Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/CdjmULbaUsbIZiv1walRQXDSo0I.mft
File: CdjmULbaUsbIZiv1walRQXDSo0I.mft (raw, json)
Hash identifier: cVQ5lmMMp2+x09aSTbCmcfPoTDOdioYGA5GbFDNmoZw=
Subject key identifier: 99:5B:D1:6B:5F:5B:B8:FA:31:DD:29:19:4B:E9:E3:99:9B:3C:A9:1C
Authority key identifier: 09:D8:E6:50:B6:DA:52:C6:C8:66:2B:F5:C1:A9:51:41:70:D2:A3:42
Certificate issuer: /CN=09d8e650b6da52c6c8662bf5c1a9514170d2a342
Certificate serial: 01A03F3B7DC95682DC2AFC77AF51FEC6E8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdjmULbaUsbIZiv1walRQXDSo0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/CdjmULbaUsbIZiv1walRQXDSo0I.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 18:00:58 +0000
Manifest this update: Wed 26 Aug 2026 18:00:58 +0000
Manifest next update: Thu 27 Aug 2026 18:00:58 +0000
Files and hashes: 1: CdjmULbaUsbIZiv1walRQXDSo0I.crl (hash: zecKBFVwb7w4O53hfJluu6Nl+2ZSMpjgBtTvidpWJu4=)
2: KCxxupIcEQ18mDe3dOfL72pZbbY.roa (hash: mX9QZqD4f5AL6HtDS+tdAFAEMdX2qaM26X073LH1lkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/CdjmULbaUsbIZiv1walRQXDSo0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/CdjmULbaUsbIZiv1walRQXDSo0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdjmULbaUsbIZiv1walRQXDSo0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:7d:c9:56:82:dc:2a:fc:77:af:51:fe:c6:e8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d8e650b6da52c6c8662bf5c1a9514170d2a342
Validity
Not Before: Aug 26 18:00:58 2026 GMT
Not After : Aug 27 18:00:58 2026 GMT
Subject: CN=995bd16b5f5bb8fa31dd29194be9e3999b3ca91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d0:c6:a7:c4:ce:15:72:b1:52:99:b3:be:de:
10:45:f0:29:a0:12:a2:22:a3:c6:2c:57:8a:d5:a3:
4a:71:cb:14:62:76:8f:76:85:6e:73:31:6b:65:ad:
9a:e8:53:7b:21:c6:78:74:b2:2d:6f:8d:a9:ea:ea:
0c:3e:d1:a2:52:ff:8e:99:b3:87:e7:d1:56:f6:cb:
36:fd:4b:e9:29:71:00:44:07:e7:0f:a9:dc:22:f6:
b3:50:d6:1e:ee:8c:81:e9:a8:73:27:f4:5a:e2:5f:
92:c1:3c:85:12:c3:94:be:a7:c8:65:2a:e8:28:dc:
47:79:00:71:d4:b6:9f:03:bb:e7:d9:b7:d9:62:dc:
d6:c9:97:77:2c:1e:0f:3e:a1:ce:b4:b1:1a:16:b6:
91:1b:72:5b:a0:ee:f4:93:7c:f0:d4:f9:7c:6b:76:
fa:f4:9f:44:fa:8d:6e:8c:0e:ad:b5:50:72:fc:d2:
18:6a:0d:0d:36:9a:56:a5:c5:ff:d0:c2:e1:dd:f9:
2d:df:fd:1d:b6:57:d7:44:9e:ae:46:41:55:91:60:
07:df:88:1c:b4:00:7a:13:e4:66:99:72:68:5a:a2:
bf:9a:ea:3b:e4:ff:67:eb:54:3d:b7:cf:90:60:07:
78:d3:cf:4d:aa:a3:06:1e:1a:ec:99:dd:55:5d:6f:
f9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5B:D1:6B:5F:5B:B8:FA:31:DD:29:19:4B:E9:E3:99:9B:3C:A9:1C
X509v3 Authority Key Identifier:
keyid:09:D8:E6:50:B6:DA:52:C6:C8:66:2B:F5:C1:A9:51:41:70:D2:A3:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdjmULbaUsbIZiv1walRQXDSo0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/CdjmULbaUsbIZiv1walRQXDSo0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/CdjmULbaUsbIZiv1walRQXDSo0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e8:9d:bd:55:14:a5:b7:25:9d:70:81:61:20:ca:cb:ab:0b:
69:b4:c1:eb:d7:35:fb:a2:21:56:d9:4d:53:78:fd:49:63:2d:
88:84:f6:5a:2c:1c:61:ba:bb:6f:71:54:a6:4a:1d:f2:a5:8a:
20:a4:74:f9:e0:e5:12:a7:bc:ec:89:e3:25:5c:0f:3c:94:a5:
56:61:74:16:6c:35:51:ea:29:20:2f:34:a6:bb:b3:c0:46:9f:
d1:12:20:51:cf:92:d6:42:f1:a7:3c:35:71:c1:dd:3b:fd:50:
b4:78:b5:fb:5e:aa:04:01:65:a1:26:73:c3:fa:a6:eb:38:3e:
d9:9c:d4:70:c5:ef:6f:ee:9c:9b:3a:5b:13:82:b4:35:ca:da:
58:ed:24:87:b2:08:79:35:b6:cc:5d:fb:17:1a:d2:76:cb:42:
26:2f:03:ee:ae:51:fe:52:2d:eb:85:ca:18:d6:aa:70:cf:b0:
0b:c4:90:e5:48:fe:2f:1c:4f:4a:e4:3c:0b:15:ec:dc:91:c6:
e9:9e:fd:0d:4a:b5:19:df:ac:2c:d7:73:85:9a:b8:8e:74:6b:
60:88:87:a9:be:12:c9:4f:1a:60:12:da:cf:92:1c:ca:7f:f5:
08:06:f1:30:d1:d3:8c:b6:d6:fd:ee:f2:93:df:24:f3:b1:a1:
0d:30:cf:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:30 2026 by rpki-client