Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
File: CdCil56bZlLWG5Ad1VoZKNv9z20.mft (raw, json)
Hash identifier: fESPK0kGUyloooUfBNiXCDBJVAv1jUzwCD2Y9Q8SAjM=
Subject key identifier: 77:10:6F:4E:0D:0C:CE:FB:8D:63:70:76:CB:72:7E:56:0F:D9:E5:A8
Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Certificate serial: 019F913562E6CDED23731B67C9D8CB24139F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
Manifest number: 19CB
Signing time: Thu 23 Jul 2026 23:00:22 +0000
Manifest this update: Thu 23 Jul 2026 23:00:22 +0000
Manifest next update: Fri 24 Jul 2026 23:00:22 +0000
Files and hashes: 1: CdCil56bZlLWG5Ad1VoZKNv9z20.crl (hash: Ttf4LrWENNwNk5M+N2lFcCHMrE+eZI8wQ+0TYVpMKOo=)
2: NmgrOBcP0tgFCTOWcRYJnixwDJY.roa (hash: Ao15E11G2dQ+8WLi/IRmXPfGBQ5eaUZAO3CZk8b1evU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:62:e6:cd:ed:23:73:1b:67:c9:d8:cb:24:13:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Validity
Not Before: Jul 23 23:00:22 2026 GMT
Not After : Jul 24 23:00:22 2026 GMT
Subject: CN=77106f4e0d0ccefb8d637076cb727e560fd9e5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:a7:a7:8d:d4:a0:ea:21:75:5d:46:0d:4f:
9b:b4:af:44:b5:a9:a4:df:21:f1:f0:d7:44:13:e1:
58:94:fc:45:34:9c:a5:a7:95:7f:66:06:aa:36:81:
47:c7:23:df:7f:2b:d7:92:87:96:3a:b8:f5:45:0f:
7b:6b:1a:6e:10:0b:56:0a:c7:13:21:97:30:a1:5e:
2c:5a:6e:6c:ce:9f:f0:22:cb:fe:3e:fa:29:67:68:
d9:5e:70:a1:43:0f:f9:3f:a7:c4:9f:8e:d0:c7:e5:
17:3e:b5:9d:96:54:cb:a7:7e:b3:a4:1c:db:46:13:
81:fd:20:59:c2:a2:46:be:23:7b:f3:1c:f4:2a:39:
b2:be:b0:4c:ac:5b:13:45:c7:36:e5:0a:15:4d:89:
91:9a:63:fe:69:db:da:ce:ca:7d:b5:10:74:df:54:
f4:3a:c0:f3:51:4c:23:b1:61:1c:c0:ae:93:e7:f2:
91:12:a7:a1:27:06:20:82:b8:de:aa:e6:67:5a:e3:
81:28:6a:bf:99:cb:b0:6c:b7:ed:b8:ac:1e:dc:7b:
54:23:60:a7:e9:66:e4:75:28:fd:e6:b0:38:2b:21:
f5:8f:81:b0:a6:04:f5:c3:79:12:f1:6b:d5:89:b9:
06:77:21:59:5c:96:4a:21:2b:d9:84:78:66:ef:94:
2c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:10:6F:4E:0D:0C:CE:FB:8D:63:70:76:CB:72:7E:56:0F:D9:E5:A8
X509v3 Authority Key Identifier:
keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ab:28:21:be:88:92:86:29:20:ce:9c:cd:20:e3:97:6c:5f:
63:07:a6:5c:a3:59:7f:5a:99:77:2c:60:b2:42:1d:0f:b4:fd:
9e:b2:a2:38:03:d5:d9:f3:11:54:72:ea:9f:5c:e8:52:58:90:
9f:92:3d:7d:f6:4f:f8:84:07:4e:88:70:9a:f2:d6:76:77:14:
68:28:48:d6:8b:53:31:56:80:cd:9a:00:8d:94:dc:7c:51:f4:
5d:36:3f:9e:64:b9:ba:7e:4c:da:b7:e7:15:23:cc:82:62:37:
d0:f3:86:28:99:52:64:ef:11:25:80:7d:4a:bc:04:51:33:ac:
da:f0:5f:50:bf:f6:7e:b0:66:52:b6:ea:b4:be:01:e3:46:ee:
f1:55:27:a2:be:45:88:b5:da:f2:06:2f:e5:3e:12:fb:82:55:
71:37:33:4b:80:08:88:ca:3f:56:41:db:7e:d6:18:16:5d:a5:
a2:f7:6c:79:56:8e:e5:8a:07:4a:53:98:82:11:69:92:18:06:
42:2e:30:f3:71:ab:b3:b6:f2:fd:a1:41:f7:16:ce:06:98:05:
ee:2d:96:c2:7c:09:71:6c:16:81:54:32:f0:3b:2d:00:76:20:
4a:2c:8b:79:7b:ec:e5:0d:8c:ec:7c:03:a6:14:65:31:bf:46:
63:96:f0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:55 2026 by rpki-client