Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/bdb427-3851-4eab-8d73-83275a8584d6/1/CDpytJ1bIXldvPM3ElFKMDPL1NM.mft
File: CDpytJ1bIXldvPM3ElFKMDPL1NM.mft (raw, json)
Hash identifier: 2hcqXzQHdJ/xpEtKNOpJEoV9u3Bc00VHd+7Acgkuba4=
Subject key identifier: B2:72:CD:11:F1:2A:C1:89:EF:3E:50:27:CF:95:EE:E1:D8:34:9F:EF
Authority key identifier: 08:3A:72:B4:9D:5B:21:79:5D:BC:F3:37:12:51:4A:30:33:CB:D4:D3
Certificate issuer: /CN=083a72b49d5b21795dbcf33712514a3033cbd4d3
Certificate serial: 01A0CE91D644CFB5ECF89884271AD5B6E01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDpytJ1bIXldvPM3ElFKMDPL1NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bdb427-3851-4eab-8d73-83275a8584d6/1/CDpytJ1bIXldvPM3ElFKMDPL1NM.mft
Manifest number: 0164
Signing time: Wed 23 Sep 2026 14:00:59 +0000
Manifest this update: Wed 23 Sep 2026 14:00:59 +0000
Manifest next update: Thu 24 Sep 2026 14:00:59 +0000
Files and hashes: 1: CDpytJ1bIXldvPM3ElFKMDPL1NM.crl (hash: lFsTtWpkvyGhSySH80hZ6OHLWn1ZBuAvYf1AfA6D9cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bdb427-3851-4eab-8d73-83275a8584d6/1/CDpytJ1bIXldvPM3ElFKMDPL1NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bdb427-3851-4eab-8d73-83275a8584d6/1/CDpytJ1bIXldvPM3ElFKMDPL1NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDpytJ1bIXldvPM3ElFKMDPL1NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:d6:44:cf:b5:ec:f8:98:84:27:1a:d5:b6:e0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083a72b49d5b21795dbcf33712514a3033cbd4d3
Validity
Not Before: Sep 23 14:00:59 2026 GMT
Not After : Sep 24 14:00:59 2026 GMT
Subject: CN=b272cd11f12ac189ef3e5027cf95eee1d8349fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:89:d0:18:89:a1:6a:d1:b1:8c:05:44:31:7e:
34:3e:4d:92:11:ce:5a:70:ab:95:93:c0:ba:39:40:
53:bc:44:c4:b2:d8:3c:78:dd:b4:8a:32:93:ae:f0:
43:6e:02:3b:8d:3f:ff:d7:10:77:70:a1:f3:36:b3:
0c:b0:6b:c9:d8:05:98:9f:6d:fb:6d:77:53:d6:89:
6c:39:06:4d:c4:07:91:bd:2d:6f:da:b7:e5:3b:18:
f7:5d:51:83:a5:35:36:72:67:77:a5:a1:51:3f:b4:
96:94:c5:cd:8e:4f:c2:68:7d:09:05:82:2d:3a:a4:
62:e0:81:e5:b3:4a:6e:1b:c6:dd:6e:0f:80:ea:b3:
63:fb:ee:1a:c5:43:e1:e0:81:ef:e6:9e:13:e7:05:
62:6d:c8:2b:ed:e0:60:9a:38:0c:3c:ae:6b:cb:59:
12:9f:65:21:e0:a3:10:36:db:fa:fb:86:72:96:56:
d3:0d:96:17:36:14:c4:71:a0:9f:57:a6:d1:12:3b:
66:45:c1:87:4d:f6:20:ac:b7:6a:68:f4:c5:f8:f6:
2c:7a:67:94:ce:49:ab:a1:93:ae:0b:69:68:be:84:
9b:0d:70:1d:ef:ac:f3:4c:ff:14:0a:f3:cb:7c:30:
9f:c8:ef:ce:50:f6:03:5c:48:35:0f:08:c8:9c:a4:
e7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:72:CD:11:F1:2A:C1:89:EF:3E:50:27:CF:95:EE:E1:D8:34:9F:EF
X509v3 Authority Key Identifier:
keyid:08:3A:72:B4:9D:5B:21:79:5D:BC:F3:37:12:51:4A:30:33:CB:D4:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDpytJ1bIXldvPM3ElFKMDPL1NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bdb427-3851-4eab-8d73-83275a8584d6/1/CDpytJ1bIXldvPM3ElFKMDPL1NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bdb427-3851-4eab-8d73-83275a8584d6/1/CDpytJ1bIXldvPM3ElFKMDPL1NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:11:15:81:eb:7e:c9:9c:e1:a1:a7:eb:cc:2e:5c:19:34:6f:
66:4d:f3:5a:6f:07:bf:19:88:43:53:90:0f:cf:c0:46:32:b5:
a0:43:8a:b8:da:3c:27:77:1a:31:09:32:f4:9d:33:05:fa:01:
ef:d8:4a:66:c2:42:49:ce:f0:43:02:82:4f:a2:9b:3d:5e:ef:
e8:8f:ae:cb:9e:a2:41:cb:cb:07:b1:f5:76:e7:21:89:18:9f:
84:a3:71:f3:fc:f5:6f:07:21:52:d2:ff:af:fe:38:12:38:88:
6b:e0:b3:24:a7:f2:b8:8d:70:5d:d7:eb:5e:25:ce:46:92:35:
be:66:cb:c9:48:7a:78:eb:23:ba:05:ef:94:c1:4a:63:ed:c7:
98:96:8b:35:62:b5:5b:68:59:a9:93:72:19:db:70:5b:6c:5d:
a9:d9:61:f7:ca:a1:25:f0:fe:17:9c:83:88:de:5f:58:c4:c4:
6a:ca:26:83:d8:ef:bc:c3:75:03:da:a1:5d:fd:d5:0c:09:7a:
cb:fa:10:62:d7:a5:84:07:1b:9b:55:e9:ee:31:d9:20:86:d0:
65:3e:c2:2e:6b:3d:7f:43:37:f5:5f:53:b2:d5:c2:6d:fe:1e:
af:a1:47:7e:04:2b:6d:0a:88:da:57:af:27:79:b2:75:18:15:
d7:bc:9d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:11:42 2026 by rpki-client