Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
File: CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft (raw, json)
Hash identifier: ttoJV43TPeAPta27uNRbOpCAk/VfqZ1VWblaVLbvu+Y=
Subject key identifier: 15:81:CF:69:F1:17:64:6D:06:E5:BB:83:6D:38:3C:87:D2:1F:63:A6
Authority key identifier: 09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC
Certificate issuer: /CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc
Certificate serial: 019E1D90265B73BD20AD372912A3EB2DB5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
Manifest number: 02DE
Signing time: Tue 12 May 2026 19:00:46 +0000
Manifest this update: Tue 12 May 2026 19:00:46 +0000
Manifest next update: Wed 13 May 2026 19:00:46 +0000
Files and hashes: 1: CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl (hash: ZRkxvI8saEKlH/qsoyoZUHkzJWUeQp2uzjuWs1vt5/w=)
2: GMlNWwMvstKZbXWgh06o9T5EqTE.roa (hash: 3II56/e7g+EGOg2XDQ8qDvIUZO0rTVJTTs+Pzt9rihQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:26:5b:73:bd:20:ad:37:29:12:a3:eb:2d:b5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc
Validity
Not Before: May 12 19:00:46 2026 GMT
Not After : May 13 19:00:46 2026 GMT
Subject: CN=1581cf69f117646d06e5bb836d383c87d21f63a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:41:cd:15:20:17:12:eb:52:b2:13:1f:77:
9a:2d:1e:b9:58:b6:a5:73:83:d3:84:3d:72:6e:bf:
26:22:84:43:87:5a:e7:a8:f5:3a:a1:58:c6:3c:86:
e5:f6:5d:e5:34:fd:d1:92:20:5a:1b:40:56:48:5d:
3a:9f:8e:cf:d1:57:0e:ac:8d:9d:8d:a2:66:db:a8:
e0:ea:20:01:30:d5:9d:ee:ef:79:c0:1f:41:8f:2c:
0f:a6:5d:f7:d7:13:c1:52:28:bb:01:da:d0:3b:fe:
f0:bb:26:5b:18:ca:ea:dd:a9:84:da:e9:55:b2:7d:
85:dc:a1:f1:61:40:53:bf:17:4d:8f:55:db:92:f8:
90:9a:03:21:fb:36:82:a9:ba:78:b7:06:8b:0b:e5:
df:51:76:59:ce:45:23:4b:71:e8:75:62:eb:56:a7:
10:ac:97:b8:b9:33:18:e6:b0:4a:a3:99:3e:21:9f:
ec:17:2e:07:e3:e0:fb:dd:ba:8e:c2:47:92:69:35:
d6:60:a4:41:24:c5:25:ac:f3:49:97:5a:c4:02:67:
e3:75:b3:43:d5:2f:b4:29:39:f5:b7:4f:44:75:73:
e6:46:34:d4:04:c1:82:45:c3:64:0a:b5:d6:1e:ea:
9f:e6:33:ed:2f:0f:c1:0d:69:96:2b:c4:99:d5:e1:
ff:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:81:CF:69:F1:17:64:6D:06:E5:BB:83:6D:38:3C:87:D2:1F:63:A6
X509v3 Authority Key Identifier:
keyid:09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e2:4b:f5:0c:c4:e2:14:1a:49:ff:1a:e4:b5:96:99:79:89:
62:92:b0:30:46:0c:93:7c:71:58:e3:6a:8b:d6:53:ee:f6:78:
ba:b4:ee:41:7a:9c:77:15:37:3e:5c:d0:c5:68:bd:3d:79:61:
be:54:9c:23:d6:fd:cc:2a:c2:aa:06:d4:ab:71:26:4e:ac:ff:
d0:c7:ad:84:0d:b7:06:90:13:fa:18:20:1a:96:99:4b:ea:ba:
3b:10:9e:46:66:47:01:d3:c0:e7:e7:65:3c:05:ae:25:fe:f2:
5d:79:8b:7c:de:e9:04:b4:3c:11:b2:2e:e6:d5:d1:4b:ef:8e:
d6:86:1c:34:90:df:86:9b:81:c8:8b:16:17:19:69:8b:cc:89:
d0:25:08:cd:51:15:c3:35:f5:a0:54:71:be:f5:40:8d:f4:1d:
b4:43:c6:51:69:3b:07:04:f8:06:80:4f:3a:02:52:1b:ee:ca:
92:d1:f7:f4:92:6a:9a:39:c9:94:48:ba:0e:ba:d6:05:b5:e6:
f2:b6:f4:5e:da:03:31:3a:60:79:35:4e:35:45:48:e8:e5:b4:
b2:2d:8a:ab:be:09:13:06:8e:b2:98:ce:79:48:d0:8a:d4:d4:
ad:9a:1d:3b:b6:fd:ed:0c:69:59:fb:f5:53:36:2d:f1:3e:f0:
c9:55:38:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:47 2026 by rpki-client