Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/bdb427-3851-4eab-8d73-83275a8584d6/1/CDpytJ1bIXldvPM3ElFKMDPL1NM.mft
File: CDpytJ1bIXldvPM3ElFKMDPL1NM.mft (raw, json)
Hash identifier: 5AyuFhlBnCfE4w5pZOiGrAevg7LlBpaOzoxz6illmxE=
Subject key identifier: AD:99:9F:81:24:1D:04:C6:04:08:8F:BC:B3:A7:8D:08:F0:4E:99:83
Authority key identifier: 08:3A:72:B4:9D:5B:21:79:5D:BC:F3:37:12:51:4A:30:33:CB:D4:D3
Certificate issuer: /CN=083a72b49d5b21795dbcf33712514a3033cbd4d3
Certificate serial: 01A03FA9427780B5C8CA8DE007D585FC2DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDpytJ1bIXldvPM3ElFKMDPL1NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bdb427-3851-4eab-8d73-83275a8584d6/1/CDpytJ1bIXldvPM3ElFKMDPL1NM.mft
Manifest number: 011A
Signing time: Wed 26 Aug 2026 20:00:52 +0000
Manifest this update: Wed 26 Aug 2026 20:00:52 +0000
Manifest next update: Thu 27 Aug 2026 20:00:52 +0000
Files and hashes: 1: CDpytJ1bIXldvPM3ElFKMDPL1NM.crl (hash: QhQpb9OnaYjuTx1LCr+A7YRwm6534UZClqeXFv4tQBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bdb427-3851-4eab-8d73-83275a8584d6/1/CDpytJ1bIXldvPM3ElFKMDPL1NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bdb427-3851-4eab-8d73-83275a8584d6/1/CDpytJ1bIXldvPM3ElFKMDPL1NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDpytJ1bIXldvPM3ElFKMDPL1NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:42:77:80:b5:c8:ca:8d:e0:07:d5:85:fc:2d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083a72b49d5b21795dbcf33712514a3033cbd4d3
Validity
Not Before: Aug 26 20:00:52 2026 GMT
Not After : Aug 27 20:00:52 2026 GMT
Subject: CN=ad999f81241d04c604088fbcb3a78d08f04e9983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8b:69:06:24:88:11:3a:84:40:fb:61:63:92:
03:be:2f:db:a6:73:4a:37:76:5e:fa:ba:01:4b:2f:
c8:21:81:92:52:0e:9e:c7:b6:d7:3d:bf:a6:28:76:
88:f6:51:0f:ce:88:8c:3f:c2:ff:a1:4f:dd:4b:df:
54:8e:6b:6d:d9:53:97:b9:92:8e:1c:83:76:81:8c:
24:b7:22:63:2e:06:50:47:1a:6b:46:07:ce:15:fc:
1a:91:7b:14:3a:45:f7:9b:90:ae:c5:c0:41:56:25:
5c:0d:fc:a8:ef:cc:09:0d:7e:7e:85:de:8f:da:92:
72:bc:1a:ae:7a:ef:c2:5b:50:2d:7a:ef:75:47:33:
ea:00:1a:03:78:c3:32:14:80:d6:14:30:25:fa:1b:
bc:11:21:2a:8a:ac:3c:52:b9:81:af:39:e0:f8:6b:
26:d6:87:4a:f9:20:1f:03:e0:dd:6c:9f:85:85:16:
3b:68:48:c2:76:ff:55:28:ac:3f:c2:4f:61:04:67:
71:f7:cc:f5:4c:dd:c8:4c:67:c1:58:fb:11:c7:9d:
49:63:d9:c7:29:b8:e8:73:8f:2b:d6:c5:3e:06:8c:
f7:f3:99:cb:5b:d6:8d:8e:f9:bd:0f:1b:5e:d3:44:
b2:5b:e1:5d:08:39:00:47:35:8d:93:55:17:63:99:
da:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:99:9F:81:24:1D:04:C6:04:08:8F:BC:B3:A7:8D:08:F0:4E:99:83
X509v3 Authority Key Identifier:
keyid:08:3A:72:B4:9D:5B:21:79:5D:BC:F3:37:12:51:4A:30:33:CB:D4:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDpytJ1bIXldvPM3ElFKMDPL1NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bdb427-3851-4eab-8d73-83275a8584d6/1/CDpytJ1bIXldvPM3ElFKMDPL1NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bdb427-3851-4eab-8d73-83275a8584d6/1/CDpytJ1bIXldvPM3ElFKMDPL1NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:85:2a:c6:6e:5d:a3:aa:b4:b1:99:19:1a:7b:6f:4d:7b:1b:
a3:b2:84:75:be:55:d5:4a:d5:42:d0:59:72:8b:35:f6:a9:bf:
ef:8f:c4:06:f3:e1:9e:9d:5f:3d:a4:70:41:5e:d0:eb:9e:20:
43:ef:79:c8:ed:e0:90:09:a7:97:fa:9e:ad:cb:9e:8c:90:8b:
8f:d4:96:09:77:59:cc:36:14:a9:c0:5f:ad:10:5e:57:4d:15:
04:9b:ab:39:d1:6f:f1:19:c0:54:45:94:1d:11:dc:75:09:02:
a8:b5:87:52:32:15:83:36:7e:0d:b1:97:90:8a:a2:fa:55:34:
db:0a:75:e1:57:81:3c:52:42:3c:63:0e:bb:19:1b:a2:5b:fc:
30:33:b9:17:52:33:5a:a0:77:c3:81:d9:36:44:37:99:68:3f:
0e:5a:26:50:60:ac:63:35:f2:ff:97:e0:44:70:1a:6c:5f:f3:
76:16:3a:93:d2:a6:eb:f4:cd:f8:e8:17:33:ec:ed:d7:bb:41:
21:e5:bd:a9:e8:6f:bc:01:c8:5a:2a:7b:79:bc:9f:eb:37:7f:
c2:97:2e:87:9e:ec:79:32:64:02:28:87:b7:90:20:e2:ce:c1:
34:22:ef:7f:b4:dd:1f:37:f1:65:30:8f:2d:b6:2e:77:1f:38:
e9:a5:b8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:20:37 2026 by rpki-client