Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
File: CDcIEWsEvCt2dT4aQwt8vuCc26U.mft (raw, json)
Hash identifier: CosDq88ePgeaHgXdhb58i/8ErDRTO+v4RqDvV2Cyz5Q=
Subject key identifier: 8D:F4:FE:22:7B:40:82:A2:BB:B7:FE:55:9B:D6:A7:A2:BB:0A:FB:45
Authority key identifier: 08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
Certificate issuer: /CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Certificate serial: 019F189EDAA2CC4A0BD3D9979E4039DAED6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
Manifest number: 0D70
Signing time: Tue 30 Jun 2026 13:01:31 +0000
Manifest this update: Tue 30 Jun 2026 13:01:31 +0000
Manifest next update: Wed 01 Jul 2026 13:01:31 +0000
Files and hashes: 1: CDcIEWsEvCt2dT4aQwt8vuCc26U.crl (hash: pYkrjKAfGw00V1zcU3rsSw4x6iC1CtTlztisn357Hdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:da:a2:cc:4a:0b:d3:d9:97:9e:40:39:da:ed:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Validity
Not Before: Jun 30 13:01:31 2026 GMT
Not After : Jul 1 13:01:31 2026 GMT
Subject: CN=8df4fe227b4082a2bbb7fe559bd6a7a2bb0afb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d6:f4:e6:9d:02:83:6c:e5:b2:0c:d9:f1:ff:
2b:4c:c1:c8:1f:8c:0b:90:c9:1e:ca:f2:4d:56:99:
36:01:27:5d:3d:11:91:5a:3c:69:51:c2:3e:49:e1:
91:7f:2a:d1:76:88:ad:d3:28:b9:7e:b2:c7:43:05:
ad:11:c4:a5:18:67:e1:c4:b0:be:0e:63:be:0e:d9:
78:a6:a6:6a:5b:5d:e3:78:fe:22:fd:37:c6:34:fe:
11:43:24:ac:c6:30:4d:09:2a:c4:13:e1:38:a3:07:
84:a5:97:e0:ed:ac:c2:31:9f:b9:9a:9c:1c:2e:8c:
f7:12:d4:38:80:f0:a6:5f:99:52:a3:c0:46:db:ba:
93:3c:3f:b8:8c:b4:db:57:d5:77:0c:50:5e:6c:ad:
22:17:26:3e:bc:1c:d1:3b:fd:cf:1d:56:e7:f4:b8:
11:71:52:51:31:fe:46:1d:ea:ab:6c:03:df:62:80:
c7:67:20:41:16:e0:71:e7:d0:a0:24:dd:af:46:26:
c8:3f:36:9b:31:19:cb:8e:ec:3a:08:c3:b9:df:8f:
84:21:5d:ba:7a:88:aa:e6:56:8e:4b:d9:ac:cb:f2:
4e:b8:c8:82:9f:44:ee:88:be:01:80:0c:2d:48:79:
0f:1a:a3:05:cf:6f:2a:d4:41:55:75:82:bc:e3:53:
3e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F4:FE:22:7B:40:82:A2:BB:B7:FE:55:9B:D6:A7:A2:BB:0A:FB:45
X509v3 Authority Key Identifier:
keyid:08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:17:31:47:33:45:6c:86:00:df:f8:09:d1:cb:59:ff:68:93:
95:64:0f:50:e0:d6:c8:47:ea:98:f0:86:f4:e3:16:8e:80:43:
1d:d4:1e:90:dc:41:58:7f:c6:ef:cb:6b:24:13:b9:ef:ee:2a:
c9:62:ef:4b:22:90:1e:20:63:f6:ea:2c:6f:1f:4f:25:a2:cd:
b8:6b:49:59:9f:21:a1:19:a6:7d:1f:b8:b6:66:5d:80:46:c7:
60:1c:43:85:6c:8a:bc:e3:1c:67:76:c3:26:85:87:b3:57:9c:
08:f8:2e:ca:67:67:d2:2c:96:f5:6f:37:9f:31:fd:f1:81:5b:
1a:fe:a1:75:7b:8c:03:9c:12:d2:b1:ea:5c:77:40:13:f9:01:
bf:9a:96:cb:7f:43:70:b0:9f:c3:5a:1f:62:b8:a3:7e:16:a6:
36:e9:32:ad:f2:dc:d7:c2:5b:d2:4b:cf:ee:9a:17:c9:b1:96:
0e:2e:f7:ac:80:6b:2a:40:e9:3e:65:90:7f:3e:5d:ea:30:76:
3b:1c:54:88:59:48:a6:f4:df:96:fd:42:af:35:5f:b1:b4:13:
bf:b9:96:15:bc:b3:83:c4:44:77:0d:fe:ff:47:16:c4:72:9f:
4f:8f:03:de:58:3d:b8:22:fd:ef:b1:5a:4d:35:8f:3b:f7:13:
ec:d9:09:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:15:46 2026 by rpki-client