5f:07:a7:f1:72:69:d7:19:f9:81:24:fe:
dd:06:aa:1b:d3:64:24:b6:06:90:dd:ac:f8:28:6f:15:f0:c4:
15:79:3d:cc:c0:c3:ac:91:0f:0f:0e:d2:e0:9a:c5:0d:76:86:
9c:51:8a:12:94:e1:80:b4:ff:fa:92:5d:20:7e:3e:71:82:af:
46:db:a6:9c:5f:62:a8:31:a0:e7:41:18:0b:39:fd:a1:be:70:
0e:cf:1e:b4:6d:9b:54:38:df:c2:31:fa:99:43:e3:97:de:8b:
d4:0b:d5:10:66:21:f0:c1:f6:e5:21:a2:5e:8c:d4:9e:24:b6:
9f:77:7c:30:35:93:13:4e:87:8d:3d:18:01:06:fc:dc:21:40:
19:3a:30:6a:49:c5:5a:d8:70:53:d5:ff:90:cb:d9:9b:b2:36:
46:4f:7c:9b:e6:6c:02:9b:e4:b1:87:2c:14:75:ec:4d:c4:f1:
6f:48:15:7d:60:91:b7:b4:b7:ff:a7:37:60:bf:38:e3:5b:37:
55:46:c6:0f:dd:1b:85:83:2a:3d:a1:26:36:cb:f1:09:5d:7e:
1b:e6:4c:ad:27:c6:c4:be:7e:73:94:6f:21:36:26:fe:72:92:
f0:79:fc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:23:39 2026 by rpki-client