Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
File: CDV_W-4YX8YRVwhtWYVIU2myrNI.mft (raw, json)
Hash identifier: 9fSC3/FVnuZRsKw57tPLA3zbUYIRyMqgL24gt7Q935Y=
Subject key identifier: 25:A4:D3:6B:27:98:08:0C:3F:71:F9:65:6B:88:5F:C2:67:84:20:C4
Authority key identifier: 08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
Certificate issuer: /CN=08357f5bee185fc61157086d5985485369b2acd2
Certificate serial: 019D9B5149D5158F545045D0813C456D4B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
Manifest number: 041B
Signing time: Fri 17 Apr 2026 12:01:28 +0000
Manifest this update: Fri 17 Apr 2026 12:01:28 +0000
Manifest next update: Sat 18 Apr 2026 12:01:28 +0000
Files and hashes: 1: 2OzQAiJ84eR942-HL-mCfiNn304.roa (hash: DoCu0JYoFviUnpmkl9K5MvFhWvoS3a+KpBFHFpRP62c=)
2: CDV_W-4YX8YRVwhtWYVIU2myrNI.crl (hash: zkb+mpj4frajv3CKGuLNAnmcCjQy3GoL1NAiUYUlOLo=)
3: frdEDuVlBLc1KIouDp6myM9rtIA.roa (hash: G223mpKSbVeBYMKKTw6KE3IJvyTw3v+DtTphKZ5P+JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:49:d5:15:8f:54:50:45:d0:81:3c:45:6d:4b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08357f5bee185fc61157086d5985485369b2acd2
Validity
Not Before: Apr 17 12:01:28 2026 GMT
Not After : Apr 18 12:01:28 2026 GMT
Subject: CN=25a4d36b2798080c3f71f9656b885fc2678420c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:8f:c6:c0:fd:6c:f0:1f:cc:36:9b:90:c3:
64:d8:3f:6b:1a:d1:be:d5:7f:9b:07:e5:ba:43:a3:
e0:6f:25:69:fc:9e:0f:41:da:11:88:18:ea:83:db:
a8:f2:54:c4:a2:30:34:5c:1d:c0:21:b7:8e:ad:51:
6b:4b:61:b0:d6:90:69:69:f3:bc:32:f2:5c:5b:ed:
60:90:b1:c4:11:df:d3:3e:d1:80:0d:66:ca:15:40:
f2:1b:38:18:78:40:25:dd:3a:1d:52:a2:60:8b:d3:
22:c3:d8:14:59:d0:c6:bd:8d:65:2b:bd:a2:51:2c:
52:85:1d:39:89:97:cd:ea:9e:91:1c:e9:5f:11:f1:
14:cb:23:e6:e8:65:f1:a1:7e:12:3b:3d:ff:13:a7:
90:d7:07:6b:2a:6a:d8:36:da:46:18:16:3a:e6:66:
38:95:09:d3:b6:fd:91:f2:d6:0e:e3:c5:e5:10:8e:
86:f5:d3:43:9b:12:67:bf:e1:64:fb:74:51:0d:81:
fd:82:37:40:4e:94:65:64:22:4a:60:d6:92:05:40:
a2:ed:74:00:63:a8:59:7d:46:f2:5d:cc:9b:e7:e7:
f7:b9:ae:42:6b:a6:80:15:d7:04:16:9a:bb:22:93:
fc:41:61:74:a0:20:e5:b3:9f:af:4e:67:45:36:cc:
94:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A4:D3:6B:27:98:08:0C:3F:71:F9:65:6B:88:5F:C2:67:84:20:C4
X509v3 Authority Key Identifier:
keyid:08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b0:0d:0c:2c:18:77:c4:4e:f9:06:77:b9:a7:ac:29:a9:31:
