Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
File: CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft (raw, json)
Hash identifier: uzQghQjm0vVLbfwEoDQ2pygEq/8aFnSIhz5gFuRT4cI=
Subject key identifier: CF:FC:45:35:EA:7F:D3:38:3A:16:12:71:6C:D7:6F:BA:15:EF:5A:6E
Authority key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
Certificate issuer: /CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Certificate serial: 019D2960C90211BDEFE5AC3D1C505440F547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
Manifest number: 0DEB
Signing time: Thu 26 Mar 2026 09:01:41 +0000
Manifest this update: Thu 26 Mar 2026 09:01:41 +0000
Manifest next update: Fri 27 Mar 2026 09:01:41 +0000
Files and hashes: 1: 6NX7kHYLQEY_Fjy3vPy-MzWGuS0.roa (hash: QMXJPUTLlHe/t5S4J5pRp03CHJgFFci+ULIf4qsBmK8=)
2: CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl (hash: g+amYkrluSZxYIsNmu1cRJ1GXcAntMcxKvV0MP6YBxQ=)
3: rKdvuJIJFgGPfjR9_tkt7GpYbuU.roa (hash: cOdZ/AGn383MF+NUE+R43rPhYLUIwbGM9+ozFG63CYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:c9:02:11:bd:ef:e5:ac:3d:1c:50:54:40:f5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Validity
Not Before: Mar 26 09:01:41 2026 GMT
Not After : Mar 27 09:01:41 2026 GMT
Subject: CN=cffc4535ea7fd3383a1612716cd76fba15ef5a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:74:1e:9c:5a:00:21:af:1f:08:37:ab:42:
21:81:b6:67:c4:a6:d5:30:c8:18:f6:04:b3:03:ca:
b1:d3:2a:47:08:ca:e5:7a:78:76:15:56:5e:1d:31:
50:61:77:8a:c3:20:53:ed:e7:e9:a6:39:7a:35:5b:
82:bb:23:52:c5:eb:ab:bf:4b:d7:f6:19:dd:e1:74:
f0:0b:25:ce:12:c2:d2:52:25:39:02:33:29:90:2f:
0c:f1:59:e2:58:0f:5d:e5:ab:0b:72:a8:b4:5d:be:
c7:7a:e4:d0:dd:0d:e1:78:7a:fa:d6:17:8c:ee:fa:
af:57:f9:ed:fe:7d:fd:a3:8e:ac:b0:c4:2e:93:23:
8f:43:4b:b8:76:a4:9b:ba:b0:34:b5:fc:33:f3:a9:
de:39:88:47:96:41:25:03:1a:d0:65:9d:08:f7:d5:
5d:d2:f6:7e:2e:33:8d:bd:9b:b9:18:7f:fa:00:e4:
1f:69:d6:9c:fb:30:07:99:3a:d3:0d:82:f7:7d:cf:
5a:82:3b:ad:86:1a:78:d7:00:d7:d8:fe:26:9a:10:
d3:f5:fc:19:77:17:6a:13:1d:8c:12:e4:bd:f3:fd:
92:bc:db:e3:87:29:24:11:45:be:7e:63:a0:a1:9b:
4c:07:cd:4c:4b:55:37:ae:7e:2c:0a:f4:e6:f0:9d:
9b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FC:45:35:EA:7F:D3:38:3A:16:12:71:6C:D7:6F:BA:15:EF:5A:6E
X509v3 Authority Key Identifier:
keyid:09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0a:85:d5:42:a9:4d:98:cd:5c:a9:e8:69:53:8c:af:2c:b2:
d8:47:29:57:b1:16:7d:92:16:b7:8d:22:48:7a:cc:59:02:58:
dc:96:50:90:9c:c6:59:b9:10:74:3e:14:82:8e:23:49:40:18:
85:37:b8:cb:81:0f:27:a7:f2:3f:59:43:de:99:bf:59:cf:22:
1c:15:df:e5:e9:f3:11:56:ff:34:c3:ad:81:9b:4e:a1:23:98:
b4:e4:1d:9a:cc:5f:0f:6a:51:b5:4d:bb:8f:96:d3:3c:1a:1a:
55:7a:29:18:b2:04:ac:30:dc:3e:e0:f3:6e:91:5a:70:b5:1a:
e8:c2:f0:18:d6:ef:20:3c:10:0b:ac:72:44:f1:a8:2a:6f:46:
54:a3:ae:0e:5f:2d:22:97:06:95:f0:17:d6:bb:da:0d:d8:a4:
3e:0d:54:45:db:06:0d:2a:38:b6:9a:14:01:93:32:f4:45:cd:
e2:ae:16:30:b2:62:3f:16:51:fa:b8:aa:0a:01:b6:ff:7a:50:
1e:f8:88:3e:9a:7e:64:2d:41:3e:11:5e:09:33:8b:0a:5b:67:
d3:b4:6c:75:de:83:df:c9:ef:eb:d5:04:a6:85:a5:b1:bb:d9:
e2:33:a9:0a:fb:f7:2b:65:77:ca:0a:d4:76:b6:ea:b5:45:b5:
18:1b:4f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:53:07 2026 by rpki-client