Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
File: CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft (raw, json)
Hash identifier: D8fA0J5kExKnTJ7lpCfTn4a8Q3gHKjKwbrcQ91068zs=
Subject key identifier: B8:BA:91:F5:D0:F8:D3:C4:35:D4:DE:0A:C6:1A:18:2B:F1:0A:89:8E
Authority key identifier: 09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC
Certificate issuer: /CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc
Certificate serial: 01A0CEFF0019910BC56FCADF76077AD88CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
Manifest number: 0443
Signing time: Wed 23 Sep 2026 16:00:13 +0000
Manifest this update: Wed 23 Sep 2026 16:00:13 +0000
Manifest next update: Thu 24 Sep 2026 16:00:13 +0000
Files and hashes: 1: CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl (hash: +0rGQ/UUVFGIsNMQnQNa4yG1udE4lAcZR3E0D5Rm6OU=)
2: GMlNWwMvstKZbXWgh06o9T5EqTE.roa (hash: 3II56/e7g+EGOg2XDQ8qDvIUZO0rTVJTTs+Pzt9rihQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:00:19:91:0b:c5:6f:ca:df:76:07:7a:d8:8c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc
Validity
Not Before: Sep 23 16:00:13 2026 GMT
Not After : Sep 24 16:00:13 2026 GMT
Subject: CN=b8ba91f5d0f8d3c435d4de0ac61a182bf10a898e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:8c:c1:06:42:25:b1:6d:cf:40:67:48:a0:
67:6d:29:63:60:cb:07:4a:93:b4:27:8b:30:be:bb:
4b:ba:4e:b9:84:b7:d5:c8:f4:c7:dc:8e:19:17:2b:
9c:64:0c:56:81:97:e9:ce:f2:68:16:e2:ca:38:24:
15:17:67:49:b7:68:7f:d2:8a:ab:77:26:67:49:ac:
22:e8:0d:3d:dc:4f:9b:4b:16:9b:82:dd:bd:6b:56:
45:c6:35:8f:f3:13:da:16:2c:9d:54:bb:ec:9a:48:
a9:87:15:bb:57:aa:c6:21:62:ea:b5:1a:84:a5:7e:
56:0c:13:06:25:62:d9:46:97:b0:66:60:b5:a1:52:
b7:54:09:fe:4a:ac:4c:db:ef:39:e8:1b:97:7f:80:
d9:46:b2:76:ee:97:3c:fc:90:7f:78:0b:a0:f3:33:
c7:02:95:5e:75:78:ba:1e:10:d2:2d:ec:0a:ea:b3:
cb:b0:60:50:93:d9:b1:86:de:cb:18:c8:0d:03:c2:
3a:f4:d9:8c:ae:bd:36:01:92:3b:da:4d:67:e3:14:
f7:96:67:cf:c3:5c:d9:6c:84:83:d1:cd:b1:7f:38:
31:34:4b:ac:e9:e8:39:9b:f6:10:83:bb:38:11:46:
47:ec:f8:0d:3f:dd:05:09:1a:31:86:25:ac:60:6c:
73:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BA:91:F5:D0:F8:D3:C4:35:D4:DE:0A:C6:1A:18:2B:F1:0A:89:8E
X509v3 Authority Key Identifier:
keyid:09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d7:71:15:64:07:6c:97:0e:28:e0:1d:c6:ea:b4:46:ea:78:
fa:4b:4a:6d:7d:58:6f:e8:1e:78:a9:04:11:99:6f:55:56:12:
