Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
File: CdCil56bZlLWG5Ad1VoZKNv9z20.mft (raw, json)
Hash identifier: GwCmcE38kCszqYCxZm+gc0A9DrYctrVXpyxj6/MBCDU=
Subject key identifier: 50:6C:53:C8:0C:0A:CE:50:AC:E5:00:4B:2F:CA:47:47:0B:6D:C4:B1
Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Certificate serial: 01A0C4447A6129B2BD7783E4D9EAED8EDAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
Manifest number: 1A6A
Signing time: Mon 21 Sep 2026 14:00:17 +0000
Manifest this update: Mon 21 Sep 2026 14:00:17 +0000
Manifest next update: Tue 22 Sep 2026 14:00:17 +0000
Files and hashes: 1: CdCil56bZlLWG5Ad1VoZKNv9z20.crl (hash: BCukpk2rEg3BroDHdrLUjfBMLvhySVrjrBzZMk9wU2Y=)
2: NmgrOBcP0tgFCTOWcRYJnixwDJY.roa (hash: Ao15E11G2dQ+8WLi/IRmXPfGBQ5eaUZAO3CZk8b1evU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:7a:61:29:b2:bd:77:83:e4:d9:ea:ed:8e:da:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Validity
Not Before: Sep 21 14:00:17 2026 GMT
Not After : Sep 22 14:00:17 2026 GMT
Subject: CN=506c53c80c0ace50ace5004b2fca47470b6dc4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:ed:fc:74:be:44:7c:62:62:6d:8f:81:02:
5b:0f:b1:4e:67:d2:a5:6f:e2:59:83:81:2d:3e:da:
b9:28:49:2c:97:c6:1a:cc:9b:e5:2c:e6:81:54:c6:
e8:10:f1:75:d2:53:26:46:2d:34:2a:25:c9:a3:59:
ef:21:19:35:72:1e:68:c7:9a:37:f3:88:b6:80:af:
74:47:26:52:13:b3:5f:df:31:ba:d7:61:e2:51:7b:
45:7b:f9:91:11:45:69:86:f7:43:f6:34:95:4b:fe:
7e:b5:ef:b4:9d:0b:5d:d3:22:2a:f5:b0:0e:d8:a5:
23:07:d1:bc:8d:e0:3a:5e:d2:4a:2f:a7:e4:a5:a4:
81:64:71:db:73:f7:29:8e:57:fd:e5:21:f0:c5:73:
b5:b1:b5:24:4b:78:97:1b:c6:4b:ad:ed:f9:7a:68:
6c:8a:ae:33:4b:74:e8:c8:41:03:52:af:01:ac:64:
98:bb:9d:af:7b:10:32:82:8b:4e:a4:de:e3:08:52:
b3:42:f5:b8:d8:d8:1d:23:cc:ac:6f:b2:c2:bb:1d:
1f:60:40:79:1b:81:40:32:42:a7:b4:0b:21:7e:f0:
45:4e:8c:d3:9e:c4:61:1f:e9:77:15:a5:e9:63:7e:
4b:7b:24:ea:b3:d8:83:c2:e1:5d:e2:10:7b:f4:bf:
87:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6C:53:C8:0C:0A:CE:50:AC:E5:00:4B:2F:CA:47:47:0B:6D:C4:B1
X509v3 Authority Key Identifier:
keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c4:48:da:df:17:b9:6a:1e:fc:8c:40:3d:4c:82:55:f4:27:
52:4b:20:36:d5:96:7b:61:7d:8e:d2:ac:10:29:08:dc:7a:b8:
08:ff:d6:2e:39:7e:f8:9a:78:a3:f3:2a:90:38:9a:c4:95:63:
df:f0:e7:3b:58:27:7f:94:95:66:13:1c:3a:53:8f:b9:67:e8:
23:ba:c2:5c:50:d9:ef:35:ef:1f:03:aa:15:a1:80:82:10:6c:
49:56:d3:5a:4b:94:3f:d8:38:f9:e0:63:5d:fc:90:68:4a:49:
eb:e9:a7:63:07:e4:03:ba:09:e6:39:89:9c:62:18:db:ca:a4:
d6:56:7d:12:1f:dc:71:05:aa:cd:58:c8:9a:3f:ab:2c:10:46:
03:39:73:94:a6:41:f4:3e:8d:6e:5c:2a:b3:7d:9e:71:b3:35:
de:27:97:b7:4f:c5:be:84:ae:f0:ae:ec:64:30:15:28:81:32:
df:7a:a5:89:c2:1e:1f:d9:3b:ea:ef:9f:a2:60:65:9b:af:01:
17:b3:36:36:4c:81:86:d1:90:f2:f8:9e:7f:16:e0:4f:32:91:
0c:e1:e0:c0:48:a8:02:c5:32:26:1a:ce:3b:2b:c8:b5:7d:91:
eb:12:ee:80:6b:8e:54:ad:c5:a6:32:8a:63:29:98:87:4f:e6:
39:d5:10:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:30:37 2026 by rpki-client