Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
File: CdCil56bZlLWG5Ad1VoZKNv9z20.mft (raw, json)
Hash identifier: NXJgCOzEq9ccJ6ROSzRzZcnta6f5dGQ0actPIvfdxzc=
Subject key identifier: 1F:D9:7A:10:25:BB:AF:7D:3D:71:86:F1:04:39:72:93:1B:BF:C7:26
Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Certificate serial: 019FAA510033E7C1B26E314609D1B501D26F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
Manifest number: 19D8
Signing time: Tue 28 Jul 2026 20:01:02 +0000
Manifest this update: Tue 28 Jul 2026 20:01:02 +0000
Manifest next update: Wed 29 Jul 2026 20:01:02 +0000
Files and hashes: 1: CdCil56bZlLWG5Ad1VoZKNv9z20.crl (hash: ahm0nKXg86d4FM8yG4bFI2IyYW0XxabDBv2duDF9Ep0=)
2: NmgrOBcP0tgFCTOWcRYJnixwDJY.roa (hash: Ao15E11G2dQ+8WLi/IRmXPfGBQ5eaUZAO3CZk8b1evU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:51:00:33:e7:c1:b2:6e:31:46:09:d1:b5:01:d2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Validity
Not Before: Jul 28 20:01:02 2026 GMT
Not After : Jul 29 20:01:02 2026 GMT
Subject: CN=1fd97a1025bbaf7d3d7186f1043972931bbfc726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fe:70:2a:83:c5:f9:b7:ff:18:3d:33:ea:e2:
cf:ac:84:78:9e:67:05:cf:66:96:17:de:65:b5:b8:
d9:1f:d9:8c:a0:2b:31:01:c0:8c:1f:19:f8:11:a8:
a4:31:22:43:36:cf:d8:6c:b7:e3:56:b4:07:fe:9b:
60:81:e6:bc:ec:03:cd:d9:28:0d:f9:b2:c9:71:fa:
0e:b2:df:b7:ac:65:4d:ee:1c:36:0c:13:f0:8a:dd:
1d:7b:24:74:92:47:13:05:09:6f:91:db:17:dd:43:
5a:db:a1:8b:30:54:34:5d:ee:53:3a:73:e2:01:e9:
e0:84:40:06:a2:b5:05:ab:1b:77:15:8a:30:c5:79:
bd:f9:7d:14:18:1a:6a:9c:cd:b3:5e:21:7a:8e:4a:
97:e8:58:76:4c:45:9b:65:86:5f:f2:c2:b6:fd:b0:
8c:d9:bf:9b:4e:8a:b7:3b:49:dc:84:52:e3:af:11:
2e:31:35:2e:96:23:c9:b0:97:a9:2d:e2:51:e6:67:
a1:b0:e4:77:2d:e3:2f:dc:c4:f8:26:b1:ca:9a:e1:
5b:bf:da:06:b4:f2:26:76:77:df:3c:e2:08:4a:c7:
f1:43:a5:64:f0:15:47:32:11:bb:27:c7:52:8c:55:
b3:33:53:91:fb:71:34:10:7c:1b:fc:e8:4f:5c:21:
60:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D9:7A:10:25:BB:AF:7D:3D:71:86:F1:04:39:72:93:1B:BF:C7:26
X509v3 Authority Key Identifier:
keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:27:db:0d:5a:97:46:08:cc:4c:75:d5:b4:a1:1b:92:29:ab:
04:c2:b3:d0:36:9c:bf:8f:91:de:da:62:ff:a2:e5:23:44:c5:
aa:a3:3a:00:13:42:75:79:5d:15:7f:23:e2:1b:f5:ac:e2:33:
