Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
File: CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft (raw, json)
Hash identifier: T3PU/Z1CQzsiIgHz4gX/O2/GnQ1LJKRRTnRe9a4FU8U=
Subject key identifier: C3:8C:6F:BD:44:7A:FC:CD:9B:33:83:1E:AC:70:B7:37:46:DC:54:34
Authority key identifier: 09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC
Certificate issuer: /CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc
Certificate serial: 019CAEA3AD1A9D1E4E6197BDB98D647CC551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
Manifest number: 0220
Signing time: Mon 02 Mar 2026 13:01:28 +0000
Manifest this update: Mon 02 Mar 2026 13:01:28 +0000
Manifest next update: Tue 03 Mar 2026 13:01:28 +0000
Files and hashes: 1: CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl (hash: yx6C0HyTeqL9VzYcoAoCzxnE5g840b1ALfy7kPoxdgo=)
2: GMlNWwMvstKZbXWgh06o9T5EqTE.roa (hash: 3II56/e7g+EGOg2XDQ8qDvIUZO0rTVJTTs+Pzt9rihQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:ad:1a:9d:1e:4e:61:97:bd:b9:8d:64:7c:c5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc
Validity
Not Before: Mar 2 13:01:28 2026 GMT
Not After : Mar 3 13:01:28 2026 GMT
Subject: CN=c38c6fbd447afccd9b33831eac70b73746dc5434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0d:d4:21:7d:5b:7f:83:8a:a6:6a:71:c0:45:
ee:22:48:a8:29:b6:ba:4c:a5:c4:88:cc:76:9f:d0:
a5:80:b0:96:71:13:d8:7a:97:e9:6b:d1:58:a9:4d:
cc:cb:c1:90:56:20:d0:a5:d1:48:d1:5d:58:53:80:
39:7e:38:98:7b:50:8c:61:67:a6:43:bf:41:d8:54:
e5:0a:ea:b4:57:6f:12:a3:e2:6d:61:16:f9:de:a5:
84:66:21:84:59:44:3f:69:fb:62:fd:6c:f0:56:98:
fc:55:c3:6f:8e:84:1d:e5:47:65:79:36:94:fd:4f:
78:11:d5:9f:27:75:07:21:ef:b3:13:ff:31:7a:88:
78:6b:17:73:cf:f6:7a:ea:ae:e7:ad:12:87:b1:93:
21:10:03:6f:67:93:39:36:e4:5e:8c:4d:4b:fa:a3:
50:9c:5e:0e:dd:ac:43:d8:1a:72:84:28:9e:f1:57:
db:03:7a:60:4b:90:d2:0d:a9:d7:ae:28:bf:e2:8f:
1b:38:bb:c7:3a:b2:75:85:83:9c:fb:89:8b:99:41:
b2:ac:f2:87:db:a8:cc:b0:1c:76:d1:23:66:98:68:
87:ea:be:47:2b:14:cf:5e:c2:6c:bf:a4:c2:e4:7c:
17:69:de:d6:5e:58:f1:9c:b2:9f:17:e4:fc:e7:c9:
fa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8C:6F:BD:44:7A:FC:CD:9B:33:83:1E:AC:70:B7:37:46:DC:54:34
X509v3 Authority Key Identifier:
keyid:09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:95:61:ab:af:e5:13:e0:dd:55:82:68:4b:bf:6e:56:e6:1e:
22:ff:a3:50:83:5a:b2:d6:a7:8f:90:84:20:35:b9:71:6e:33:
fb:ed:c8:68:30:5b:f6:05:02:e2:8e:d8:c5:b0:23:fe:ac:18:
ea:61:d5:16:95:65:4b:39:bd:f6:f0:03:88:2f:a6:a7:bb:3e:
d9:34:da:ec:40:b5:41:7d:9e:82:5f:4a:4c:9c:ea:a1:6d:70:
97:b3:98:43:11:8c:ba:cf:23:90:26:b0:7c:e6:39:93:a5:29:
82:bc:a9:b7:8c:5f:b8:5a:6b:56:d8:27:16:c2:ff:39:44:46:
9d:96:04:a4:bb:72:d4:e8:7d:41:c7:c4:7a:c1:9a:da:9f:1a:
9c:5e:3d:88:07:69:86:55:38:05:c2:1b:f3:6a:9b:50:8a:e5:
0e:43:9f:20:f3:87:6b:de:65:70:54:03:09:51:11:bd:3e:49:
3f:b9:63:bb:4a:56:cb:0e:b8:a0:55:07:69:55:29:57:95:38:
6b:f3:99:de:00:aa:ad:5a:57:c6:22:7b:c7:d7:04:ca:3c:a2:
bb:c7:d7:cf:61:f0:7e:35:c5:d3:b3:01:36:b2:9c:73:d7:91:
5a:75:66:96:31:b3:70:1f:7a:8b:a0:5e:a2:ae:62:9c:5f:86:
62:91:58:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:24 2026 by rpki-client