5d:a4:61:29:7b:7e:dd:b1:bd:fd:ac:d6:de:0b:bb:a1:d9:78:
3f:ec:80:73:2a:75:97:23:44:0c:54:9c:d4:70:1b:7f:08:4f:
a2:d9:dd:80:8e:89:5d:4c:1c:25:a1:b0:ca:ea:03:bf:94:75:
a6:b8:d8:29:6f:d1:f4:4c:69:7a:e6:1d:3c:8f:96:9a:8d:5e:
5c:e5:6c:81:bd:23:c3:0c:f8:b4:2d:92:6f:46:6c:73:0c:39:
8c:99:7b:0b:ea:d9:22:42:c3:27:60:04:93:a3:51:3e:36:fe:
c6:ae:d2:30:5b:07:48:05:9b:f2:46:2f:19:9b:fc:11:46:2b:
72:3a:02:61:df:c7:ec:6e:2e:4a:61:ce:f1:18:ec:34:b4:e8:
8c:ef:6f:23:fc:d0:0b:d3:f8:13:c4:b8:0d:a2:19:c8:cd:da:
16:0d:67:fe:a0:9d:83:95:7a:9a:39:61:2f:02:8c:30:f5:25:
77:30:5e:bc:60:cd:26:7d:f9:8e:c0:e9:19:4d:60:12:90:8a:
ef:dd:62:53:6b:e7:6c:58:13:f2:ac:4d:45:0a:4e:78:d1:14:
77:0e:9d:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDO/wAZkQvFb8rfdgd62IzsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZDk0M2Y5ZDVjNzViMWY1MDU2NGYyZDFkZDA1MTE3ODhl
YjBhZmMwHhcNMjYwOTIzMTYwMDEzWhcNMjYwOTI0MTYwMDEzWjAzMTEwLwYDVQQD
EyhiOGJhOTFmNWQwZjhkM2M0MzVkNGRlMGFjNjFhMTgyYmYxMGE4OThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxqMwQZCJbFtz0BnSKBnbSljYMsH
SpO0J4swvrtLuk65hLfVyPTH3I4ZFyucZAxWgZfpzvJoFuLKOCQVF2dJt2h/0oqr
dyZnSawi6A093E+bSxabgt29a1ZFxjWP8xPaFiydVLvsmkiphxW7V6rGIWLqtRqE
pX5WDBMGJWLZRpewZmC1oVK3VAn+SqxM2+856BuXf4DZRrJ27pc8/JB/eAug8zPH
ApVedXi6HhDSLewK6rPLsGBQk9mxht7LGMgNA8I69NmMrr02AZI72k1n4xT3lmfP
w1zZbISD0c2xfzgxNEus6eg5m/YQg7s4EUZH7PgNP90FCRoxhiWsYGxzEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLi6kfXQ+NPENdTeCsYaGCvxComOMB8GA1UdIwQY
MBaAFAnZQ/nVx1sfUFZPLR3QUReI6wr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2RsRC1kWEhXeDlRVms4dEhkQlJGNGpyQ3Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82MmMwMDItYjk0Yy00MjNiLWI0ZWIt
ZTc5MmNjMmZkMDdlLzEvQ2RsRC1kWEhXeDlRVms4dEhkQlJGNGpyQ3Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi82MmMwMDItYjk0Yy00MjNiLWI0ZWItZTc5MmNjMmZkMDdl
LzEvQ2RsRC1kWEhXeDlRVms4dEhkQlJGNGpyQ3Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaddxFWQH
bJcOKOAdxuq0Rup4+ktKbX1Yb+geeKkEEZlvVVYSXaRhKXt+3bG9/azW3gu7odl4
P+yAcyp1lyNEDFSc1HAbfwhPotndgI6JXUwcJaGwyuoDv5R1prjYKW/R9ExpeuYd
PI+Wmo1eXOVsgb0jwwz4tC2Sb0Zscww5jJl7C+rZIkLDJ2AEk6NRPjb+xq7SMFsH
SAWb8kYvGZv8EUYrcjoCYd/H7G4uSmHO8RjsNLTojO9vI/zQC9P4E8S4DaIZyM3a
Fg1n/qCdg5V6mjlhLwKMMPUldzBevGDNJn35jsDpGU1gEpCK791iU2vnbFgT8qxN
RQpOeNEUdw6d+g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:40:49 2026 by rpki-client