Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
File: CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft (raw, json)
Hash identifier: dXRsIDLmksyPPeKuiLr3anZt0IdxZXngYys7YwFKss0=
Subject key identifier: A2:42:AF:E0:4B:2F:A0:65:2B:B3:78:0C:3C:7F:8F:0E:31:EE:35:A2
Authority key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
Certificate issuer: /CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Certificate serial: 019E1CB4DC3F8F4126F536CBBE74F66585CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
Manifest number: 0E69
Signing time: Tue 12 May 2026 15:01:15 +0000
Manifest this update: Tue 12 May 2026 15:01:15 +0000
Manifest next update: Wed 13 May 2026 15:01:15 +0000
Files and hashes: 1: 6NX7kHYLQEY_Fjy3vPy-MzWGuS0.roa (hash: QMXJPUTLlHe/t5S4J5pRp03CHJgFFci+ULIf4qsBmK8=)
2: CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl (hash: cBXOpdCu8sgyFskpGvpkTmBoeD7KLNkIEZEkYlN82gA=)
3: rKdvuJIJFgGPfjR9_tkt7GpYbuU.roa (hash: cOdZ/AGn383MF+NUE+R43rPhYLUIwbGM9+ozFG63CYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:dc:3f:8f:41:26:f5:36:cb:be:74:f6:65:85:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Validity
Not Before: May 12 15:01:15 2026 GMT
Not After : May 13 15:01:15 2026 GMT
Subject: CN=a242afe04b2fa0652bb3780c3c7f8f0e31ee35a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b1:32:c2:10:58:5a:16:ed:a8:5c:24:02:f3:
e1:4f:2a:3b:96:74:1e:c9:db:94:c4:28:15:35:cc:
d8:fa:76:7a:8b:85:3b:8d:0f:59:06:46:cc:a8:a6:
0e:97:5f:08:15:ea:23:4e:5e:e5:87:40:1b:c8:6e:
91:45:c9:c0:f8:5c:ce:53:55:8b:24:fc:8f:56:df:
11:aa:a4:00:92:f6:1d:6b:b3:68:22:27:f5:45:8e:
56:02:6d:f8:0a:4a:9d:5b:b2:f5:cc:37:29:77:b3:
b1:10:77:18:5f:d2:d0:2f:80:0e:2f:22:60:10:f6:
e8:06:75:4f:a4:01:f0:98:de:d3:7c:66:d2:28:9c:
83:c8:e8:e5:d6:12:70:33:b0:04:33:f4:e2:fd:2c:
a4:84:b9:9b:fd:2e:36:72:fd:0b:4a:9b:6d:7c:75:
73:e3:d3:75:2f:d8:4f:0a:29:76:ba:b4:ff:38:94:
8e:a8:a8:29:78:9d:94:30:25:e3:fc:30:e5:9b:99:
21:b6:3b:58:e2:72:27:76:63:fd:5b:35:43:21:54:
80:7f:28:2c:e6:bf:24:76:0f:35:72:c6:56:17:17:
29:2d:25:69:74:08:54:7c:11:87:de:8b:bc:ad:93:
ef:05:fb:17:bb:6e:1e:c1:04:a2:80:6e:86:e3:3f:
ed:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:42:AF:E0:4B:2F:A0:65:2B:B3:78:0C:3C:7F:8F:0E:31:EE:35:A2
X509v3 Authority Key Identifier:
keyid:09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:99:98:24:a8:11:78:5e:71:9a:69:25:98:fe:da:70:ae:fc:
3b:2f:7a:b3:08:89:fa:6e:04:53:c4:29:a1:50:0d:0c:e8:91:
0f:62:e3:ff:47:44:0f:44:b6:b3:81:4e:93:29:32:9d:4f:cf:
07:0f:88:76:37:de:fa:38:49:53:74:f3:d9:26:2f:47:31:b6:
ad:0d:2d:04:e8:93:ff:76:be:8f:88:d2:1d:a8:b6:70:6e:40:
cd:cc:32:42:01:5c:67:39:e0:db:4b:e1:6b:fb:74:ab:b5:c0:
8d:57:2f:5d:3b:97:b9:74:4b:57:5c:c5:77:1b:96:04:0d:48:
a5:30:12:be:5e:4d:30:70:57:7e:7d:f8:01:b5:98:43:8a:e4:
87:01:9f:33:59:e4:78:7e:5d:98:54:f1:93:5f:81:ba:c7:2a:
7f:55:b1:a3:54:19:f6:7d:6c:50:bd:f3:49:8b:02:a6:48:f5:
72:c1:ff:77:7c:98:d3:fe:fb:9d:96:3d:87:4d:60:91:41:4e:
de:cd:c4:f4:f7:e2:9e:c1:2c:00:48:ee:9f:9e:4a:f6:48:26:
53:f5:33:e1:e2:aa:54:3b:5d:73:20:90:2b:21:1a:09:db:ef:
8e:5e:dc:43:f9:e1:12:74:a9:fc:db:45:31:20:dd:cb:c9:4c:
4b:4e:10:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:52:22 2026 by rpki-client