Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
File: CdCil56bZlLWG5Ad1VoZKNv9z20.mft (raw, json)
Hash identifier: BWrSzVDvugjdM6I31EJE9n0TXe5fO+2fzkhez96fENE=
Subject key identifier: DE:87:57:4D:56:2B:5A:19:64:42:B9:D5:9D:F3:0C:05:A3:B5:FC:D6
Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Certificate serial: 01A0D5A6A54D5AA4E7B765020B5B9AB85301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
Manifest number: 1A73
Signing time: Thu 24 Sep 2026 23:01:03 +0000
Manifest this update: Thu 24 Sep 2026 23:01:03 +0000
Manifest next update: Fri 25 Sep 2026 23:01:03 +0000
Files and hashes: 1: CdCil56bZlLWG5Ad1VoZKNv9z20.crl (hash: fUg3mCBXREAKvn6NZfIhOjkCOnc3ggFKMVL4fcFi9Wc=)
2: NmgrOBcP0tgFCTOWcRYJnixwDJY.roa (hash: Ao15E11G2dQ+8WLi/IRmXPfGBQ5eaUZAO3CZk8b1evU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:a5:4d:5a:a4:e7:b7:65:02:0b:5b:9a:b8:53:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Validity
Not Before: Sep 24 23:01:03 2026 GMT
Not After : Sep 25 23:01:03 2026 GMT
Subject: CN=de87574d562b5a196442b9d59df30c05a3b5fcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:07:d5:d8:05:2f:90:23:b3:1c:52:f2:0b:
61:33:cc:91:fd:b4:e5:e1:46:7a:4b:7b:69:2f:4c:
df:27:9b:da:86:f1:d3:e9:90:8b:f6:7c:bf:ec:ff:
dd:04:82:20:e9:f8:a9:46:d5:5b:b5:ca:e3:34:19:
ac:6a:44:02:95:68:fd:30:7d:22:06:67:2e:f6:fd:
84:5f:b7:02:5f:20:a0:fb:5d:5d:7a:6e:4a:b6:a6:
66:57:e1:70:2e:af:31:35:0e:b7:d9:0f:a8:e4:90:
8d:20:69:df:37:51:24:f9:f4:7e:85:3f:cb:85:7d:
9f:bc:4c:40:a4:b4:a4:ab:2b:02:82:4b:c4:70:ac:
1e:6b:8b:b0:e0:7e:cb:19:25:f7:76:52:06:db:d0:
ed:95:a3:b7:41:31:0a:d3:7a:92:22:e3:8d:4b:76:
5a:e3:3a:5e:c6:46:e0:c5:7c:dd:fc:45:a0:01:a7:
a7:17:3d:01:bc:e3:e9:c8:ba:19:5c:2c:b1:94:f0:
6e:f9:97:ee:04:3a:75:6d:de:db:f2:a6:cd:f2:2d:
fb:95:1f:b3:e0:8a:96:dc:77:49:c1:5d:1c:d1:bd:
1a:c8:4a:f7:3d:ef:f6:88:f6:54:21:0b:f4:f0:b6:
5c:ac:d0:a1:b4:05:3c:1a:2a:54:d4:ba:18:69:de:
3b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:87:57:4D:56:2B:5A:19:64:42:B9:D5:9D:F3:0C:05:A3:B5:FC:D6
X509v3 Authority Key Identifier:
keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9c:45:32:b5:ba:09:c6:e6:7b:63:cb:92:4e:b5:f8:8c:45:
83:0e:ee:3e:24:bf:fc:7c:e2:8f:23:3c:bc:3c:aa:79:61:8f:
e4:8f:2e:1e:d3:b2:ef:f7:25:32:65:0c:04:f4:3f:f3:97:51:
5e:29:43:69:48:2d:c4:96:a9:73:9d:22:0d:7c:c9:94:2d:ed:
8a:8b:11:91:b3:aa:18:9f:c3:91:b5:28:fe:3d:ae:d4:3d:28:
ea:7f:c3:96:c0:64:0c:ca:0f:08:dd:43:db:0a:d1:a6:f5:b6:
61:07:2c:60:c0:38:32:e9:8a:08:a9:f4:e3:ba:06:bb:df:04:
af:a1:0a:9e:47:53:35:78:a8:63:a1:f0:da:83:ba:74:58:ba:
f5:fc:ae:59:6b:29:06:97:6f:a7:34:94:fd:f5:9e:a3:7d:26:
d2:ad:4c:2e:bc:2d:7a:f5:01:c5:8b:f1:00:41:c9:4b:4f:08:
4c:1c:8e:5a:ea:43:38:80:17:f5:17:5b:e5:37:1c:93:31:fe:
8a:cc:b1:d0:98:36:41:58:60:f4:58:07:8d:c8:84:c8:a6:c4:
f7:e8:e0:43:55:72:ee:cb:e1:e2:a3:62:f2:65:0c:78:81:4c:
cb:01:05:2f:1d:9a:69:6f:2c:47:62:12:0c:c9:54:66:11:e0:
10:95:e9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:48:51 2026 by rpki-client