Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
File: CDV_W-4YX8YRVwhtWYVIU2myrNI.mft (raw, json)
Hash identifier: rTphsKJ+aXLkV48+hwfn7oKJ6H1LRBVoXfNAZfBebA0=
Subject key identifier: 57:8B:3A:07:1E:9F:65:03:E3:17:CD:06:15:EE:66:CB:5B:8D:9D:29
Authority key identifier: 08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
Certificate issuer: /CN=08357f5bee185fc61157086d5985485369b2acd2
Certificate serial: 019D2B4E5414A0AC76F6236F811B10D8E47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
Manifest number: 03E1
Signing time: Thu 26 Mar 2026 18:00:46 +0000
Manifest this update: Thu 26 Mar 2026 18:00:46 +0000
Manifest next update: Fri 27 Mar 2026 18:00:46 +0000
Files and hashes: 1: 2OzQAiJ84eR942-HL-mCfiNn304.roa (hash: DoCu0JYoFviUnpmkl9K5MvFhWvoS3a+KpBFHFpRP62c=)
2: CDV_W-4YX8YRVwhtWYVIU2myrNI.crl (hash: z7XMfLGCXf3kF4umsJmHjdGfZTnwctnkWF3+g9XVqhk=)
3: frdEDuVlBLc1KIouDp6myM9rtIA.roa (hash: G223mpKSbVeBYMKKTw6KE3IJvyTw3v+DtTphKZ5P+JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:54:14:a0:ac:76:f6:23:6f:81:1b:10:d8:e4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08357f5bee185fc61157086d5985485369b2acd2
Validity
Not Before: Mar 26 18:00:46 2026 GMT
Not After : Mar 27 18:00:46 2026 GMT
Subject: CN=578b3a071e9f6503e317cd0615ee66cb5b8d9d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:1e:be:1f:54:ab:1b:d1:14:ca:8d:2f:83:
f1:02:3b:9e:63:fc:29:f3:28:a6:c2:2e:ad:da:bc:
d1:f9:5e:d3:b0:ec:36:85:8e:25:26:63:a8:85:45:
e3:df:1b:5a:e4:66:c0:fc:f3:2b:eb:cf:bb:09:0f:
d3:52:04:c6:cc:b0:1d:39:99:19:34:ad:c2:6d:38:
1c:2e:c3:56:8f:04:ae:d3:f5:31:a7:90:53:5e:61:
6a:86:a4:01:e4:be:b6:92:71:8f:10:89:30:65:01:
ea:ac:c5:23:98:82:2f:c6:66:3a:0e:2f:3e:b9:60:
c5:87:f4:46:c3:d5:2d:26:45:8b:1d:59:a6:2c:91:
47:0d:91:6f:22:21:94:3f:b5:c3:3c:95:50:64:b1:
87:84:3f:2e:29:79:98:a5:c2:b8:d8:db:f1:05:da:
09:ff:f0:b6:69:bd:8c:2c:76:b5:90:c5:16:4e:21:
be:4f:98:ef:e5:05:3c:6f:aa:2a:68:b7:d8:32:89:
67:77:57:9a:a5:30:ca:68:79:ce:dc:7e:0a:f4:dd:
2a:dd:86:62:da:33:fe:6e:2e:f7:9e:26:cb:a8:89:
a3:ad:84:7a:b9:cb:83:ae:7c:7e:6d:89:92:9a:dc:
5d:3a:5d:15:75:b3:6a:bf:b8:b5:a9:fe:b7:4c:44:
1e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8B:3A:07:1E:9F:65:03:E3:17:CD:06:15:EE:66:CB:5B:8D:9D:29
X509v3 Authority Key Identifier:
keyid:08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b7:c9:a2:ac:36:4a:78:54:37:05:e2:ef:fb:3b:27:be:d4:
