Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
File: CdCil56bZlLWG5Ad1VoZKNv9z20.mft (raw, json)
Hash identifier: Oooa0WLK2TNOm86n10UEyeEHAz8pqxbPSBJpWmtXt3A=
Subject key identifier: E9:FD:F9:7C:B9:BD:E1:D5:61:26:C6:96:64:40:5F:17:36:31:FE:33
Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Certificate serial: 019DA2D34B95882E18239D5822F13D041E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
Manifest number: 18CB
Signing time: Sat 18 Apr 2026 23:00:49 +0000
Manifest this update: Sat 18 Apr 2026 23:00:49 +0000
Manifest next update: Sun 19 Apr 2026 23:00:49 +0000
Files and hashes: 1: CdCil56bZlLWG5Ad1VoZKNv9z20.crl (hash: STw/NrebyyNyVR8D1C2YwQyZY8atD+P8KSI9kx0c1U0=)
2: NmgrOBcP0tgFCTOWcRYJnixwDJY.roa (hash: Ao15E11G2dQ+8WLi/IRmXPfGBQ5eaUZAO3CZk8b1evU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:4b:95:88:2e:18:23:9d:58:22:f1:3d:04:1e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Validity
Not Before: Apr 18 23:00:49 2026 GMT
Not After : Apr 19 23:00:49 2026 GMT
Subject: CN=e9fdf97cb9bde1d56126c69664405f173631fe33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8d:6b:22:cf:5b:25:e2:bd:92:63:ce:88:cb:
6f:1a:20:57:81:f7:0e:b4:7b:79:1c:3e:3e:01:e8:
64:b9:ce:18:b3:33:67:bd:8b:0e:3d:69:c3:f7:30:
64:3a:c8:85:91:76:5a:66:c9:a0:96:3a:01:d1:31:
67:a2:78:89:a0:83:c3:59:b1:54:ce:b1:74:4c:b2:
b8:2e:96:74:d2:f4:21:72:f9:e4:e6:a1:69:88:0f:
94:67:e1:74:11:e3:a1:4c:32:ef:45:0f:43:92:e7:
63:de:d2:61:e9:40:28:67:a9:ba:f8:71:bc:43:16:
84:75:e1:2d:4f:71:3f:a7:48:35:15:a4:9a:8e:88:
a3:a6:5a:41:ef:88:9f:f6:36:4a:49:11:90:5d:0a:
f7:94:57:e5:34:c0:14:1f:f5:56:49:ff:d6:fd:01:
fd:53:a5:b3:43:87:24:e0:7a:17:f6:a3:de:aa:d3:
1b:ab:c1:1e:c1:60:3e:ae:a6:c4:ca:67:3d:17:43:
8c:b5:c6:0e:7e:96:57:8e:07:55:a2:0d:38:e1:2f:
9d:f5:d5:b3:41:ec:5a:17:82:d1:ce:6a:ec:87:d5:
71:2e:8a:3e:03:6c:8e:8b:55:cf:fd:e7:e0:30:82:
f7:9b:2a:d9:d6:7b:ae:67:6d:1a:71:7a:38:55:8a:
fe:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FD:F9:7C:B9:BD:E1:D5:61:26:C6:96:64:40:5F:17:36:31:FE:33
X509v3 Authority Key Identifier:
keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e2:b2:05:cb:92:89:a2:e3:67:49:42:ea:37:a7:62:cc:9b:
9a:33:f5:46:09:fc:8d:17:a2:af:c7:31:a8:48:a4:75:30:a2:
18:58:4c:60:f9:5e:77:7c:a0:02:d7:47:e5:d7:16:ab:86:a8:
cd:b0:8e:8a:7a:c0:c1:7f:38:bd:df:9c:32:07:a0:23:b4:37:
da:7b:87:3f:78:7f:55:89:e0:67:b8:d0:dc:00:fa:37:9b:f3:
67:a8:48:92:7e:5d:09:6b:4c:c6:e3:80:be:1f:b0:fe:ca:3a:
80:5c:f3:cb:54:a6:c6:a9:81:e8:b4:92:e1:d7:ba:14:b3:82:
0c:d5:39:29:13:d5:38:1d:33:27:8f:13:c1:90:e7:98:54:87:
79:e1:62:cd:21:64:07:19:76:3d:39:e5:f0:18:20:d1:8b:ea:
50:0f:a3:fa:fc:33:96:67:60:23:8c:e5:45:8f:dc:09:ae:d3:
9f:bd:a7:d2:fe:e3:ee:ad:52:58:87:97:5a:88:49:61:3e:3e:
bd:3a:d9:98:63:03:74:37:13:70:05:b7:4e:b4:c1:fe:8b:03:
3e:ac:1b:3d:d7:41:a1:24:62:51:85:04:9d:35:fc:40:29:03:
1c:35:77:e3:a1:91:b6:a4:e6:bc:fa:23:7f:2b:69:81:d1:20:
a4:53:89:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:43:42 2026 by rpki-client