Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
File: CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft (raw, json)
Hash identifier: 00W2Iq+AyL9OTwwyv4wSupk3HDStQeGqBfxfEDLyAV0=
Subject key identifier: 60:B2:8C:41:7E:EA:EF:3C:9B:E1:FD:15:0E:60:35:DA:A6:A2:89:99
Authority key identifier: 09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC
Certificate issuer: /CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc
Certificate serial: 019D9E1B663E4783BCB8C9AADBAE4EA7D39F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
Manifest number: 029C
Signing time: Sat 18 Apr 2026 01:01:28 +0000
Manifest this update: Sat 18 Apr 2026 01:01:28 +0000
Manifest next update: Sun 19 Apr 2026 01:01:28 +0000
Files and hashes: 1: CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl (hash: TLKAbwJ0YNaaeaeTi0vDYoDBLp/kXoBpLI4+8KEh7ug=)
2: GMlNWwMvstKZbXWgh06o9T5EqTE.roa (hash: 3II56/e7g+EGOg2XDQ8qDvIUZO0rTVJTTs+Pzt9rihQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:1b:66:3e:47:83:bc:b8:c9:aa:db:ae:4e:a7:d3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc
Validity
Not Before: Apr 18 01:01:28 2026 GMT
Not After : Apr 19 01:01:28 2026 GMT
Subject: CN=60b28c417eeaef3c9be1fd150e6035daa6a28999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:73:4b:cf:8e:12:7d:e8:14:0b:05:6d:a8:41:
6f:af:5b:b2:da:7b:1f:04:43:76:26:9c:80:59:b6:
1e:a6:c9:01:2a:17:52:1b:78:94:5c:70:a2:18:33:
cf:4d:5b:76:fb:05:90:b4:43:db:08:da:63:7c:e7:
60:c5:ee:ce:46:ad:0e:24:2e:c7:13:c6:44:57:48:
83:ab:aa:34:54:b6:5c:27:6c:ef:ac:c5:b0:24:e5:
bd:2e:67:fe:43:b0:17:9b:32:83:42:34:a7:26:cc:
bb:3b:bd:c0:62:e9:57:85:74:b7:11:24:b6:f0:bb:
42:be:90:81:72:8a:f4:5e:68:15:13:0f:ad:98:26:
1b:cc:a3:9a:08:62:ad:ec:9f:36:03:e0:4a:e7:00:
80:70:f5:12:6d:f0:db:dc:25:ce:0b:e2:8a:63:31:
04:1b:a1:09:63:dc:4e:2f:be:48:59:fa:ea:8d:31:
8d:1b:60:cb:a2:e2:45:6b:87:ca:d9:c9:0e:fb:a5:
8c:35:b1:ae:82:4f:6b:e1:2c:27:f5:fc:0b:2d:45:
90:14:28:55:02:51:13:15:bf:6f:9c:37:38:e5:5e:
16:2e:55:06:b8:6f:01:a4:6b:ff:40:af:fc:3f:88:
50:f1:34:b4:ba:f3:66:44:d2:68:e0:cf:c7:a8:ee:
db:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B2:8C:41:7E:EA:EF:3C:9B:E1:FD:15:0E:60:35:DA:A6:A2:89:99
X509v3 Authority Key Identifier:
keyid:09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f5:6a:f8:21:4f:d0:7c:93:fe:f9:91:d6:04:04:8a:6d:52:
78:c5:6d:4e:a0:91:fe:ea:5d:4c:39:c3:d3:2f:3f:c9:95:40:
