Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
File: CDcIEWsEvCt2dT4aQwt8vuCc26U.mft (raw, json)
Hash identifier: l6Jt2HF3ecJGkXrjTJYfIxofR6MGlW9PNb8G05e6V9E=
Subject key identifier: D2:82:20:47:14:6E:3D:8B:E9:34:22:9B:95:BA:8E:FF:77:BC:B0:E9
Authority key identifier: 08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
Certificate issuer: /CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Certificate serial: 019E30DFEA8DB0DC4A345D01CB210122CC18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
Manifest number: 0CF8
Signing time: Sat 16 May 2026 13:00:41 +0000
Manifest this update: Sat 16 May 2026 13:00:41 +0000
Manifest next update: Sun 17 May 2026 13:00:41 +0000
Files and hashes: 1: CDcIEWsEvCt2dT4aQwt8vuCc26U.crl (hash: fmnirIDNL12xC0ZKNNCG1bASPVOSv/7FZHoeJxLfKJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:df:ea:8d:b0:dc:4a:34:5d:01:cb:21:01:22:cc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Validity
Not Before: May 16 13:00:41 2026 GMT
Not After : May 17 13:00:41 2026 GMT
Subject: CN=d2822047146e3d8be934229b95ba8eff77bcb0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2c:28:c1:32:79:8a:06:e7:88:b1:df:50:90:
ca:36:75:ca:8c:a0:57:5b:83:0e:3b:a1:d7:e2:e8:
ef:ac:0d:5c:9c:de:ff:37:d0:50:e7:c0:6f:3e:50:
2c:a0:17:69:6a:cf:f9:29:17:28:1d:49:95:e7:60:
98:11:b8:7b:d1:2f:de:8f:e0:1e:10:97:61:a6:3f:
54:a0:7d:de:06:ae:d9:e2:ea:73:9c:41:fb:4d:a0:
0f:26:65:2b:23:fd:2e:f6:b3:c5:69:89:1d:66:aa:
2a:c8:23:27:fd:0c:96:03:c4:2a:7f:b0:7f:81:49:
b4:45:cf:c3:3d:82:8b:88:dc:b2:f2:0d:79:17:0c:
60:a5:8b:f7:20:78:c3:4c:97:20:86:36:1a:ba:37:
59:e0:32:c3:92:9d:f7:18:21:97:df:7a:67:76:4f:
07:80:5c:ca:1c:2e:7d:2c:06:7c:0d:b0:f8:7d:8d:
67:d8:42:a9:db:6c:41:c3:28:8b:f4:cd:a9:4c:73:
38:28:d2:38:d5:a4:f0:83:3c:99:f0:a6:be:8e:fa:
87:f7:c9:9f:b2:ba:b4:fd:ff:42:cc:c0:f7:d5:16:
d6:d6:61:98:7c:5d:02:16:98:46:0c:d0:fd:d4:83:
70:0f:78:07:31:23:84:f0:17:6b:b0:a7:c2:e7:04:
d6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:82:20:47:14:6E:3D:8B:E9:34:22:9B:95:BA:8E:FF:77:BC:B0:E9
X509v3 Authority Key Identifier:
keyid:08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9c:16:16:8b:2f:71:b6:3e:ac:9f:ee:ca:00:88:3d:f9:b2:
bb:c2:db:0e:c2:b4:d8:56:91:85:15:38:a5:dd:81:ba:7c:0f:
8a:a8:84:55:51:7a:ed:84:25:c7:26:40:ad:00:88:5b:ce:f6:
09:b7:e2:b7:6c:00:2a:96:a1:7a:f4:34:07:60:a2:19:bc:f7:
4a:cf:72:b4:19:f3:f9:86:11:f8:6d:5b:41:ee:d2:9a:c0:ea:
28:aa:cb:28:0c:3a:8a:f7:08:12:16:5f:45:68:37:00:e5:d1:
10:a4:49:e2:12:8e:58:0d:41:86:76:c6:f4:42:2e:3d:e5:4e:
6e:97:48:25:12:9b:19:76:f7:ef:63:f2:17:8a:32:77:92:51:
ca:38:9a:38:0d:86:eb:15:dc:12:2d:94:0d:ae:46:ec:80:0e:
2a:e9:ee:23:bf:3a:98:dd:3e:a1:b9:dd:88:05:fc:e8:dd:d3:
d5:c2:2f:69:51:32:2b:cc:5a:91:ee:ec:e3:27:6d:3f:e4:54:
18:95:ec:0f:0d:cd:27:e5:bf:65:cf:1b:08:04:39:d9:9a:ca:
79:6c:63:eb:51:95:9b:09:db:26:cb:d9:cf:50:80:9d:76:89:
be:fe:29:3b:b2:40:74:d4:c3:9a:ad:2d:ff:32:db:d8:63:a6:
e9:82:e5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:22:59 2026 by rpki-client