62:d7:28:e7:11:69:12:b1:22:0a:db:19:86:9c:90:31:79:17:
0c:f1:d9:f0:50:47:e0:85:88:04:0c:90:00:c0:46:6a:5b:47:
a7:c5:56:a4:29:f0:b2:3d:37:54:ea:c4:69:d5:3e:23:5e:ca:
d0:95:00:09:14:94:18:cb:bf:43:1c:75:0d:1c:b4:00:3f:66:
f9:41:aa:20:fb:1b:6d:a5:6a:0e:00:b8:9e:e1:e5:48:fd:d7:
ab:a8:fa:76:76:9a:3b:61:23:a2:f1:11:44:84:ca:c2:70:a4:
af:35:ec:d8:da:dc:57:24:d1:ea:ea:ab:1d:5d:03:e2:eb:f1:
84:50:c5:e8:f2:d9:7c:58:94:23:7a:74:02:e3:10:7f:b0:4b:
82:ba:67:76:7d:ee:af:89:95:bb:9a:96:c5:ef:16:3d:77:13:
35:06:19:d0:d8:d1:eb:df:ab:93:3d:4d:f0:be:98:db:fa:f7:
72:19:44:60:39:9a:8b:cc:cc:96:eb:91:09:f5:47:e3:9b:3a:
25:e9:6d:dc:d5:11:1b:aa:ad:23:82:fd:be:b7:2c:ad:66:34:
eb:4d:5a:5b:b5:80:1d:75:a0:4d:d3:70:83:24:f3:12:8e:73:
54:5d:87:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rTlQUoKx29iNvgRsQ2OR7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzU3ZjViZWUxODVmYzYxMTU3MDg2ZDU5ODU0ODUzNjli
MmFjZDIwHhcNMjYwMzI2MTgwMDQ2WhcNMjYwMzI3MTgwMDQ2WjAzMTEwLwYDVQQD
Eyg1NzhiM2EwNzFlOWY2NTAzZTMxN2NkMDYxNWVlNjZjYjViOGQ5ZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5wevh9UqxvRFMqNL4PxAjueY/wp
8yimwi6t2rzR+V7TsOw2hY4lJmOohUXj3xta5GbA/PMr68+7CQ/TUgTGzLAdOZkZ
NK3CbTgcLsNWjwSu0/Uxp5BTXmFqhqQB5L62knGPEIkwZQHqrMUjmIIvxmY6Di8+
uWDFh/RGw9UtJkWLHVmmLJFHDZFvIiGUP7XDPJVQZLGHhD8uKXmYpcK42NvxBdoJ
//C2ab2MLHa1kMUWTiG+T5jv5QU8b6oqaLfYMolnd1eapTDKaHnO3H4K9N0q3YZi
2jP+bi73nibLqImjrYR6ucuDrnx+bYmSmtxdOl0VdbNqv7i1qf63TEQeMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeLOgcen2UD4xfNBhXuZstbjZ0pMB8GA1UdIwQY
MBaAFAg1f1vuGF/GEVcIbVmFSFNpsqzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RWX1ctNFlYOFlSVndodFdZVklVMm15ck5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kY2ZmM2EtOGQzZC00N2NlLWEwZTQt
MmY0OWVmYzVjY2IwLzEvQ0RWX1ctNFlYOFlSVndodFdZVklVMm15ck5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9kY2ZmM2EtOGQzZC00N2NlLWEwZTQtMmY0OWVmYzVjY2Iw
LzEvQ0RWX1ctNFlYOFlSVndodFdZVklVMm15ck5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbfJoqw2
SnhUNwXi7/s7J77UYtco5xFpErEiCtsZhpyQMXkXDPHZ8FBH4IWIBAyQAMBGaltH
p8VWpCnwsj03VOrEadU+I17K0JUACRSUGMu/Qxx1DRy0AD9m+UGqIPsbbaVqDgC4
nuHlSP3Xq6j6dnaaO2EjovERRITKwnCkrzXs2NrcVyTR6uqrHV0D4uvxhFDF6PLZ
fFiUI3p0AuMQf7BLgrpndn3ur4mVu5qWxe8WPXcTNQYZ0NjR69+rkz1N8L6Y2/r3
chlEYDmai8zMluuRCfVH45s6Jelt3NURG6qtI4L9vrcsrWY0601aW7WAHXWgTdNw
gyTzEo5zVF2H2Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:21:49 2026 by rpki-client