Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
File: CdCil56bZlLWG5Ad1VoZKNv9z20.mft (raw, json)
Hash identifier: qCh+vrMQmgp4/uWQiCXJDTxcI+Ya8tDn0FDCff5peD0=
Subject key identifier: C5:CA:FD:37:77:45:1D:06:05:8C:38:F8:19:23:D5:8A:79:93:C8:81
Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Certificate serial: 01A1E027AB585E8FFE87ADABC51C9993F4AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
Manifest number: 1AFD
Signing time: Sun 15 Nov 2026 17:00:58 +0000
Manifest this update: Sun 15 Nov 2026 17:00:58 +0000
Manifest next update: Mon 16 Nov 2026 17:00:58 +0000
Files and hashes: 1: CdCil56bZlLWG5Ad1VoZKNv9z20.crl (hash: AkW53njItv/OAoAcEQ2EctD/ZP8HSy/ArHYOKtsRxZA=)
2: NmgrOBcP0tgFCTOWcRYJnixwDJY.roa (hash: Ao15E11G2dQ+8WLi/IRmXPfGBQ5eaUZAO3CZk8b1evU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:27:ab:58:5e:8f:fe:87:ad:ab:c5:1c:99:93:f4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Validity
Not Before: Nov 15 17:00:58 2026 GMT
Not After : Nov 16 17:00:58 2026 GMT
Subject: CN=c5cafd3777451d06058c38f81923d58a7993c881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:83:39:ab:0e:a7:06:a1:a7:dc:7e:ab:02:04:
0f:68:98:47:bd:16:8f:b5:36:50:5b:4d:fd:9c:b7:
6d:ac:92:44:95:33:5f:3a:3b:3d:57:b8:c1:de:90:
57:cf:ad:9f:f6:62:42:42:86:38:8b:1a:7b:a3:36:
4a:dc:80:96:27:a9:c4:e2:df:de:e0:98:2b:03:09:
70:c5:bc:5f:5e:ba:b8:ef:c2:7c:fe:0a:5d:50:49:
42:75:22:e1:87:6f:4d:6f:1c:2d:f7:ea:c0:5a:96:
9e:4f:fc:4b:7a:8c:e2:f0:04:f7:36:97:ff:53:6f:
44:e9:aa:82:38:69:7e:9c:87:80:e4:b4:86:90:21:
1e:7d:a6:31:d9:58:97:45:48:6e:8a:82:77:59:0a:
94:0a:85:35:e5:49:7d:de:5c:7a:b9:60:37:c0:c7:
06:41:25:94:32:18:6d:44:98:2e:70:72:20:33:9d:
63:c7:e1:a4:5c:89:d8:01:c6:01:a8:11:c5:00:88:
f5:25:bf:68:d1:97:15:1c:17:c3:7d:c5:77:41:31:
b7:3c:87:fd:eb:8e:d1:04:02:fd:3e:93:0d:2c:bb:
4e:7b:ee:a5:e0:d8:e5:05:4d:a7:c9:67:5a:7c:39:
68:37:12:1e:65:d2:11:99:8a:4b:45:90:6e:eb:45:
ce:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CA:FD:37:77:45:1D:06:05:8C:38:F8:19:23:D5:8A:79:93:C8:81
X509v3 Authority Key Identifier:
keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e1:fc:53:3d:7a:cb:3f:27:00:ef:f6:a9:04:73:43:11:e8:
5c:ea:49:0b:78:9c:a4:3c:8b:55:da:9a:fc:0e:6e:ef:15:94:
a5:36:53:b8:73:16:67:bb:5c:3e:6c:34:77:ea:0b:ac:9b:74:
77:81:19:42:3f:22:f7:b7:59:1a:b2:0b:69:63:c3:0e:5b:27:
24:c2:b8:5e:48:6a:5b:9a:c3:03:51:a1:41:35:d1:11:63:5d:
da:3b:e2:26:30:eb:2e:cb:a9:63:c1:6c:e7:a2:7b:1f:2f:7b:
4d:ef:16:27:75:c6:31:8c:db:1c:cc:8b:a8:d5:41:0d:f3:70:
c0:5b:1b:62:5b:2c:78:db:43:bc:90:b5:f4:2b:67:19:44:26:
e4:8c:cb:75:85:e2:b9:95:be:14:b8:4e:c7:bf:53:eb:7d:3a:
08:61:f7:9d:7f:ab:fc:88:e9:50:31:aa:d2:30:8f:28:44:43:
a5:53:8b:bf:de:e0:b7:a7:6c:4e:1c:f1:ae:b8:16:04:a4:25:
20:e3:54:57:e2:c1:11:5b:f7:2c:b8:e8:55:02:90:52:27:b8:
f5:30:5f:f2:1c:30:0c:1e:53:7b:88:58:7c:af:ec:4f:73:18:
5c:56:4c:2b:a7:83:1f:c1:6d:a9:4a:a3:2f:0d:5e:d4:1d:7b:
4f:29:35:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:46:05 2026 by rpki-client