Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File: CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier: rmacW/onwFC2AwjAZ/Qy2rACyifMYYGwFbSd4V8dTE0=
Subject key identifier: C7:F9:8C:1A:6B:6F:B4:D3:72:A6:A4:32:A1:6E:A6:12:41:D4:7D:C9
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial: 019E1CB4F31D2CFE6744656B5E5D9265696C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 15:01:21 +0000
Manifest this update: Tue 12 May 2026 15:01:21 +0000
Manifest next update: Wed 13 May 2026 15:01:21 +0000
Files and hashes: 1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: +0oiLrjAbNMizhIUHszMFRHAcS7QMCbyY98FxMC54DY=)
2: OC2xnBQTRG6dTo8unU-AfiUJoPo.roa (hash: TCWmomXoe5LhZ7eUQal/1Sd3d3namiJ5LFej1VLenpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:f3:1d:2c:fe:67:44:65:6b:5e:5d:92:65:69:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
Validity
Not Before: May 12 15:01:21 2026 GMT
Not After : May 13 15:01:21 2026 GMT
Subject: CN=c7f98c1a6b6fb4d372a6a432a16ea61241d47dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:5d:f0:6e:24:3c:35:73:16:7d:ee:6d:6a:
23:57:f8:9c:40:1f:3b:18:f2:b7:fb:7b:f4:58:2f:
0a:99:3b:1e:1a:92:ad:0b:01:4e:40:e8:55:97:8c:
b3:f4:7c:e4:e0:52:cc:f0:b6:13:33:62:48:78:a5:
25:bc:59:ac:bb:af:c0:e9:7c:75:f6:2c:84:bc:2c:
81:00:88:80:24:9d:ad:1e:b3:f7:3b:2b:29:9b:01:
dc:44:75:f4:1b:55:74:c5:73:8d:c6:47:d4:1a:cc:
6b:d2:79:7a:76:22:74:8d:d2:7a:46:91:6c:d1:89:
f2:e0:34:c3:b8:8c:10:a2:1e:89:93:40:43:f8:5e:
c8:8d:e6:39:1b:c5:e0:e6:ef:37:10:f5:d2:79:1d:
39:0f:4f:17:58:7b:cd:e4:b1:e0:e5:32:81:7f:42:
82:6b:17:25:52:86:c9:c9:fa:d3:01:32:8a:16:61:
9b:bf:2a:bb:4a:c0:86:23:3e:d0:b9:29:31:14:da:
42:41:90:3f:53:06:c7:46:74:f2:d9:16:78:69:25:
f7:ac:f3:a2:0a:c7:68:19:cc:67:8e:0c:12:6c:4b:
bd:e9:e0:51:18:71:5b:86:70:31:36:88:c8:15:ee:
0a:4f:49:1d:f1:1b:a5:d2:47:12:c5:e0:7b:fc:9f:
d7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F9:8C:1A:6B:6F:B4:D3:72:A6:A4:32:A1:6E:A6:12:41:D4:7D:C9
X509v3 Authority Key Identifier:
keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:7b:27:17:94:1f:10:39:d6:6d:d4:e1:e3:9c:ad:6f:c4:f1:
3d:94:85:a9:04:2c:8f:98:b8:9c:55:2f:cc:bf:3c:67:47:cd:
60:b8:8e:0f:ac:62:0a:de:c9:a9:75:e1:41:32:c5:29:d5:1f:
31:66:df:8b:c1:7f:23:f5:d4:a5:da:6b:11:ca:40:d4:41:70:
df:3a:2a:b1:23:bd:db:21:13:17:65:3d:76:53:46:f1:f6:9e:
7f:a3:3e:6e:18:22:53:cf:d3:27:fd:3a:95:1c:2e:56:c0:bc:
f0:41:1e:cf:ff:b2:96:0f:b8:1b:56:f3:60:d3:fc:01:1f:c9:
3e:96:2e:50:8d:59:69:74:e4:18:2d:d5:fa:76:30:79:a5:62:
3e:a7:21:ee:46:f8:19:38:89:f9:96:4f:ee:90:59:e8:70:50:
3f:5d:a2:9b:02:bc:c7:89:82:c8:68:e1:1b:2b:6d:b7:17:c9:
5e:86:14:e4:32:c3:e4:09:60:97:61:e4:a4:86:3e:08:3d:c3:
53:b3:61:79:1a:95:54:31:cc:20:a0:23:78:e6:3a:a7:82:73:
57:26:a8:d2:1e:22:7c:98:ff:15:eb:21:b5:a7:71:9f:88:96:
99:8c:c1:1c:01:f3:bf:31:99:e6:f5:4f:71:34:5c:11:d7:de:
05:7f:31:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctPMdLP5nRGVrXl2SZWlsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NTYxZDBkZTYyMjQ3ZTIwODViZjU5YTczYzg3ZDI1YTI0
Mzg5ODAwHhcNMjYwNTEyMTUwMTIxWhcNMjYwNTEzMTUwMTIxWjAzMTEwLwYDVQQD
EyhjN2Y5OGMxYTZiNmZiNGQzNzJhNmE0MzJhMTZlYTYxMjQxZDQ3ZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJJd8G4kPDVzFn3ubWojV/icQB87
GPK3+3v0WC8KmTseGpKtCwFOQOhVl4yz9Hzk4FLM8LYTM2JIeKUlvFmsu6/A6Xx1
9iyEvCyBAIiAJJ2tHrP3OyspmwHcRHX0G1V0xXONxkfUGsxr0nl6diJ0jdJ6RpFs
0Yny4DTDuIwQoh6Jk0BD+F7IjeY5G8Xg5u83EPXSeR05D08XWHvN5LHg5TKBf0KC
axclUobJyfrTATKKFmGbvyq7SsCGIz7QuSkxFNpCQZA/UwbHRnTy2RZ4aSX3rPOi
CsdoGcxnjgwSbEu96eBRGHFbhnAxNojIFe4KT0kd8Rul0kcSxeB7/J/XaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMf5jBprb7TTcqakMqFuphJB1H3JMB8GA1UdIwQY
MBaAFAhWHQ3mIkfiCFv1mnPIfSWiQ4mAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0ZZZERlWWlSLUlJV19XYWM4aDlKYUpEaVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lZDljNjMtNTZiZS00NzFiLTliYWIt
NTNlZDgyZDMzZDg0LzEvQ0ZZZERlWWlSLUlJV19XYWM4aDlKYUpEaVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9lZDljNjMtNTZiZS00NzFiLTliYWItNTNlZDgyZDMzZDg0
LzEvQ0ZZZERlWWlSLUlJV19XYWM4aDlKYUpEaVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXsnF5Qf
EDnWbdTh45ytb8TxPZSFqQQsj5i4nFUvzL88Z0fNYLiOD6xiCt7JqXXhQTLFKdUf
MWbfi8F/I/XUpdprEcpA1EFw3zoqsSO92yETF2U9dlNG8faef6M+bhgiU8/TJ/06
lRwuVsC88EEez/+ylg+4G1bzYNP8AR/JPpYuUI1ZaXTkGC3V+nYweaViPqch7kb4
GTiJ+ZZP7pBZ6HBQP12imwK8x4mCyGjhGytttxfJXoYU5DLD5Algl2HkpIY+CD3D
U7NheRqVVDHMIKAjeOY6p4JzVyao0h4ifJj/Feshtadxn4iWmYzBHAHzvzGZ5vVP
cTRcEdfeBX8x3A==
-----END CERTIFICATE-----
Generated at Tue May 12 21:18:05 2026 by rpki-client