Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File: CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier: 7PXEkmUGxaPccHD+Wcs+gegfVwOCbpwCxnFclYfKGOA=
Subject key identifier: 88:CE:1F:93:BA:B2:DA:85:C8:7A:B2:0F:07:D6:46:C3:01:12:F4:4D
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial: 01A0C66A8774A66E2D267633C25CD1D40EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 00:01:05 +0000
Manifest this update: Tue 22 Sep 2026 00:01:05 +0000
Manifest next update: Wed 23 Sep 2026 00:01:05 +0000
Files and hashes: 1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: R0S9uBszvcoNvHFQE4CUCYqcQUTUmOqFe46d7DuP2a4=)
2: OC2xnBQTRG6dTo8unU-AfiUJoPo.roa (hash: TCWmomXoe5LhZ7eUQal/1Sd3d3namiJ5LFej1VLenpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:87:74:a6:6e:2d:26:76:33:c2:5c:d1:d4:0e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
Validity
Not Before: Sep 22 00:01:05 2026 GMT
Not After : Sep 23 00:01:05 2026 GMT
Subject: CN=88ce1f93bab2da85c87ab20f07d646c30112f44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:c2:81:cb:54:41:9d:35:a8:4a:26:77:93:d6:
dc:73:3a:71:b7:67:d7:da:bd:ee:a7:8c:de:fd:83:
5e:bf:9d:6e:08:98:bd:1a:c8:65:1b:6b:50:52:16:
15:5d:9b:78:67:3b:ac:6c:df:7e:f8:d3:09:a4:d6:
bf:f9:c2:49:0c:e3:92:f8:cd:d4:d9:dd:72:ef:80:
2c:cf:a2:fa:ac:eb:ac:79:17:08:01:16:55:54:5e:
16:3e:ac:0b:d1:fc:fe:77:c4:3c:a2:af:54:89:41:
25:d9:77:af:a9:5a:2f:d7:53:9e:8b:d1:6c:5e:7e:
07:33:7a:55:56:8c:9c:03:5f:d1:c2:28:94:4e:db:
98:14:f8:f8:f3:33:1d:cc:c4:d8:7b:47:17:c1:4e:
8f:6a:93:60:5c:35:67:e6:73:5b:91:7e:78:78:5f:
52:b4:50:1f:08:2a:76:e2:d7:1d:a5:51:5c:0d:f0:
9b:14:a9:cc:f5:f4:3a:cb:8d:fb:5d:b7:18:c3:97:
fd:70:b8:1c:6d:c0:23:6d:b0:a8:6c:67:59:cc:37:
6c:5a:c7:1b:8e:03:25:03:42:f7:9f:53:98:1d:e3:
57:74:d2:85:81:3c:e6:66:8d:8a:66:b0:c8:59:cd:
1e:3a:01:c2:ef:38:d4:48:c8:5d:b0:f3:3f:e0:11:
36:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CE:1F:93:BA:B2:DA:85:C8:7A:B2:0F:07:D6:46:C3:01:12:F4:4D
X509v3 Authority Key Identifier:
keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ba:6a:c6:ec:d0:9c:34:23:78:e3:5c:1a:5a:d7:07:aa:bd:
dc:2a:ce:9c:fa:d3:50:48:b1:13:60:ec:2c:9d:4c:0e:c2:f7:
06:ba:1c:66:d6:73:b5:91:f7:b9:1e:81:59:4a:6e:2b:9e:c7:
55:a6:34:c1:15:a1:a1:83:75:5a:f4:87:4d:f5:43:bc:a3:38:
63:4f:ce:a0:4d:71:fa:6f:d7:3f:e4:5c:d0:ba:28:47:bd:47:
ea:21:c1:f7:28:67:16:db:03:5f:15:ee:88:9c:0c:d7:98:0d:
d3:fc:d5:2b:38:d7:61:77:7e:a5:e6:f5:e0:61:b8:b7:b4:25:
87:15:3d:d7:03:f6:f7:2a:f4:2b:45:22:06:ee:6d:ad:82:13:
1d:2b:fd:66:19:58:63:b7:00:9d:cf:7d:d0:49:cb:66:6e:b2:
ed:c9:92:15:18:ee:49:c1:8f:d4:f4:2b:61:fd:ea:03:06:e8:
bd:14:a2:f0:99:54:bc:33:6d:7a:2f:34:6b:5c:8a:ac:ee:b9:
f6:28:45:d8:57:3a:ea:39:d4:58:11:f0:62:19:ae:20:75:c3:
56:3b:f0:27:9e:19:be:1f:48:fc:43:a9:c9:7c:4c:c1:22:d0:
71:99:ef:54:c6:10:f0:8e:48:86:c8:60:6e:47:cc:a7:f9:0a:
9a:f4:2b:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGaod0pm4tJnYzwlzR1A6oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NTYxZDBkZTYyMjQ3ZTIwODViZjU5YTczYzg3ZDI1YTI0
Mzg5ODAwHhcNMjYwOTIyMDAwMTA1WhcNMjYwOTIzMDAwMTA1WjAzMTEwLwYDVQQD
Eyg4OGNlMWY5M2JhYjJkYTg1Yzg3YWIyMGYwN2Q2NDZjMzAxMTJmNDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA98KBy1RBnTWoSiZ3k9bcczpxt2fX
2r3up4ze/YNev51uCJi9GshlG2tQUhYVXZt4ZzusbN9++NMJpNa/+cJJDOOS+M3U
2d1y74Asz6L6rOuseRcIARZVVF4WPqwL0fz+d8Q8oq9UiUEl2XevqVov11Oei9Fs
Xn4HM3pVVoycA1/RwiiUTtuYFPj48zMdzMTYe0cXwU6PapNgXDVn5nNbkX54eF9S
tFAfCCp24tcdpVFcDfCbFKnM9fQ6y437XbcYw5f9cLgcbcAjbbCobGdZzDdsWscb
jgMlA0L3n1OYHeNXdNKFgTzmZo2KZrDIWc0eOgHC7zjUSMhdsPM/4BE2OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjOH5O6stqFyHqyDwfWRsMBEvRNMB8GA1UdIwQY
MBaAFAhWHQ3mIkfiCFv1mnPIfSWiQ4mAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0ZZZERlWWlSLUlJV19XYWM4aDlKYUpEaVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lZDljNjMtNTZiZS00NzFiLTliYWIt
NTNlZDgyZDMzZDg0LzEvQ0ZZZERlWWlSLUlJV19XYWM4aDlKYUpEaVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9lZDljNjMtNTZiZS00NzFiLTliYWItNTNlZDgyZDMzZDg0
LzEvQ0ZZZERlWWlSLUlJV19XYWM4aDlKYUpEaVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLpqxuzQ
nDQjeONcGlrXB6q93CrOnPrTUEixE2DsLJ1MDsL3BrocZtZztZH3uR6BWUpuK57H
VaY0wRWhoYN1WvSHTfVDvKM4Y0/OoE1x+m/XP+Rc0LooR71H6iHB9yhnFtsDXxXu
iJwM15gN0/zVKzjXYXd+peb14GG4t7QlhxU91wP29yr0K0UiBu5trYITHSv9ZhlY
Y7cAnc990EnLZm6y7cmSFRjuScGP1PQrYf3qAwbovRSi8JlUvDNtei80a1yKrO65
9ihF2Fc66jnUWBHwYhmuIHXDVjvwJ54Zvh9I/EOpyXxMwSLQcZnvVMYQ8I5Ihshg
bkfMp/kKmvQr+Q==
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:39:17 2026 by rpki-client