Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/83709f-9b03-45c2-b170-b52d61cd5f00/1/CdHrJzMjVUBDlgDZXBF4Qc2Kb9I.mft
File: CdHrJzMjVUBDlgDZXBF4Qc2Kb9I.mft (raw, json)
Hash identifier: 9RF5hOPV73J7SD0VbG6FnyWhBTKTZ9fg59o9WhFLqVc=
Subject key identifier: 41:C0:3B:C2:18:61:C3:09:DA:41:9A:35:E3:47:18:E8:A0:0E:DF:33
Authority key identifier: 09:D1:EB:27:33:23:55:40:43:96:00:D9:5C:11:78:41:CD:8A:6F:D2
Certificate issuer: /CN=09d1eb2733235540439600d95c117841cd8a6fd2
Certificate serial: 01A0D192C412D2B26368E1F10DA2E062FA53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdHrJzMjVUBDlgDZXBF4Qc2Kb9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/83709f-9b03-45c2-b170-b52d61cd5f00/1/CdHrJzMjVUBDlgDZXBF4Qc2Kb9I.mft
Manifest number: 76
Signing time: Thu 24 Sep 2026 04:00:51 +0000
Manifest this update: Thu 24 Sep 2026 04:00:51 +0000
Manifest next update: Fri 25 Sep 2026 04:00:51 +0000
Files and hashes: 1: CdHrJzMjVUBDlgDZXBF4Qc2Kb9I.crl (hash: tMdc7JZW74k7n33YVFsDTxy10vmiOYGKOTaAy4YbZ9M=)
2: DFatI-fa2bP3viYsjB14AzSsTC8.roa (hash: vSqr0xRZG9fh1VXfYFbTiEYLZgLbzG6fPsC+ESzrS/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/83709f-9b03-45c2-b170-b52d61cd5f00/1/CdHrJzMjVUBDlgDZXBF4Qc2Kb9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/83709f-9b03-45c2-b170-b52d61cd5f00/1/CdHrJzMjVUBDlgDZXBF4Qc2Kb9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdHrJzMjVUBDlgDZXBF4Qc2Kb9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:c4:12:d2:b2:63:68:e1:f1:0d:a2:e0:62:fa:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d1eb2733235540439600d95c117841cd8a6fd2
Validity
Not Before: Sep 24 04:00:51 2026 GMT
Not After : Sep 25 04:00:51 2026 GMT
Subject: CN=41c03bc21861c309da419a35e34718e8a00edf33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9c:c2:0f:a2:58:1d:9e:e7:87:d2:b5:47:e5:
48:96:be:44:b3:cd:91:31:e2:49:1e:c1:2c:8d:37:
ac:4e:b4:51:1a:02:3b:97:79:bc:b8:78:84:31:36:
d6:e8:e4:4e:7c:fc:67:c2:c6:dc:27:92:26:81:20:
95:29:a8:91:63:85:51:d8:86:16:27:be:42:da:ae:
ea:e9:b9:68:ed:30:47:f0:5c:9b:9f:c0:f8:eb:bf:
6d:84:8c:f5:a9:f4:4f:04:d3:e6:81:bc:e3:44:08:
76:f8:51:99:7b:62:47:e2:da:c0:ae:7f:ce:65:32:
dd:23:d4:63:13:68:02:8c:ef:e6:30:db:da:4f:d8:
df:33:32:2b:43:c7:40:79:ad:41:bb:49:97:3e:19:
1c:d5:b0:ac:7c:c3:54:fe:cf:b0:9c:43:68:6f:27:
1e:fb:67:5e:03:89:2e:32:93:dc:fb:a4:de:ee:f5:
53:c6:00:16:0a:ce:f9:81:f3:d4:88:68:1c:2c:af:
d2:3b:7c:43:ac:e1:1e:f2:fb:67:f9:7d:e6:42:68:
6a:a4:7a:c6:5b:21:1f:c6:28:a5:2a:78:7c:ed:0d:
f6:27:d4:3e:cb:3e:88:e1:0a:80:43:43:da:8d:06:
d7:57:f7:ad:22:5d:45:49:71:36:2b:86:d0:6a:c7:
a4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C0:3B:C2:18:61:C3:09:DA:41:9A:35:E3:47:18:E8:A0:0E:DF:33
X509v3 Authority Key Identifier:
keyid:09:D1:EB:27:33:23:55:40:43:96:00:D9:5C:11:78:41:CD:8A:6F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdHrJzMjVUBDlgDZXBF4Qc2Kb9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/83709f-9b03-45c2-b170-b52d61cd5f00/1/CdHrJzMjVUBDlgDZXBF4Qc2Kb9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/83709f-9b03-45c2-b170-b52d61cd5f00/1/CdHrJzMjVUBDlgDZXBF4Qc2Kb9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5b:b2:ba:fc:37:a0:77:a6:86:5e:87:a9:c8:ab:85:63:c6:
28:64:b2:4f:38:c6:63:b0:44:c8:66:92:f6:fb:b1:4f:84:b5:
9e:8c:47:ed:16:26:4e:a1:27:19:38:55:5f:56:60:a2:e1:a2:
41:e9:f0:92:a4:d6:3e:49:6a:be:b0:35:b1:f6:be:08:7b:0f:
8d:f2:05:f0:fd:79:24:ee:1e:95:e6:18:23:e9:d4:c6:6e:06:
f6:5e:3f:3d:8f:83:04:a6:f8:cc:f2:df:ee:01:e0:f8:52:c1:
ca:81:d7:26:88:8a:bf:e7:5b:f1:4e:5e:09:ec:2b:e2:ce:cf:
44:47:e2:a2:83:fb:35:34:23:a1:7e:05:8c:6d:da:5e:a4:2a:
ba:c8:d5:87:b2:ff:80:e9:de:10:79:5a:95:a4:6d:fa:b0:f1:
ed:3f:48:6e:58:6c:65:29:64:e4:99:46:c6:18:b6:68:c6:d7:
11:52:62:c2:da:f4:0a:7b:f3:e8:26:05:d0:4f:2b:89:22:bd:
19:70:4f:35:71:83:79:d1:73:4d:ea:d9:17:de:92:f0:89:6c:
f4:ef:03:89:2d:e5:48:e2:57:09:8e:8b:7a:82:ae:2c:8a:80:
13:fb:be:bc:05:f0:c3:81:10:d0:e4:1e:48:b6:d3:d4:b2:6f:
a4:08:bf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:17:18 2026 by rpki-client