08:12:47:01:b3:a2:a7:03:c3:c2:7e:94:a2:31:cc:9b:49:e1:
2b:02:ee:bb:fe:5a:f9:1a:35:18:d0:3b:8e:c0:29:bc:5b:ac:
cb:41:60:c1:ea:9c:da:4a:5e:d7:28:64:82:07:94:83:2f:8e:
42:06:cf:44:77:d0:03:41:a5:02:ec:23:89:8c:df:66:3e:27:
72:de:d7:24:de:ae:2a:59:10:b4:43:9f:b4:2d:fc:ff:68:61:
27:c1:51:24:57:b0:17:24:4f:42:62:29:32:ae:95:4f:19:1a:
1e:84:b5:8b:a6:64:4a:0e:fd:2e:ce:8c:92:db:c1:ef:d4:f4:
8f:3f:93:0d:3b:04:18:a7:fc:46:72:fa:e4:47:bc:eb:dc:a5:
f2:c7:7d:cd:7d:15:fc:6e:74:46:15:64:7f:61:e7:3d:ed:37:
5a:da:c4:cf:b7:99:55:76:d2:13:18:f2:02:d5:a7:ff:b7:be:
b9:7d:d2:05:5c:d6:90:ca:5a:e4:a8:4c:94:22:23:2b:01:0f:
4c:a4:02:39:99:d9:71:4f:1a:83:bb:cf:4a:e0:19:32:94:bc:
ba:dc:fb:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2eG2Y+R4O8uMmq265Op9OfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZDk0M2Y5ZDVjNzViMWY1MDU2NGYyZDFkZDA1MTE3ODhl
YjBhZmMwHhcNMjYwNDE4MDEwMTI4WhcNMjYwNDE5MDEwMTI4WjAzMTEwLwYDVQQD
Eyg2MGIyOGM0MTdlZWFlZjNjOWJlMWZkMTUwZTYwMzVkYWE2YTI4OTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnNLz44SfegUCwVtqEFvr1uy2nsf
BEN2JpyAWbYepskBKhdSG3iUXHCiGDPPTVt2+wWQtEPbCNpjfOdgxe7ORq0OJC7H
E8ZEV0iDq6o0VLZcJ2zvrMWwJOW9Lmf+Q7AXmzKDQjSnJsy7O73AYulXhXS3ESS2
8LtCvpCBcor0XmgVEw+tmCYbzKOaCGKt7J82A+BK5wCAcPUSbfDb3CXOC+KKYzEE
G6EJY9xOL75IWfrqjTGNG2DLouJFa4fK2ckO+6WMNbGugk9r4Swn9fwLLUWQFChV
AlETFb9vnDc45V4WLlUGuG8BpGv/QK/8P4hQ8TS0uvNmRNJo4M/HqO7bSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCyjEF+6u88m+H9FQ5gNdqmoomZMB8GA1UdIwQY
MBaAFAnZQ/nVx1sfUFZPLR3QUReI6wr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2RsRC1kWEhXeDlRVms4dEhkQlJGNGpyQ3Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82MmMwMDItYjk0Yy00MjNiLWI0ZWIt
ZTc5MmNjMmZkMDdlLzEvQ2RsRC1kWEhXeDlRVms4dEhkQlJGNGpyQ3Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi82MmMwMDItYjk0Yy00MjNiLWI0ZWItZTc5MmNjMmZkMDdl
LzEvQ2RsRC1kWEhXeDlRVms4dEhkQlJGNGpyQ3Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/Vq+CFP
0HyT/vmR1gQEim1SeMVtTqCR/updTDnD0y8/yZVACBJHAbOipwPDwn6UojHMm0nh
KwLuu/5a+Ro1GNA7jsApvFusy0Fgweqc2kpe1yhkggeUgy+OQgbPRHfQA0GlAuwj
iYzfZj4nct7XJN6uKlkQtEOftC38/2hhJ8FRJFewFyRPQmIpMq6VTxkaHoS1i6Zk
Sg79Ls6MktvB79T0jz+TDTsEGKf8RnL65Ee869yl8sd9zX0V/G50RhVkf2HnPe03
WtrEz7eZVXbSExjyAtWn/7e+uX3SBVzWkMpa5KhMlCIjKwEPTKQCOZnZcU8ag7vP
SuAZMpS8utz7JA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:36:03 2026 by rpki-client