Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bdb427-3851-4eab-8d73-83275a8584d6/1/CDpytJ1bIXldvPM3ElFKMDPL1NM.mft
File: CDpytJ1bIXldvPM3ElFKMDPL1NM.mft (raw, json)
Hash identifier: dKnC/jbB9F0sECodz3Hl+yOpidn5LTOPXXYeHv8drd4=
Subject key identifier: F3:43:2E:A8:B5:DA:21:EE:4C:E4:E8:F4:B8:3A:0C:2D:00:83:02:D2
Authority key identifier: 08:3A:72:B4:9D:5B:21:79:5D:BC:F3:37:12:51:4A:30:33:CB:D4:D3
Certificate issuer: /CN=083a72b49d5b21795dbcf33712514a3033cbd4d3
Certificate serial: 019F8FEC2E6BA04250BD4D3398092E518D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDpytJ1bIXldvPM3ElFKMDPL1NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bdb427-3851-4eab-8d73-83275a8584d6/1/CDpytJ1bIXldvPM3ElFKMDPL1NM.mft
Manifest number: BF
Signing time: Thu 23 Jul 2026 17:00:47 +0000
Manifest this update: Thu 23 Jul 2026 17:00:47 +0000
Manifest next update: Fri 24 Jul 2026 17:00:47 +0000
Files and hashes: 1: CDpytJ1bIXldvPM3ElFKMDPL1NM.crl (hash: HzuVf+1xk4YMudVdhVJTllTUieKu/jEf/PDyKXOeNiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bdb427-3851-4eab-8d73-83275a8584d6/1/CDpytJ1bIXldvPM3ElFKMDPL1NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bdb427-3851-4eab-8d73-83275a8584d6/1/CDpytJ1bIXldvPM3ElFKMDPL1NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDpytJ1bIXldvPM3ElFKMDPL1NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:2e:6b:a0:42:50:bd:4d:33:98:09:2e:51:8d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083a72b49d5b21795dbcf33712514a3033cbd4d3
Validity
Not Before: Jul 23 17:00:47 2026 GMT
Not After : Jul 24 17:00:47 2026 GMT
Subject: CN=f3432ea8b5da21ee4ce4e8f4b83a0c2d008302d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3a:58:b5:08:9c:8f:19:a4:8c:1b:f3:25:00:
c3:45:55:c6:dc:d0:ba:3e:02:7e:a5:c4:b6:87:58:
54:34:55:1b:e1:ec:91:a7:0c:9d:24:68:e4:7b:0a:
f8:ac:ce:59:bc:b0:ea:0a:e2:4a:00:b4:df:4f:3e:
fa:3c:71:02:0c:55:9c:9f:62:a8:7a:ce:79:fb:44:
6a:39:c1:a5:cb:41:24:0c:96:e2:0f:e3:58:78:5a:
f2:8f:8a:f0:c3:b1:0f:91:2d:49:e1:8c:2b:af:35:
73:af:90:77:62:87:30:92:ec:41:78:72:f0:a3:90:
33:ae:3e:3f:25:a9:b3:c5:a5:b0:d2:84:f7:d7:98:
c8:6f:4e:d6:98:18:76:3b:50:58:4c:9d:1c:35:94:
eb:80:42:35:7d:35:3f:bd:24:da:9c:82:4c:dd:c9:
7c:37:99:63:6f:e8:77:32:ae:48:f6:41:6a:a0:0f:
9c:59:b8:77:ef:d0:32:42:c0:3e:7f:63:42:3f:9f:
82:ce:77:2e:00:82:53:ed:ee:df:74:c2:b9:f6:fc:
34:12:27:08:a7:4b:9a:2b:d4:15:0c:74:50:d2:72:
75:2b:8f:20:cc:98:b3:8f:dc:87:24:ec:6a:a1:12:
8b:8d:d6:53:2f:d9:5e:ea:38:17:7a:9e:cd:61:9d:
f0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:43:2E:A8:B5:DA:21:EE:4C:E4:E8:F4:B8:3A:0C:2D:00:83:02:D2
X509v3 Authority Key Identifier:
keyid:08:3A:72:B4:9D:5B:21:79:5D:BC:F3:37:12:51:4A:30:33:CB:D4:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDpytJ1bIXldvPM3ElFKMDPL1NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bdb427-3851-4eab-8d73-83275a8584d6/1/CDpytJ1bIXldvPM3ElFKMDPL1NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bdb427-3851-4eab-8d73-83275a8584d6/1/CDpytJ1bIXldvPM3ElFKMDPL1NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:24:5a:70:c1:26:b3:95:87:45:ae:22:d8:d2:d0:fa:d4:ca:
72:8d:e1:20:31:d8:fc:88:5d:ca:19:0a:55:8e:04:31:ec:29:
e3:4e:36:3f:a2:ef:35:ed:f1:3d:71:b0:4c:24:68:bc:a0:0f:
54:dc:b3:be:a6:61:c6:47:8d:67:bb:11:eb:b3:c2:ba:94:11:
44:09:86:24:05:00:35:9b:7b:f0:a1:86:09:9e:e2:bf:87:21:
17:ad:93:b0:60:12:a2:09:8b:17:17:27:e0:b0:50:62:b8:81:
48:6e:e9:b3:42:2a:89:1f:38:26:dd:b4:b3:cf:56:10:7d:32:
2e:bb:75:63:f7:d0:27:2f:b6:34:7b:ca:dd:91:15:41:e3:93:
c5:ce:10:80:ed:c2:98:cd:56:50:b6:3d:8d:6e:9d:71:ce:1e:
23:99:18:f5:5d:12:39:79:39:db:5f:c3:c5:71:bc:b8:e9:04:
61:a1:79:15:f8:f7:d8:33:d5:9e:65:42:05:1b:a2:c8:22:5e:
2b:75:ba:69:aa:35:ed:66:28:50:64:15:c5:11:98:84:5d:2c:
ed:25:ee:72:f6:54:68:42:6d:db:fb:2a:cb:bc:ff:91:9e:26:
77:cd:30:b5:c0:c8:df:04:f4:8f:c2:79:9a:19:b6:42:5b:3e:
9a:c4:02:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:00:55 2026 by rpki-client