Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
File: CdR3O7Q9trKeh94C42U_p9jyb2U.mft (raw, json)
Hash identifier: qINvZjdWzqOkPv9W4bGo2lQgc300KqhtOUZR+bT2RV0=
Subject key identifier: 15:4E:D8:AC:44:A8:D0:9C:EA:C6:C0:28:B9:FF:B4:C6:28:61:4A:FB
Authority key identifier: 09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
Certificate issuer: /CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
Certificate serial: 019E1D59D63D4263698A7356FF22936C44DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
Manifest number: 04A6
Signing time: Tue 12 May 2026 18:01:27 +0000
Manifest this update: Tue 12 May 2026 18:01:27 +0000
Manifest next update: Wed 13 May 2026 18:01:27 +0000
Files and hashes: 1: CdR3O7Q9trKeh94C42U_p9jyb2U.crl (hash: D5Bf23w/Brlrwn5ZBKnMj+7uYc5wnSSVA9c0/NRaI2U=)
2: nHg8KiKunlrxMMIxV9zgF0mtZ8A.roa (hash: nxlRegrduzOpiFfaQUDQOciM2lxOXMdYCO9fBBCczdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:d6:3d:42:63:69:8a:73:56:ff:22:93:6c:44:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
Validity
Not Before: May 12 18:01:27 2026 GMT
Not After : May 13 18:01:27 2026 GMT
Subject: CN=154ed8ac44a8d09ceac6c028b9ffb4c628614afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4f:f6:37:2e:b5:24:1e:0e:e0:05:15:70:fa:
a5:a3:fb:e4:8a:75:98:21:43:0d:fd:87:54:ee:e0:
1e:78:e5:6c:93:2b:91:3f:fa:7b:85:25:c5:1f:ff:
e2:03:c6:2c:ad:ea:83:db:d8:78:ed:d7:28:85:60:
3d:3c:87:f3:57:dc:66:41:4b:1f:33:0c:e9:87:68:
e7:34:c4:ca:58:c6:9a:cb:85:9a:c2:ed:7b:14:9c:
56:bc:e1:d2:5b:60:09:52:82:83:53:87:46:c6:18:
67:a7:ba:77:c2:3f:72:36:e6:8e:31:59:28:5c:5b:
73:1e:02:48:e6:2a:39:11:87:9c:65:04:bd:73:96:
fe:2d:7a:17:3f:86:d6:48:46:c8:85:7d:ae:ad:98:
e7:cb:58:75:c7:5c:b9:01:ae:99:16:01:45:e5:1b:
9e:99:f8:dc:bf:03:74:a7:23:92:3c:f1:09:e0:fc:
42:c8:8c:e2:da:f3:b9:cb:1b:82:68:9f:8c:5b:11:
3e:21:73:08:66:c5:16:ba:a6:0a:cb:54:84:6c:33:
62:3e:e3:3c:4a:b0:a5:db:d4:ba:67:1d:16:32:12:
c4:34:f8:84:93:08:89:1e:c3:86:3d:e1:c0:0d:7d:
e9:1c:2b:3d:60:0a:6b:e9:24:e6:61:aa:34:59:ba:
a6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4E:D8:AC:44:A8:D0:9C:EA:C6:C0:28:B9:FF:B4:C6:28:61:4A:FB
X509v3 Authority Key Identifier:
keyid:09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ef:46:a6:65:76:60:f1:2e:86:cd:47:4c:2d:b5:4a:69:9b:
f2:76:41:bf:88:bc:74:86:e1:36:fc:57:28:9b:a1:d6:98:d6:
b4:86:c4:51:7c:26:c3:48:ff:85:b4:30:69:48:3a:84:2d:4d:
85:3b:ae:8f:aa:6a:da:bf:21:41:01:20:15:f5:d1:5d:d5:72:
95:1e:a7:8d:20:02:65:0b:6f:81:11:15:13:83:8a:9e:3c:c8:
d7:ae:64:31:8f:9a:f5:0f:0e:e0:71:02:54:0f:a4:d0:0f:6a:
34:42:64:57:61:e1:74:17:9e:d9:31:30:9f:c2:70:4f:f7:e1:
a4:c6:cb:66:22:2f:f1:9c:c5:8e:16:0e:db:f3:fe:a7:17:4a:
4c:14:ed:8e:ca:37:59:cb:11:1c:74:c8:f9:02:16:90:90:24:
f2:0f:c4:b0:a7:76:5c:6a:01:5c:8b:67:b2:56:74:7c:a1:89:
9d:9a:e0:fb:af:44:3e:a9:29:ba:c0:52:80:4e:24:7b:a1:43:
50:56:64:e9:3c:03:56:99:a3:a5:24:62:30:0b:36:85:8d:06:
db:64:29:e6:24:ec:6a:7b:f3:d3:51:8b:23:15:fa:a2:6c:0d:
89:3f:3e:fb:c5:c7:44:3f:d1:ea:8d:bd:d2:34:f6:af:39:e9:
24:04:ef:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:25 2026 by rpki-client