Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File: CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier: t/IyXmFLOXfXS4qqC+3TVRbmZA7i555jokJHPKi5CFU=
Subject key identifier: C0:44:F7:3E:31:04:C4:F1:99:78:C4:84:51:AF:44:AA:DE:44:86:BD
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial: 019CABD9331979E16105D545E49A07803ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 00:01:04 +0000
Manifest this update: Mon 02 Mar 2026 00:01:04 +0000
Manifest next update: Tue 03 Mar 2026 00:01:04 +0000
Files and hashes: 1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: tiE2bjnyvjDb0oid+jU1PIEZI0uc62XMAzOf2wody90=)
2: OC2xnBQTRG6dTo8unU-AfiUJoPo.roa (hash: TCWmomXoe5LhZ7eUQal/1Sd3d3namiJ5LFej1VLenpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:33:19:79:e1:61:05:d5:45:e4:9a:07:80:3e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
Validity
Not Before: Mar 2 00:01:04 2026 GMT
Not After : Mar 3 00:01:04 2026 GMT
Subject: CN=c044f73e3104c4f19978c48451af44aade4486bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d3:73:84:90:c5:5a:b2:fc:e6:06:ea:0b:ad:
34:ff:ad:8a:0a:74:d8:f5:ae:9c:38:c7:7a:c0:42:
6f:1c:a1:64:c4:f3:a5:af:70:c2:e8:fd:d3:f1:24:
ce:a9:6d:dd:36:b4:62:0a:7e:6d:e7:91:c0:22:bc:
69:de:fc:cd:8b:27:5b:81:30:be:f0:8d:d7:1f:9a:
76:ca:e9:dc:81:23:04:99:c8:7c:19:ca:53:49:40:
d5:9f:4d:03:b3:50:85:61:18:c9:d0:f4:02:cd:5a:
e1:c6:0e:03:f9:b7:a5:d2:f0:44:3f:16:b9:89:a0:
1c:e8:e7:1e:11:75:67:78:5d:2f:f9:29:4b:59:6e:
c9:1a:cb:a2:ee:1c:90:3f:30:30:25:81:58:38:1e:
3b:3a:94:2b:30:37:42:89:0e:3e:c0:3e:22:19:fd:
42:cf:92:df:c4:02:f2:37:06:fa:4a:08:c9:05:f0:
49:c0:e8:ff:b4:ce:5f:d1:4d:a4:8e:b2:d1:2a:fb:
5c:9a:b0:76:6b:8e:15:cc:ae:62:14:54:63:13:25:
a0:1a:c1:b2:ba:f0:fa:b6:72:ae:55:49:0e:d2:c2:
2d:6f:37:54:42:ec:3b:80:75:09:d3:8c:84:eb:2f:
55:df:8b:30:7a:a7:b2:0c:4c:d5:2b:ec:2a:71:b2:
64:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:44:F7:3E:31:04:C4:F1:99:78:C4:84:51:AF:44:AA:DE:44:86:BD
X509v3 Authority Key Identifier:
keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:af:d2:8a:f4:eb:08:88:d0:b5:4b:f0:9b:fc:e4:07:77:04:
31:8f:c4:ce:e7:b9:b3:45:14:a8:21:28:53:63:4c:a8:65:da:
19:88:fa:2f:78:2d:2a:69:92:e3:68:8c:f1:1a:67:e6:01:92:
05:ad:3f:a0:74:dc:7e:3b:49:a5:ad:aa:75:0f:48:fb:17:87:
26:16:a8:de:1a:f1:aa:93:80:21:b8:9d:7f:50:31:18:99:3c:
2b:1b:f2:95:50:b1:c0:19:cf:dc:f3:a0:9c:2f:37:e1:23:36:
1d:f4:20:52:0b:2f:d5:0a:92:69:50:40:95:00:4c:74:62:07:
18:fb:4a:81:5e:08:8c:a7:a8:81:43:3d:b6:39:dc:2e:d8:cf:
f6:47:86:6a:9e:9d:3c:7c:d9:3a:28:ba:3e:8b:34:99:10:76:
f9:f6:1b:12:83:6e:4e:39:b0:42:64:91:14:e5:0b:3c:63:f7:
56:ed:57:69:25:83:ed:7c:70:57:52:4c:f6:30:cb:96:3a:57:
61:29:e9:f6:4e:d9:da:e7:46:01:d9:47:c8:7f:55:10:88:94:
d3:e6:a0:e7:90:3a:12:e3:6c:0f:26:f9:8c:7e:f9:e1:87:e6:
ea:02:46:83:23:54:59:32:19:62:42:02:47:80:ff:38:ff:c3:
5c:aa:a0:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2TMZeeFhBdVF5JoHgD7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NTYxZDBkZTYyMjQ3ZTIwODViZjU5YTczYzg3ZDI1YTI0
Mzg5ODAwHhcNMjYwMzAyMDAwMTA0WhcNMjYwMzAzMDAwMTA0WjAzMTEwLwYDVQQD
EyhjMDQ0ZjczZTMxMDRjNGYxOTk3OGM0ODQ1MWFmNDRhYWRlNDQ4NmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9NzhJDFWrL85gbqC600/62KCnTY
9a6cOMd6wEJvHKFkxPOlr3DC6P3T8STOqW3dNrRiCn5t55HAIrxp3vzNiydbgTC+
8I3XH5p2yuncgSMEmch8GcpTSUDVn00Ds1CFYRjJ0PQCzVrhxg4D+bel0vBEPxa5
iaAc6OceEXVneF0v+SlLWW7JGsui7hyQPzAwJYFYOB47OpQrMDdCiQ4+wD4iGf1C
z5LfxALyNwb6SgjJBfBJwOj/tM5f0U2kjrLRKvtcmrB2a44VzK5iFFRjEyWgGsGy
uvD6tnKuVUkO0sItbzdUQuw7gHUJ04yE6y9V34sweqeyDEzVK+wqcbJkIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBE9z4xBMTxmXjEhFGvRKreRIa9MB8GA1UdIwQY
MBaAFAhWHQ3mIkfiCFv1mnPIfSWiQ4mAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0ZZZERlWWlSLUlJV19XYWM4aDlKYUpEaVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lZDljNjMtNTZiZS00NzFiLTliYWIt
NTNlZDgyZDMzZDg0LzEvQ0ZZZERlWWlSLUlJV19XYWM4aDlKYUpEaVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9lZDljNjMtNTZiZS00NzFiLTliYWItNTNlZDgyZDMzZDg0
LzEvQ0ZZZERlWWlSLUlJV19XYWM4aDlKYUpEaVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEK/SivTr
CIjQtUvwm/zkB3cEMY/Ezue5s0UUqCEoU2NMqGXaGYj6L3gtKmmS42iM8Rpn5gGS
Ba0/oHTcfjtJpa2qdQ9I+xeHJhao3hrxqpOAIbidf1AxGJk8KxvylVCxwBnP3POg
nC834SM2HfQgUgsv1QqSaVBAlQBMdGIHGPtKgV4IjKeogUM9tjncLtjP9keGap6d
PHzZOii6Pos0mRB2+fYbEoNuTjmwQmSRFOULPGP3Vu1XaSWD7XxwV1JM9jDLljpX
YSnp9k7Z2udGAdlHyH9VEIiU0+ag55A6EuNsDyb5jH754Yfm6gJGgyNUWTIZYkIC
R4D/OP/DXKqgPw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:41 2026 by rpki-client