Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
File: CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft (raw, json)
Hash identifier: 87KSXKLmkiKLCuBptyzjVo6l8ptpf3qBqopE3KPkBzE=
Subject key identifier: 99:5E:3F:B9:67:5A:55:B0:DF:64:49:E5:02:ED:18:49:D4:7A:83:C2
Authority key identifier: 09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC
Certificate issuer: /CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc
Certificate serial: 019F924850B49A6BF39C3C97397D8BCC02FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
Manifest number: 039F
Signing time: Fri 24 Jul 2026 04:00:40 +0000
Manifest this update: Fri 24 Jul 2026 04:00:40 +0000
Manifest next update: Sat 25 Jul 2026 04:00:40 +0000
Files and hashes: 1: CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl (hash: s4bsx3aYAg63xUY6ytOc7HeY9+FVLTMllVW8/Qhm39Q=)
2: GMlNWwMvstKZbXWgh06o9T5EqTE.roa (hash: 3II56/e7g+EGOg2XDQ8qDvIUZO0rTVJTTs+Pzt9rihQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:50:b4:9a:6b:f3:9c:3c:97:39:7d:8b:cc:02:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc
Validity
Not Before: Jul 24 04:00:40 2026 GMT
Not After : Jul 25 04:00:40 2026 GMT
Subject: CN=995e3fb9675a55b0df6449e502ed1849d47a83c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:f7:c4:d0:17:3f:19:aa:06:31:9e:7b:06:
07:89:39:5d:d3:ac:89:73:4c:56:97:f6:ef:82:53:
0b:7d:ca:7b:37:15:5c:37:70:36:21:e7:16:1a:fc:
f4:65:34:f3:87:85:89:41:b6:b0:c4:33:2a:22:97:
5e:b4:d4:f2:c4:1b:6d:7a:17:35:f3:44:c4:f6:da:
c2:a3:ca:42:1a:c3:a9:87:ca:f3:57:72:27:d2:de:
9a:f6:cd:9c:58:f7:71:be:42:a1:eb:ff:50:6f:95:
03:30:5b:14:78:29:3e:2a:37:b7:c1:67:49:00:f7:
68:af:2b:d3:4a:d9:67:66:2e:56:0f:25:95:68:23:
53:67:40:ad:a2:f5:79:ee:8f:25:ec:48:b5:94:4b:
0d:cb:75:ef:25:b3:d0:71:70:1f:db:4d:84:b0:90:
b3:40:5e:14:7b:ea:8d:b3:11:c6:b9:6a:bf:a2:07:
27:d0:24:96:ab:f6:c0:78:e7:00:e7:58:6d:c7:e6:
bb:c5:c6:dc:89:6c:1b:f8:c4:db:90:f4:30:22:5b:
71:ff:12:65:75:6b:92:98:c6:fb:d1:29:af:68:c3:
62:0b:ac:ab:6d:83:58:88:e3:a6:05:68:01:8e:56:
08:14:5f:be:5d:b4:eb:6f:76:58:a3:80:e0:f5:52:
c7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5E:3F:B9:67:5A:55:B0:DF:64:49:E5:02:ED:18:49:D4:7A:83:C2
X509v3 Authority Key Identifier:
keyid:09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:3c:7e:4a:e6:36:f2:fa:a3:76:7f:de:21:97:74:44:be:39:
1c:d3:7d:5e:37:3d:2b:cf:08:92:b9:5a:82:e2:d7:24:c3:0a:
