Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
File: CDV_W-4YX8YRVwhtWYVIU2myrNI.mft (raw, json)
Hash identifier: sUHc0vIn+3mdFOmq+cFP437rZ/szXxKQD4rR0KfGmf4=
Subject key identifier: 96:DB:3B:3A:DA:10:CE:BD:7D:81:C5:22:A6:11:EA:9E:DF:3A:93:05
Authority key identifier: 08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
Certificate issuer: /CN=08357f5bee185fc61157086d5985485369b2acd2
Certificate serial: 019E1CB58CC8D85166C4FB48690322CEF03F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
Manifest number: 045E
Signing time: Tue 12 May 2026 15:02:00 +0000
Manifest this update: Tue 12 May 2026 15:02:00 +0000
Manifest next update: Wed 13 May 2026 15:02:00 +0000
Files and hashes: 1: 2OzQAiJ84eR942-HL-mCfiNn304.roa (hash: DoCu0JYoFviUnpmkl9K5MvFhWvoS3a+KpBFHFpRP62c=)
2: CDV_W-4YX8YRVwhtWYVIU2myrNI.crl (hash: rB0olmHMeJ+qk5m+lGKsh5Gpm1afZgeyiqQlilj3PcM=)
3: frdEDuVlBLc1KIouDp6myM9rtIA.roa (hash: G223mpKSbVeBYMKKTw6KE3IJvyTw3v+DtTphKZ5P+JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:8c:c8:d8:51:66:c4:fb:48:69:03:22:ce:f0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08357f5bee185fc61157086d5985485369b2acd2
Validity
Not Before: May 12 15:02:00 2026 GMT
Not After : May 13 15:02:00 2026 GMT
Subject: CN=96db3b3ada10cebd7d81c522a611ea9edf3a9305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2a:5f:7d:03:96:c8:7a:dc:fe:3c:ae:3b:09:
fd:7d:5d:7e:71:b2:ee:83:4b:68:ad:97:4a:46:02:
7a:1a:72:c0:8e:2d:40:88:a0:94:36:6a:0d:7f:88:
7b:5c:74:9c:a7:da:83:1f:f9:da:9a:6b:c1:85:f3:
e6:04:21:26:c3:84:ec:6a:36:e2:6c:17:3c:36:4a:
31:96:07:6b:de:1f:77:b5:57:cd:0a:80:86:6d:1f:
47:21:32:65:cf:2e:53:c0:b2:92:a3:28:be:79:08:
ec:28:fd:5b:1e:a7:d8:23:e4:8d:0c:fd:71:ee:1d:
5e:e8:cf:df:51:33:8e:bb:08:2c:43:0c:98:58:61:
32:6b:d7:7f:87:f0:c0:96:1d:cb:49:a0:fc:59:f8:
d8:ea:5f:30:b4:a4:bb:2c:57:17:d2:74:34:ba:3c:
13:96:33:7a:4e:4f:e1:29:b2:c8:36:13:bc:49:73:
c2:e1:7a:c3:60:0d:4d:b3:bb:af:9f:02:a2:02:54:
38:3a:ea:4c:a8:25:2f:14:55:ac:4d:8e:89:2c:84:
b6:83:07:6e:71:25:ec:e3:23:c9:c1:ba:e4:ec:7a:
6a:5b:74:07:b6:a3:49:80:de:55:23:3a:8e:2e:eb:
af:bb:89:18:5e:88:01:5d:23:bf:da:c1:8a:67:da:
bc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DB:3B:3A:DA:10:CE:BD:7D:81:C5:22:A6:11:EA:9E:DF:3A:93:05
X509v3 Authority Key Identifier:
keyid:08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f2:ae:23:d6:64:87:11:00:2e:b2:6c:87:12:60:a5:2a:22:
a6:c2:97:40:02:bd:f4:83:28:41:88:aa:c4:cf:4c:e4:cb:7a:
5b:8e:5a:48:43:f7:2f:07:54:58:64:c4:f4:d2:30:11:01:19:
1d:68:b0:22:b4:65:7f:a6:fb:c3:4b:d5:a9:db:0d:00:8e:19:
22:7c:93:57:6b:68:3e:35:5d:b2:b4:8a:7d:85:6a:e3:65:70:
50:0e:23:57:08:e9:65:20:61:15:0a:8f:4e:e8:e9:ab:71:79:
f8:1c:8f:9f:18:15:29:35:21:15:92:c7:50:07:0a:f4:89:51:
99:7b:07:e0:4a:44:a3:ee:b9:40:09:8c:e0:d5:9d:94:d2:e3:
c6:1a:d1:84:b0:97:28:e2:fb:62:d8:81:a6:41:60:17:7f:e8:
98:91:4c:07:e6:d5:a0:83:10:51:5e:55:20:e5:44:0c:09:6f:
63:6f:60:a4:84:5e:1b:92:9b:05:6e:50:ad:30:06:25:ef:31:
37:70:7c:b7:fc:f4:ef:98:0f:b7:23:5f:6f:31:2f:7d:4d:5b:
4f:19:ad:83:7a:1e:54:ea:d5:6d:8e:43:19:ed:4e:e3:69:07:
c3:be:2a:25:fb:89:a1:3c:d8:f3:dd:63:20:1c:ea:fb:05:3b:
dd:c7:94:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:30 2026 by rpki-client