Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/CdjmULbaUsbIZiv1walRQXDSo0I.mft
File: CdjmULbaUsbIZiv1walRQXDSo0I.mft (raw, json)
Hash identifier: S828AqEMk5F93aDqi6GIQPVWnPWa0qr+CzQ1y3e2yZY=
Subject key identifier: 47:4D:C9:CC:76:11:8C:58:89:CD:F2:FF:2A:50:AF:DF:AB:5E:89:A2
Authority key identifier: 09:D8:E6:50:B6:DA:52:C6:C8:66:2B:F5:C1:A9:51:41:70:D2:A3:42
Certificate issuer: /CN=09d8e650b6da52c6c8662bf5c1a9514170d2a342
Certificate serial: 01A1E05F566A95186EE22C11B11F1637DD65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdjmULbaUsbIZiv1walRQXDSo0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/CdjmULbaUsbIZiv1walRQXDSo0I.mft
Manifest number: 0172
Signing time: Sun 15 Nov 2026 18:01:46 +0000
Manifest this update: Sun 15 Nov 2026 18:01:46 +0000
Manifest next update: Mon 16 Nov 2026 18:01:46 +0000
Files and hashes: 1: CdjmULbaUsbIZiv1walRQXDSo0I.crl (hash: pBRPmJUoxfOxu4BKBu08tShohkTldGTRTbqlvTut09I=)
2: KCxxupIcEQ18mDe3dOfL72pZbbY.roa (hash: mX9QZqD4f5AL6HtDS+tdAFAEMdX2qaM26X073LH1lkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/CdjmULbaUsbIZiv1walRQXDSo0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/CdjmULbaUsbIZiv1walRQXDSo0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdjmULbaUsbIZiv1walRQXDSo0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5f:56:6a:95:18:6e:e2:2c:11:b1:1f:16:37:dd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d8e650b6da52c6c8662bf5c1a9514170d2a342
Validity
Not Before: Nov 15 18:01:46 2026 GMT
Not After : Nov 16 18:01:46 2026 GMT
Subject: CN=474dc9cc76118c5889cdf2ff2a50afdfab5e89a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6a:44:2c:c7:43:53:07:9f:13:7e:bc:76:98:
fc:7b:cf:6f:f3:2e:44:7b:f0:a3:ad:62:7d:a7:11:
eb:3c:db:29:7b:6c:a7:29:dc:a6:c8:8d:0b:9a:1d:
cb:a6:b3:a7:b0:c3:3e:3f:16:21:f1:f4:97:7a:fb:
a8:80:66:45:33:fb:bf:4d:b0:67:2c:60:72:e3:a2:
b4:39:eb:2c:57:e7:98:86:09:93:1d:00:f8:08:08:
79:17:ab:04:0d:0c:5c:47:cf:da:54:22:4a:0d:65:
97:72:8b:48:0a:44:e5:d9:3c:77:61:5a:ab:9e:50:
4f:12:b5:32:21:13:7e:12:3b:fa:f4:9e:bc:b1:ea:
6c:ef:22:21:d4:f9:51:9d:8d:00:5c:79:0d:98:29:
b1:57:03:09:f0:1c:3e:b0:c7:02:7d:59:2a:e9:0e:
81:68:47:48:55:5f:43:fd:4a:b1:11:4f:15:ce:59:
f1:d9:ad:62:d4:78:89:c6:e8:ed:53:a2:c2:16:b8:
10:dc:4b:53:31:43:8e:ab:48:0a:31:6b:30:5e:d9:
5e:95:77:76:6b:6c:81:5d:b7:e3:7d:cc:97:3d:77:
3c:00:d4:e0:2a:05:d7:b0:f2:0c:bb:24:a0:30:d1:
39:0e:e4:19:eb:e1:36:ff:e0:29:d7:69:9f:cd:97:
fe:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4D:C9:CC:76:11:8C:58:89:CD:F2:FF:2A:50:AF:DF:AB:5E:89:A2
X509v3 Authority Key Identifier:
keyid:09:D8:E6:50:B6:DA:52:C6:C8:66:2B:F5:C1:A9:51:41:70:D2:A3:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdjmULbaUsbIZiv1walRQXDSo0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/CdjmULbaUsbIZiv1walRQXDSo0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/CdjmULbaUsbIZiv1walRQXDSo0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4d:94:60:e4:c8:ae:b1:b3:40:f5:1f:73:f4:1f:ed:7e:c8:
18:4c:65:68:3c:c7:76:8b:2d:49:b0:eb:4e:82:28:a2:a5:3a:
6a:0b:9c:d9:4e:3d:75:b6:2c:65:70:cc:04:44:07:0c:10:2d:
85:8a:28:08:0b:b2:92:20:3b:06:45:a6:c1:d6:23:72:57:8c:
63:2b:81:73:d1:5e:0c:50:36:35:fd:53:f0:da:dd:a6:60:08:
69:5b:a9:36:bb:41:8b:97:47:3b:f2:89:e2:51:84:28:80:ac:
64:02:98:dd:d2:aa:d5:2c:03:47:ce:f9:bb:cb:8c:c9:f4:b0:
81:59:c7:a4:29:04:35:fa:64:54:57:90:2a:9e:42:f9:7c:29:
69:80:bb:11:93:fb:93:b3:37:42:ec:47:09:ed:20:c6:e5:6f:
0a:0b:ba:bf:24:4d:f9:dd:67:1e:ad:8a:7e:0c:91:29:8c:d8:
43:e8:7e:b0:ba:b6:0b:4c:b0:83:0d:f3:bd:2c:ba:0d:e2:2f:
61:e3:21:7d:2d:b0:c1:10:aa:20:35:23:2f:05:4b:41:9e:ee:
c0:2d:00:53:b9:7d:4d:9b:36:20:2b:63:25:b6:c1:62:c8:53:
4d:d6:df:d7:ce:9e:88:01:9d:69:80:8c:3c:20:db:8e:b4:e0:
57:59:72:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:15:45 2026 by rpki-client