Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
File: CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft (raw, json)
Hash identifier: SK0NbKf5M40QvAbJ8ApwLz4/Ny9O1hgeuRRvUxFTYW0=
Subject key identifier: A8:65:9B:2E:D4:B7:F6:D7:D0:02:A9:AE:13:02:5C:5D:78:73:31:C9
Authority key identifier: 09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC
Certificate issuer: /CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc
Certificate serial: 019D2A3B7BAF7F6773F06CF047C4F9425400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
Manifest number: 0260
Signing time: Thu 26 Mar 2026 13:00:34 +0000
Manifest this update: Thu 26 Mar 2026 13:00:34 +0000
Manifest next update: Fri 27 Mar 2026 13:00:34 +0000
Files and hashes: 1: CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl (hash: WnYxALAMwnqAQVTp4APitpxvGhj2X8E+wFWNdrJ6Zn8=)
2: GMlNWwMvstKZbXWgh06o9T5EqTE.roa (hash: 3II56/e7g+EGOg2XDQ8qDvIUZO0rTVJTTs+Pzt9rihQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:7b:af:7f:67:73:f0:6c:f0:47:c4:f9:42:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc
Validity
Not Before: Mar 26 13:00:34 2026 GMT
Not After : Mar 27 13:00:34 2026 GMT
Subject: CN=a8659b2ed4b7f6d7d002a9ae13025c5d787331c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:76:10:b6:50:1b:5c:2c:c9:af:67:c2:66:44:
25:92:0a:6b:08:e2:b6:fd:97:08:d1:d1:82:2b:de:
66:b5:5a:cd:21:28:17:6a:06:cc:8b:71:03:55:38:
2d:21:84:02:71:0d:61:a2:a4:7f:50:be:45:3e:88:
5a:25:13:4a:b1:e5:28:74:ca:9f:cd:6d:c2:24:0d:
88:fe:e9:df:2c:3d:1f:b4:f0:70:20:14:df:b9:dc:
ed:53:81:91:19:5e:89:9a:7e:ed:72:f7:0b:4c:20:
bc:fa:3a:f5:ad:45:70:9c:fb:12:41:6d:aa:f9:00:
2d:e3:cc:e9:7b:1d:be:71:d2:86:70:ea:84:92:2f:
79:68:0e:0f:c2:b2:38:04:e4:76:ae:f3:ca:82:20:
4a:87:27:54:97:58:6b:ee:9d:82:c1:a2:54:20:f2:
59:d7:9c:ad:dc:89:63:18:b2:5d:9d:62:50:56:07:
2b:f7:8e:7f:ec:eb:37:80:42:79:d4:e2:da:86:c5:
6e:0e:67:9a:9d:0f:7e:88:17:3f:29:2d:a7:4c:94:
10:66:16:dd:a0:ac:dd:31:aa:05:42:fc:3e:4e:41:
50:c6:a7:87:de:70:66:11:68:dd:2b:6d:a2:7b:d0:
aa:a7:02:ab:15:7c:db:dc:df:fe:c1:71:d4:c1:23:
ac:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:65:9B:2E:D4:B7:F6:D7:D0:02:A9:AE:13:02:5C:5D:78:73:31:C9
X509v3 Authority Key Identifier:
keyid:09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f6:dc:81:82:83:ca:d1:7a:f2:ce:47:f5:93:67:51:b8:5f:
67:8c:e8:11:01:9e:28:9f:d2:c7:3a:50:90:36:3c:48:44:9a:
0d:86:14:29:1b:06:89:df:08:98:d5:0a:29:37:8f:a6:62:20:
ec:2a:7e:a4:dd:99:c2:d8:45:e0:a4:ba:d6:b2:73:7f:c4:3e:
ed:cc:3b:fa:45:7f:5e:44:54:23:c1:79:ee:2a:af:58:2f:6d:
b2:32:d4:73:e6:8e:c0:c9:2c:fd:17:df:ab:48:25:6d:9f:9c:
3d:a6:f1:f3:ab:03:ce:17:9b:65:37:73:41:df:e2:0a:94:91:
f3:7c:3b:35:59:99:9a:56:22:6b:3f:69:3c:78:43:1b:14:d4:
2e:6b:f7:08:f7:2f:14:a3:69:83:dd:e1:ea:2f:1e:62:2b:cb:
2d:e9:6f:ff:16:55:7d:1f:6f:b7:28:4c:e2:d8:98:41:49:57:
27:c0:a5:08:af:e8:d7:27:ff:54:0e:dd:3c:76:8a:cf:3b:48:
26:f2:a7:9a:b8:1a:d7:cf:2b:7f:bd:56:98:b2:74:50:46:19:
65:2e:5f:89:8a:dd:57:90:68:9a:bc:98:8d:3b:b5:1f:be:cc:
c1:74:2b:11:47:c2:24:9f:be:9b:9e:72:42:3d:d2:e6:9a:68:
68:7e:84:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:08 2026 by rpki-client