44:9a:1e:b2:e8:27:5d:c6:60:f0:d9:a2:9e:cb:6d:80:48:2c:
01:66:89:f3:d2:2d:69:fb:bf:96:6c:bb:32:cc:c5:4c:f4:72:
4d:01:e0:b7:0b:93:e6:cf:88:77:0b:f2:d7:c7:b5:60:97:9f:
1d:a6:16:33:ac:59:20:61:0c:d8:95:83:ec:c3:9c:67:45:fe:
a7:bc:6b:28:f7:ab:a8:97:d4:0b:44:8d:85:ae:b6:0e:63:df:
3e:95:0d:6a:f7:8f:d3:69:d7:1c:79:a2:01:cb:1d:f3:4a:04:
cb:67:64:56:b2:4f:96:15:91:51:4c:46:80:62:37:d4:59:16:
76:5c:2e:7f:56:e0:87:f8:d9:10:b0:29:18:b5:0b:3f:20:95:
28:02:6b:ef:c3:6d:30:7f:6a:0d:d8:9c:50:92:e8:81:4d:7c:
5c:8b:ec:57:73:f9:42:05:89:8d:94:de:23:ab:1a:21:09:c5:
d8:6c:e2:f4:91:2c:96:17:5f:2a:5e:79:75:27:2e:1d:92:df:
ee:59:c6:0e:23:f8:05:be:2a:e1:6d:d4:c5:91:5e:09:a4:07:
d3:91:c6:e8:c1:ee:b8:1b:6c:51:d8:48:9c:1a:11:e4:ab:1b:
17:f5:1b:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUUnVFY9UUEXQgTxFbUthMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzU3ZjViZWUxODVmYzYxMTU3MDg2ZDU5ODU0ODUzNjli
MmFjZDIwHhcNMjYwNDE3MTIwMTI4WhcNMjYwNDE4MTIwMTI4WjAzMTEwLwYDVQQD
EygyNWE0ZDM2YjI3OTgwODBjM2Y3MWY5NjU2Yjg4NWZjMjY3ODQyMGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2yPxsD9bPAfzDabkMNk2D9rGtG+
1X+bB+W6Q6PgbyVp/J4PQdoRiBjqg9uo8lTEojA0XB3AIbeOrVFrS2Gw1pBpafO8
MvJcW+1gkLHEEd/TPtGADWbKFUDyGzgYeEAl3TodUqJgi9Miw9gUWdDGvY1lK72i
USxShR05iZfN6p6RHOlfEfEUyyPm6GXxoX4SOz3/E6eQ1wdrKmrYNtpGGBY65mY4
lQnTtv2R8tYO48XlEI6G9dNDmxJnv+Fk+3RRDYH9gjdATpRlZCJKYNaSBUCi7XQA
Y6hZfUbyXcyb5+f3ua5Ca6aAFdcEFpq7IpP8QWF0oCDls5+vTmdFNsyUlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWk02snmAgMP3H5ZWuIX8JnhCDEMB8GA1UdIwQY
MBaAFAg1f1vuGF/GEVcIbVmFSFNpsqzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RWX1ctNFlYOFlSVndodFdZVklVMm15ck5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kY2ZmM2EtOGQzZC00N2NlLWEwZTQt
MmY0OWVmYzVjY2IwLzEvQ0RWX1ctNFlYOFlSVndodFdZVklVMm15ck5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9kY2ZmM2EtOGQzZC00N2NlLWEwZTQtMmY0OWVmYzVjY2Iw
LzEvQ0RWX1ctNFlYOFlSVndodFdZVklVMm15ck5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLANDCwY
d8RO+QZ3uaesKakxRJoesugnXcZg8NminsttgEgsAWaJ89Itafu/lmy7MszFTPRy
TQHgtwuT5s+Idwvy18e1YJefHaYWM6xZIGEM2JWD7MOcZ0X+p7xrKPerqJfUC0SN
ha62DmPfPpUNaveP02nXHHmiAcsd80oEy2dkVrJPlhWRUUxGgGI31FkWdlwuf1bg
h/jZELApGLULPyCVKAJr78NtMH9qDdicUJLogU18XIvsV3P5QgWJjZTeI6saIQnF
2Gzi9JEslhdfKl55dScuHZLf7lnGDiP4Bb4q4W3UxZFeCaQH05HG6MHuuBtsUdhI
nBoR5KsbF/UbFg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:46:27 2026 by rpki-client