Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File: CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier: rxwDRCAI89U616ZgouLeE81aR3diTjGmd2KjnTifTs8=
Subject key identifier: E4:76:50:64:2F:6E:65:33:A0:D9:3B:CF:1B:F5:5B:52:2E:C5:56:12
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial: 01A1DE70EDC3A76E4C168502044C13E24CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 09:01:45 +0000
Manifest this update: Sun 15 Nov 2026 09:01:45 +0000
Manifest next update: Mon 16 Nov 2026 09:01:45 +0000
Files and hashes: 1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: +yqwTQibaI8+o5v8S7dOorvtcksv2efRd8G2DQwGlQs=)
2: OC2xnBQTRG6dTo8unU-AfiUJoPo.roa (hash: TCWmomXoe5LhZ7eUQal/1Sd3d3namiJ5LFej1VLenpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:ed:c3:a7:6e:4c:16:85:02:04:4c:13:e2:4c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
Validity
Not Before: Nov 15 09:01:45 2026 GMT
Not After : Nov 16 09:01:45 2026 GMT
Subject: CN=e47650642f6e6533a0d93bcf1bf55b522ec55612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4a:b8:bb:2d:7a:78:e0:a6:c6:04:a6:0b:72:
ad:53:d8:db:82:f8:b5:49:2e:9e:d8:ce:ae:b2:4e:
b4:59:0d:8c:3c:07:c6:52:6b:5a:cd:7d:4c:bf:7f:
c2:bf:5d:83:a5:95:f3:b0:f5:64:98:3a:ba:aa:e2:
18:ad:56:c6:1f:b8:0d:80:9d:c6:df:0f:1e:33:1d:
37:78:a3:cb:3f:1f:8b:1d:13:b8:12:f7:94:7b:f4:
6f:4a:c6:60:67:65:8f:15:f3:32:79:9e:26:11:f4:
f1:30:4b:e6:00:84:35:3f:f2:06:65:33:ac:3a:3a:
8d:d4:c1:46:21:dc:ab:39:d8:5b:db:cf:d3:14:d8:
1b:ed:ad:fd:68:23:20:1f:af:4c:f6:60:9b:5e:2b:
44:89:80:bc:2f:9a:95:ec:5c:f3:c7:3d:90:87:27:
02:a8:34:26:a6:7b:1b:24:38:2a:0d:f0:73:c7:7c:
fb:18:6e:f5:b6:0d:7e:7d:d3:a3:05:7d:f3:2f:fd:
ff:7d:eb:a7:d8:80:54:f1:26:1d:67:9a:10:a1:7e:
89:67:81:28:80:70:4e:be:7f:c5:ce:88:3f:c9:01:
ac:f4:ed:a0:d6:fd:de:96:ac:02:b3:90:4d:d7:eb:
ea:32:1c:e5:75:db:16:df:ba:57:06:0d:d9:e1:d5:
1f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:76:50:64:2F:6E:65:33:A0:D9:3B:CF:1B:F5:5B:52:2E:C5:56:12
X509v3 Authority Key Identifier:
keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1b:b3:ec:be:dd:cf:fc:28:1d:02:03:df:91:aa:28:df:9e:
85:bf:3b:ea:57:7c:76:00:ce:dd:25:22:7b:7f:97:06:70:c5:
43:27:30:07:8a:e2:ab:b0:d1:46:8e:dd:63:41:4a:85:d4:a9:
0c:73:72:ab:d5:b7:fe:9a:36:ff:c5:2a:14:9d:28:2c:17:37:
e3:c2:60:ad:3a:15:4a:1a:1d:9c:45:c6:94:c0:52:35:46:65:
5c:61:00:9f:f8:aa:9b:26:18:42:0c:33:2c:84:ce:82:c8:0e:
c9:c4:63:e7:e0:7c:c4:c2:30:bd:d6:63:bb:a5:95:88:76:46:
5c:ff:43:9f:38:21:69:c5:bb:e1:04:c6:f1:16:16:fe:72:1c:
fd:56:9b:67:bd:69:42:bf:ce:c5:6e:0a:72:37:c9:f3:eb:a4:
79:6e:44:4e:1d:5d:0e:00:ff:9d:07:91:a7:22:c8:3a:a0:3f:
9a:ef:a5:1d:68:af:90:8a:fb:0e:c8:94:36:91:f1:39:b1:f9:
27:c6:26:d9:75:86:aa:17:ef:c9:32:ba:cb:9a:4f:ba:81:6f:
67:09:5d:8d:71:2f:ea:9d:85:f7:ce:fd:36:9e:08:a5:d4:52:
9f:85:6a:0a:22:d0:4f:d2:a3:1c:e6:23:ef:41:43:33:e9:70:
57:8c:34:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:57:11 2026 by rpki-client