1e:e5:3c:1a:22:ec:a5:51:7b:01:05:3a:20:e6:34:ea:90:fa:
ad:e1:4f:19:dc:bd:58:62:0f:43:7b:a8:50:e6:1d:1e:9d:13:
48:cd:ec:0b:95:f9:86:6c:33:dc:8b:dd:47:bb:94:8f:80:eb:
da:d7:57:de:f5:f8:52:91:74:8e:ea:10:7c:04:e8:b8:10:16:
5f:3f:ec:29:5e:32:e3:65:97:74:d1:6e:33:ea:b5:5d:a5:20:
92:77:50:11:95:6b:50:3b:fd:e8:7a:f4:36:01:92:30:9e:dd:
af:c7:bd:7f:da:8e:08:ad:f0:a9:5d:91:0c:a2:6c:d4:66:2f:
b9:b2:2c:eb:8b:95:c8:2c:98:c4:da:12:cd:a3:55:7a:ad:f8:
75:ca:27:38:1f:53:2d:d4:fe:cc:b4:fb:bf:9d:31:91:ad:72:
06:a1:01:00:db:92:a6:74:2e:6d:ce:3d:48:7e:b4:d0:da:d9:
7d:42:3e:ed:9b:19:5a:4d:bd:0a:d4:ff:31:12:9d:f5:f5:c1:
4e:ed:42:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUQAz58GybjFGCdG1AdJvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZDBhMjk3OWU5YjY2NTJkNjFiOTAxZGQ1NWExOTI4ZGJm
ZGNmNmQwHhcNMjYwNzI4MjAwMTAyWhcNMjYwNzI5MjAwMTAyWjAzMTEwLwYDVQQD
EygxZmQ5N2ExMDI1YmJhZjdkM2Q3MTg2ZjEwNDM5NzI5MzFiYmZjNzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP5wKoPF+bf/GD0z6uLPrIR4nmcF
z2aWF95ltbjZH9mMoCsxAcCMHxn4EaikMSJDNs/YbLfjVrQH/ptggea87APN2SgN
+bLJcfoOst+3rGVN7hw2DBPwit0deyR0kkcTBQlvkdsX3UNa26GLMFQ0Xe5TOnPi
AenghEAGorUFqxt3FYowxXm9+X0UGBpqnM2zXiF6jkqX6Fh2TEWbZYZf8sK2/bCM
2b+bToq3O0nchFLjrxEuMTUuliPJsJepLeJR5mehsOR3LeMv3MT4JrHKmuFbv9oG
tPImdnffPOIISsfxQ6Vk8BVHMhG7J8dSjFWzM1OR+3E0EHwb/OhPXCFg4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/ZehAlu699PXGG8QQ5cpMbv8cmMB8GA1UdIwQY
MBaAFAnQopeem2ZS1huQHdVaGSjb/c9tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2RDaWw1NmJabExXRzVBZDFWb1pLTnY5ejIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84YzMzYzItNmY3Mi00MWI2LWE5ZTQt
MDlmNzNjMzU0ZTdjLzEvQ2RDaWw1NmJabExXRzVBZDFWb1pLTnY5ejIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS84YzMzYzItNmY3Mi00MWI2LWE5ZTQtMDlmNzNjMzU0ZTdj
LzEvQ2RDaWw1NmJabExXRzVBZDFWb1pLTnY5ejIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsCfbDVqX
RgjMTHXVtKEbkimrBMKz0Dacv4+R3tpi/6LlI0TFqqM6ABNCdXldFX8j4hv1rOIz
HuU8GiLspVF7AQU6IOY06pD6reFPGdy9WGIPQ3uoUOYdHp0TSM3sC5X5hmwz3Ivd
R7uUj4Dr2tdX3vX4UpF0juoQfATouBAWXz/sKV4y42WXdNFuM+q1XaUgkndQEZVr
UDv96Hr0NgGSMJ7dr8e9f9qOCK3wqV2RDKJs1GYvubIs64uVyCyYxNoSzaNVeq34
dconOB9TLdT+zLT7v50xka1yBqEBANuSpnQubc49SH600NrZfUI+7ZsZWk29CtT/
MRKd9fXBTu1Ceg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:53 2026 by rpki-client