Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File: CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier: Aid+04/ivgm4OGxICoXhe5VQwpztezR0cKLFRWvCso8=
Subject key identifier: 94:A5:A1:CC:20:CB:DF:EF:6F:D9:32:F3:92:A6:34:D3:7C:33:A8:AF
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial: 019D29614F6B6D64E642B1E3060CABDD6FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 09:02:16 +0000
Manifest this update: Thu 26 Mar 2026 09:02:16 +0000
Manifest next update: Fri 27 Mar 2026 09:02:16 +0000
Files and hashes: 1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: eDbTd2zyphec8+TaAqTPZFolZoGZ2yGts+Caaxoo3lE=)
2: OC2xnBQTRG6dTo8unU-AfiUJoPo.roa (hash: TCWmomXoe5LhZ7eUQal/1Sd3d3namiJ5LFej1VLenpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:4f:6b:6d:64:e6:42:b1:e3:06:0c:ab:dd:6f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
Validity
Not Before: Mar 26 09:02:16 2026 GMT
Not After : Mar 27 09:02:16 2026 GMT
Subject: CN=94a5a1cc20cbdfef6fd932f392a634d37c33a8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a8:7d:26:30:e5:36:b9:90:11:7a:63:96:bd:
b0:20:31:06:41:84:99:7c:72:39:5d:d0:24:a5:9a:
4d:23:7c:3f:24:43:95:94:46:23:95:c1:74:69:3e:
58:5f:fa:7d:52:d6:3b:ce:56:54:0f:8a:16:9d:25:
a0:ae:31:db:63:a6:69:9d:81:b7:c9:a7:60:a3:bf:
0f:a0:82:d3:28:aa:a3:1e:55:ed:c0:19:ee:cf:f2:
31:1e:f4:ea:b6:58:fb:fd:7d:17:da:0b:31:86:58:
2c:16:3c:b5:ed:e1:15:67:a0:97:ad:67:c6:ab:21:
c8:f5:dc:1a:4e:4b:0d:da:f3:f3:aa:e9:a8:f3:bd:
04:b8:79:ab:8b:5e:42:ad:47:72:d5:c8:99:d1:38:
b8:ff:47:49:80:d0:3d:15:52:ef:dc:db:e7:0e:b8:
2b:02:5d:78:8b:2e:f1:72:51:85:ba:a2:ac:6e:ce:
c9:09:50:89:3c:71:d1:ae:42:9f:0a:67:1f:9a:3b:
17:6a:93:e4:11:a9:03:88:08:4f:d0:08:a2:08:e6:
b3:ac:ae:b1:d7:7c:72:56:5d:72:43:fc:6b:56:0e:
d9:69:4d:2a:11:3e:a9:f5:12:23:d9:7a:88:17:28:
e8:a3:8e:18:b2:73:fa:1d:e3:01:10:a6:c5:72:42:
b2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A5:A1:CC:20:CB:DF:EF:6F:D9:32:F3:92:A6:34:D3:7C:33:A8:AF
X509v3 Authority Key Identifier:
keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6e:08:c3:43:6e:9f:5f:98:04:3c:72:a1:0b:89:c7:19:08:
01:a5:68:70:23:5d:ca:8f:10:d9:0c:3f:2f:5f:8f:4b:67:d6:
9f:87:1a:bb:ec:7e:c6:2c:37:81:dd:22:cc:42:87:e3:f2:0b:
a0:85:85:0f:d2:33:9d:36:29:3a:ed:0f:fd:1d:43:27:57:83:
e7:a7:67:6f:7e:7c:f8:bc:2b:e2:e7:ac:38:30:7e:f2:4f:4a:
19:f9:3b:03:5d:0d:6c:15:f8:5f:72:bc:73:20:ee:a4:af:ca:
85:cb:cc:b1:8e:83:81:aa:9e:73:7e:02:bc:f8:18:a3:8b:8d:
3d:a3:3e:3e:fd:16:58:a9:17:02:33:cf:37:82:97:5d:9b:16:
06:92:aa:8c:7d:dc:d3:e7:01:12:7b:ef:5e:0d:74:f4:7e:84:
75:bd:c2:d3:54:7f:66:7d:15:1e:c3:d1:c3:55:9a:c4:78:a7:
bd:fb:8b:82:69:68:4a:34:ba:67:92:7b:9c:41:33:91:a8:69:
6a:3c:23:44:66:00:74:9b:70:5d:c5:41:f0:11:86:19:79:61:
1a:2c:55:45:93:d2:2b:50:da:24:d8:42:2a:0b:ac:8e:2e:49:
24:d0:be:b5:89:bf:51:3f:d3:6a:d4:7d:e6:a6:fc:e4:f6:08:
0a:6e:a1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:54:21 2026 by rpki-client