92:0c:73:d3:16:6e:55:92:e4:8b:7c:74:12:4b:73:fa:e9:3d:
01:78:e3:05:83:7b:72:4c:b5:ad:4b:28:dc:3a:34:f7:95:67:
71:4d:1e:62:46:50:e6:4a:dd:7a:89:12:c9:97:d7:18:33:b7:
0f:e1:0e:81:9b:44:28:64:ed:62:2a:8c:32:50:1c:a8:b0:f3:
2d:36:33:5d:0e:de:5e:39:ec:69:30:dd:76:a3:e3:7a:dd:f4:
17:4f:72:b5:bf:94:3b:d5:a3:78:93:58:45:57:38:7d:dc:c0:
a4:cd:4e:60:c8:d9:d1:c4:d6:05:4c:56:6c:67:d7:5c:06:06:
e8:8e:6e:71:ef:91:b1:f9:2e:90:da:20:46:a1:44:b9:9d:b6:
50:21:d5:22:ee:5e:0f:cd:9e:c3:3d:25:10:b1:48:c6:3f:e7:
80:81:28:fa:ce:60:db:88:4a:25:46:48:fb:30:71:a2:22:71:
46:98:6d:1f:79:61:09:67:e5:e0:3a:c1:ad:f6:5e:6a:f7:2f:
39:b7:ef:a0:c4:e4:ab:ce:9f:64:17:51:41:89:55:3a:d6:ad:
2e:b1:92:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSFC0mmvznDyXOX2LzAL/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZDk0M2Y5ZDVjNzViMWY1MDU2NGYyZDFkZDA1MTE3ODhl
YjBhZmMwHhcNMjYwNzI0MDQwMDQwWhcNMjYwNzI1MDQwMDQwWjAzMTEwLwYDVQQD
Eyg5OTVlM2ZiOTY3NWE1NWIwZGY2NDQ5ZTUwMmVkMTg0OWQ0N2E4M2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjz3xNAXPxmqBjGeewYHiTld06yJ
c0xWl/bvglMLfcp7NxVcN3A2IecWGvz0ZTTzh4WJQbawxDMqIpdetNTyxBttehc1
80TE9trCo8pCGsOph8rzV3In0t6a9s2cWPdxvkKh6/9Qb5UDMFsUeCk+Kje3wWdJ
APdoryvTStlnZi5WDyWVaCNTZ0CtovV57o8l7Ei1lEsNy3XvJbPQcXAf202EsJCz
QF4Ue+qNsxHGuWq/ogcn0CSWq/bAeOcA51htx+a7xcbciWwb+MTbkPQwIltx/xJl
dWuSmMb70SmvaMNiC6yrbYNYiOOmBWgBjlYIFF++XbTrb3ZYo4Dg9VLHhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJleP7lnWlWw32RJ5QLtGEnUeoPCMB8GA1UdIwQY
MBaAFAnZQ/nVx1sfUFZPLR3QUReI6wr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2RsRC1kWEhXeDlRVms4dEhkQlJGNGpyQ3Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82MmMwMDItYjk0Yy00MjNiLWI0ZWIt
ZTc5MmNjMmZkMDdlLzEvQ2RsRC1kWEhXeDlRVms4dEhkQlJGNGpyQ3Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi82MmMwMDItYjk0Yy00MjNiLWI0ZWItZTc5MmNjMmZkMDdl
LzEvQ2RsRC1kWEhXeDlRVms4dEhkQlJGNGpyQ3Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsDx+SuY2
8vqjdn/eIZd0RL45HNN9Xjc9K88IkrlaguLXJMMKkgxz0xZuVZLki3x0Ektz+uk9
AXjjBYN7cky1rUso3Do095VncU0eYkZQ5krdeokSyZfXGDO3D+EOgZtEKGTtYiqM
MlAcqLDzLTYzXQ7eXjnsaTDddqPjet30F09ytb+UO9WjeJNYRVc4fdzApM1OYMjZ
0cTWBUxWbGfXXAYG6I5uce+RsfkukNogRqFEuZ22UCHVIu5eD82ewz0lELFIxj/n
gIEo+s5g24hKJUZI+zBxoiJxRphtH3lhCWfl4DrBrfZeavcvObfvoMTkq86fZBdR
QYlVOtatLrGSTw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:23 2026 by rpki-client