Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File: CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier: hKaroP65TDTMVl6LeBmLvad5+95mql7hmdjuTBmQs0Y=
Subject key identifier: 36:6F:A4:37:98:25:77:B7:C3:65:8E:1A:39:1B:BA:47:1F:19:1C:E3
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial: 019FAA8741BFC489F3A6EC7CC4ACA1F3D18E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 21:00:18 +0000
Manifest this update: Tue 28 Jul 2026 21:00:18 +0000
Manifest next update: Wed 29 Jul 2026 21:00:18 +0000
Files and hashes: 1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: ny1qZWuSnvaXUYAk+Q9SJe10XYY+4dvb7KXEhStUbNs=)
2: OC2xnBQTRG6dTo8unU-AfiUJoPo.roa (hash: TCWmomXoe5LhZ7eUQal/1Sd3d3namiJ5LFej1VLenpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:41:bf:c4:89:f3:a6:ec:7c:c4:ac:a1:f3:d1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
Validity
Not Before: Jul 28 21:00:18 2026 GMT
Not After : Jul 29 21:00:18 2026 GMT
Subject: CN=366fa437982577b7c3658e1a391bba471f191ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:c4:6a:bf:bc:0a:2d:d1:ea:fa:30:db:07:
b7:b0:34:c5:44:9b:69:27:de:46:55:c0:fb:ac:cc:
13:8a:c4:98:e9:1f:41:60:8a:5e:4e:74:ec:43:b8:
f0:8e:3b:5a:44:54:5d:3d:d6:bf:62:f7:7b:ba:e2:
7d:13:6f:6f:92:a9:91:67:41:6c:6b:71:a8:6a:53:
c4:74:df:c1:ff:fa:4c:6a:a4:58:d9:ad:b2:11:23:
c7:68:ea:9f:e5:cf:9e:c6:83:34:3c:68:c0:76:39:
6a:5d:ac:c5:0e:d1:76:46:00:18:60:9a:63:05:0f:
76:4d:0f:92:4f:a7:0e:ae:7f:f2:3f:e9:69:bb:21:
db:eb:79:b9:d9:34:8e:60:08:25:3b:7e:9c:11:bc:
7c:a5:ae:8d:37:da:5f:1a:03:e0:09:e4:1d:be:9e:
41:01:f2:60:38:2c:f5:5d:26:3f:d1:40:4a:26:52:
27:7b:82:31:cb:4e:94:aa:b0:4b:ee:dd:fb:15:8b:
08:24:e0:49:e7:0e:d8:94:0d:11:e6:7c:6c:3b:cf:
3d:81:aa:04:e8:37:bd:69:45:e2:90:d7:b1:03:1f:
e3:e2:75:ff:19:9e:33:e9:52:e7:b5:bc:70:88:56:
a0:ae:85:a0:05:23:d9:32:8c:ab:d6:89:2b:ed:e1:
6a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6F:A4:37:98:25:77:B7:C3:65:8E:1A:39:1B:BA:47:1F:19:1C:E3
X509v3 Authority Key Identifier:
keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d9:95:04:51:7d:8f:6d:50:af:6e:eb:15:2c:af:98:8b:46:
14:c0:1f:bd:68:c1:fe:e8:10:81:a5:09:8b:2e:57:d4:68:d8:
a2:3f:79:69:76:48:66:bb:60:19:09:94:77:5d:bf:65:76:e0:
c5:85:40:5c:25:43:2e:ff:64:dd:16:71:f9:dd:3b:97:b6:fd:
94:8a:13:72:27:21:b0:90:aa:3c:20:12:14:2a:b5:71:52:c1:
9d:e2:e9:d0:5a:d9:b2:8e:61:6a:aa:b3:47:c9:13:18:2c:69:
e2:22:4e:67:05:f6:c0:53:93:ff:af:ca:2a:71:09:3e:d7:93:
40:e8:e1:38:7e:b9:57:18:9b:fa:2d:ea:38:00:27:25:c7:d0:
61:ae:48:04:55:5f:f5:a9:09:15:bb:45:4e:16:77:8e:08:21:
80:25:09:18:77:3b:09:20:50:5f:d2:74:15:70:04:05:c8:bb:
b7:7c:df:eb:55:f9:ea:a4:71:62:26:58:5b:83:6c:ef:12:7b:
ce:a3:53:84:f6:b8:4a:7c:26:3b:9b:c7:c3:46:88:87:54:33:
6d:b7:3e:85:c3:b5:ae:33:a2:10:0a:e8:59:63:28:ef:87:b1:
5a:ff:1d:db:9e:f4:fe:cf:3e:63:1a:23:33:fa:f4:ba:f1:22:
37:47:fd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:35 2026 by rpki-client