Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/CdjmULbaUsbIZiv1walRQXDSo0I.mft
File: CdjmULbaUsbIZiv1walRQXDSo0I.mft (raw, json)
Hash identifier: 67VlvU8idvk9tahsiMBhNNdPOmSC6KUNzCPESiOBuxU=
Subject key identifier: 24:71:B3:77:56:C8:4A:1A:9D:E8:17:8F:3F:9C:BB:BB:9C:FD:11:5F
Authority key identifier: 09:D8:E6:50:B6:DA:52:C6:C8:66:2B:F5:C1:A9:51:41:70:D2:A3:42
Certificate issuer: /CN=09d8e650b6da52c6c8662bf5c1a9514170d2a342
Certificate serial: 01A0D7CC82D0156C7BF3623C15375D0A5035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdjmULbaUsbIZiv1walRQXDSo0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/CdjmULbaUsbIZiv1walRQXDSo0I.mft
Manifest number: E9
Signing time: Fri 25 Sep 2026 09:01:39 +0000
Manifest this update: Fri 25 Sep 2026 09:01:39 +0000
Manifest next update: Sat 26 Sep 2026 09:01:39 +0000
Files and hashes: 1: CdjmULbaUsbIZiv1walRQXDSo0I.crl (hash: Y7EG5Mm2RsrXfBMzGG2xVHiNyvHCQej8lgCpFKrvJ1Q=)
2: KCxxupIcEQ18mDe3dOfL72pZbbY.roa (hash: mX9QZqD4f5AL6HtDS+tdAFAEMdX2qaM26X073LH1lkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/CdjmULbaUsbIZiv1walRQXDSo0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/CdjmULbaUsbIZiv1walRQXDSo0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdjmULbaUsbIZiv1walRQXDSo0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:82:d0:15:6c:7b:f3:62:3c:15:37:5d:0a:50:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d8e650b6da52c6c8662bf5c1a9514170d2a342
Validity
Not Before: Sep 25 09:01:39 2026 GMT
Not After : Sep 26 09:01:39 2026 GMT
Subject: CN=2471b37756c84a1a9de8178f3f9cbbbb9cfd115f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ab:4f:37:72:b4:d0:62:1d:35:92:19:16:07:
e5:28:7e:6b:2b:90:8b:e9:9c:6e:5f:99:2b:b9:9d:
72:6d:50:40:4e:86:ff:20:b1:67:0c:f6:11:da:2c:
f6:cf:0e:ee:46:49:f9:a6:c4:70:e3:23:17:18:7c:
3f:5c:b8:82:84:26:7c:ed:1d:bd:2d:86:a7:87:e7:
ba:f4:e5:5d:6e:a3:57:b8:63:89:35:9e:21:b6:61:
9b:5c:a3:8b:8d:e1:81:70:6a:70:13:95:23:bd:85:
63:23:a2:ae:d9:1a:16:a5:1e:59:41:c5:c1:e6:84:
ae:85:36:bf:f3:bf:14:00:b1:fe:48:ff:f7:17:25:
d4:88:5a:30:84:b9:01:7c:ee:44:40:f5:cc:d6:a0:
cd:17:37:bc:b4:fa:02:ee:28:82:99:e6:66:5c:ca:
df:32:f4:58:d3:1b:b6:d7:fa:22:f1:15:5f:e2:6f:
75:5d:3d:bd:71:3e:95:7a:8c:b7:02:7b:d7:54:08:
aa:dc:94:98:a7:9e:b0:b6:fa:c4:31:2c:74:be:30:
8c:c7:4b:e8:e8:ba:b0:17:2d:56:c7:cf:b6:f6:13:
a1:24:87:ba:1e:ee:97:fe:38:63:f9:6f:bb:5f:77:
05:2c:3f:00:82:7a:ba:dc:79:48:d7:3c:ac:75:4c:
68:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:71:B3:77:56:C8:4A:1A:9D:E8:17:8F:3F:9C:BB:BB:9C:FD:11:5F
X509v3 Authority Key Identifier:
keyid:09:D8:E6:50:B6:DA:52:C6:C8:66:2B:F5:C1:A9:51:41:70:D2:A3:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdjmULbaUsbIZiv1walRQXDSo0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/CdjmULbaUsbIZiv1walRQXDSo0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/CdjmULbaUsbIZiv1walRQXDSo0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:96:72:33:be:6c:d0:13:e4:51:dc:f3:93:c2:61:4d:2e:a9:
02:0d:cd:41:97:e9:76:0a:51:c2:18:67:4f:bc:e1:16:54:4f:
42:98:37:a8:cd:00:35:9f:29:0b:6f:5d:a7:cf:36:3c:c8:ef:
fe:37:1b:0e:19:41:f5:b0:0a:15:dd:99:f3:1f:bb:75:47:6b:
ba:da:f6:59:61:01:2a:aa:0b:9b:91:b7:3b:8f:e3:1f:65:88:
07:83:22:b6:43:7e:f3:26:d7:bb:51:ba:97:6e:69:48:9b:9f:
65:34:0a:57:e0:f5:0e:14:2a:d1:21:f8:bb:de:56:ef:e1:a8:
60:9c:5b:b4:23:bd:d5:db:09:6e:23:94:73:0b:13:98:d9:1a:
6c:c6:70:61:05:4d:4c:0c:f3:af:87:19:d1:61:d5:ed:e4:f5:
79:a8:53:9a:4e:2c:b5:e1:c0:b3:5c:21:a2:07:0e:ce:c4:20:
ee:b4:6c:00:a8:3b:a3:f0:97:f3:02:1a:4b:47:8a:a0:a3:64:
4a:08:11:76:e8:61:82:de:a4:be:c1:43:3a:df:3c:34:6c:b1:
75:8f:35:8d:10:dc:ea:d6:22:f7:6e:a2:36:9a:d2:95:c6:60:
e0:77:0b:ef:f5:b9:0e:ce:a5:b7:0b:92:28:fd:5b:c6:d7:e0:
11:62:eb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:48:57 2026 by rpki-client