Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
File: CDV_W-4YX8YRVwhtWYVIU2myrNI.mft (raw, json)
Hash identifier: RwHl/VTlOYxGfFrdVIlFaBO26d3wOYrHgG5+9BkkzkQ=
Subject key identifier: CD:74:9D:C0:AF:C6:DC:99:94:DE:A5:08:37:74:62:93:2D:68:84:34
Authority key identifier: 08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
Certificate issuer: /CN=08357f5bee185fc61157086d5985485369b2acd2
Certificate serial: 019CABD8FD785A0968910053F9181AAEED3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
Manifest number: 039F
Signing time: Mon 02 Mar 2026 00:00:50 +0000
Manifest this update: Mon 02 Mar 2026 00:00:50 +0000
Manifest next update: Tue 03 Mar 2026 00:00:50 +0000
Files and hashes: 1: 2OzQAiJ84eR942-HL-mCfiNn304.roa (hash: DoCu0JYoFviUnpmkl9K5MvFhWvoS3a+KpBFHFpRP62c=)
2: CDV_W-4YX8YRVwhtWYVIU2myrNI.crl (hash: 6c6/ZCM+7eSuruUyDqM31E+v+bq22ywNcVjzWt8uK5M=)
3: frdEDuVlBLc1KIouDp6myM9rtIA.roa (hash: G223mpKSbVeBYMKKTw6KE3IJvyTw3v+DtTphKZ5P+JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:fd:78:5a:09:68:91:00:53:f9:18:1a:ae:ed:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08357f5bee185fc61157086d5985485369b2acd2
Validity
Not Before: Mar 2 00:00:50 2026 GMT
Not After : Mar 3 00:00:50 2026 GMT
Subject: CN=cd749dc0afc6dc9994dea508377462932d688434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:11:4f:be:ee:2c:4e:d6:30:e4:70:76:eb:
39:f1:6f:df:27:ad:f3:b4:91:61:2a:fa:52:10:f5:
5e:f2:f9:32:ba:5f:88:05:27:5a:fc:c6:92:e9:04:
7f:43:31:55:41:57:eb:96:44:60:6a:7e:e3:f4:2a:
00:52:c0:04:be:be:bd:ba:bf:a1:70:78:06:8c:3e:
13:f8:7b:b3:66:54:34:27:e7:d5:a2:8f:da:48:66:
40:b9:09:42:cb:7b:ca:23:93:22:7b:90:43:88:44:
6c:c5:22:53:33:7a:30:10:a5:a1:c4:ef:0a:bb:b2:
f9:09:94:85:5f:05:85:3a:9a:66:c8:b8:5f:f0:1e:
91:0d:ed:59:9f:33:57:e6:39:25:77:01:03:6e:0b:
a2:7e:73:10:d2:d3:c4:59:be:d4:2c:55:f7:a5:03:
70:9a:bd:7f:87:ee:03:b3:c1:c2:03:95:21:f6:e1:
c6:a8:72:6c:09:a7:f0:d6:fc:75:b7:fe:ca:66:b1:
7a:a3:37:a2:a2:16:eb:ae:9f:e2:a3:48:f5:09:b7:
f5:8a:a3:4c:e7:f0:b4:d9:1e:8f:97:f2:e6:03:3e:
31:3f:87:bf:cf:69:bb:6d:33:85:bd:8c:ac:d6:3d:
0e:c8:5c:60:3e:5c:93:d5:53:19:25:a5:5a:c7:f4:
6f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:74:9D:C0:AF:C6:DC:99:94:DE:A5:08:37:74:62:93:2D:68:84:34
X509v3 Authority Key Identifier:
keyid:08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:60:11:63:cf:e4:e9:ab:0e:bc:44:db:90:2f:82:db:d4:17:
b9:be:9d:46:b3:52:5d:ed:db:de:eb:83:f0:a4:0d:9b:8f:4a:
2b:48:16:29:7f:a4:6e:b4:30:6d:db:cc:fa:57:14:26:3f:76:
0f:ca:5b:fa:6e:81:94:3a:f2:86:a0:6b:30:e7:fd:31:2d:29:
4e:f0:3e:a1:d2:96:07:5a:98:6c:c4:c0:a6:d8:b5:4b:49:8f:
e7:45:fa:74:63:ac:75:6a:2f:f6:61:e8:2a:31:45:c4:77:50:
c9:bf:e6:4b:a5:92:44:43:5e:f1:ed:34:46:c9:74:cf:d8:72:
db:f6:f1:9d:93:3d:c1:17:21:6c:4e:69:9f:be:27:6b:2b:38:
74:f4:31:9a:66:9a:5b:32:31:d5:7a:29:ee:08:e3:1c:87:64:
d5:de:04:1d:ff:ca:11:20:ff:66:4e:4e:14:1c:f7:fe:91:62:
a4:ca:45:75:c2:c6:d2:1e:ec:e9:d1:38:d6:6b:a9:17:d6:2c:
e4:94:9d:b6:3d:9a:b7:53:2f:eb:40:88:ec:f4:c6:98:92:c7:
a4:6f:e6:d5:a9:d8:7f:6a:fb:3f:a3:d3:d5:3f:7a:d7:38:2d:
1a:0a:9c:b5:6e:1f:bd:67:5a:bf:af:e7:8b:be:08:3f:26:cc:
c8:4f:63:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:12:11 2026 by rpki-client