Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/6b9626-fb1a-445e-b95a-b002f35be739/1/cdiwl1czMSbftYNIDqji09NGwI0.mft
File: cdiwl1czMSbftYNIDqji09NGwI0.mft (raw, json)
Hash identifier: MhUnm0rktM5Yov+5LCyYjzFbcjjWWBkQfl441P5i2FY=
Subject key identifier: 22:7C:D8:2B:61:52:57:8D:B7:5D:38:29:7C:74:7E:16:D9:B7:4A:46
Authority key identifier: 71:D8:B0:97:57:33:31:26:DF:B5:83:48:0E:A8:E2:D3:D3:46:C0:8D
Certificate issuer: /CN=71d8b09757333126dfb583480ea8e2d3d346c08d
Certificate serial: 01A16232DFEAFA4C53C2F93D072E2093626D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdiwl1czMSbftYNIDqji09NGwI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6b9626-fb1a-445e-b95a-b002f35be739/1/cdiwl1czMSbftYNIDqji09NGwI0.mft
Manifest number: 03CF
Signing time: Thu 22 Oct 2026 06:01:03 +0000
Manifest this update: Thu 22 Oct 2026 06:01:03 +0000
Manifest next update: Fri 23 Oct 2026 06:01:03 +0000
Files and hashes: 1: cdiwl1czMSbftYNIDqji09NGwI0.crl (hash: kZWY8uVIXKzBMtkO9NImbKK2TB8sDI4uTDcKa9bGwDg=)
2: d7QLV60EzdcK6Z9SHb-OI9Vui7M.roa (hash: rchiT/bvXuEanUa+M3WmCKgTEc1BUzo1gca2cFJPRLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/6b9626-fb1a-445e-b95a-b002f35be739/1/cdiwl1czMSbftYNIDqji09NGwI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/6b9626-fb1a-445e-b95a-b002f35be739/1/cdiwl1czMSbftYNIDqji09NGwI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdiwl1czMSbftYNIDqji09NGwI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:32:df:ea:fa:4c:53:c2:f9:3d:07:2e:20:93:62:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d8b09757333126dfb583480ea8e2d3d346c08d
Validity
Not Before: Oct 22 06:01:03 2026 GMT
Not After : Oct 23 06:01:03 2026 GMT
Subject: CN=227cd82b6152578db75d38297c747e16d9b74a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:36:60:bd:67:3e:8f:c1:00:48:5c:d8:69:54:
94:2e:e1:67:5b:2f:15:64:0a:bc:94:12:30:2f:70:
9c:70:19:6b:6d:4a:23:96:71:8f:e2:a5:74:f9:af:
e8:7c:a3:a8:f9:17:65:4b:64:d7:18:db:69:2c:aa:
45:f4:6e:70:83:99:1f:c4:60:25:12:5d:2d:df:8c:
e4:c5:c9:39:4b:5f:f7:cb:4a:93:e5:d3:49:03:34:
2a:68:ef:a0:39:32:5a:bb:b1:b9:5e:bb:98:c1:35:
7f:38:5c:88:76:3a:28:61:69:30:0b:39:4c:75:d8:
66:82:48:db:d9:60:9d:1d:7d:1c:6b:27:4e:72:2e:
21:53:a9:62:ed:fc:d3:9f:67:5f:03:15:49:d3:4e:
16:85:c7:70:b8:e7:dc:37:22:95:7a:43:78:b2:3b:
6b:0c:f4:6a:bc:60:06:40:59:e0:c4:77:2e:42:34:
b8:80:0f:cb:c2:1d:38:2a:01:4b:fe:4d:7f:03:c0:
6e:6d:3a:f4:5d:3a:fd:97:c0:93:60:bd:c9:c0:af:
84:83:f5:dd:d5:50:7e:9b:76:20:4e:df:c3:1b:f3:
30:ed:10:5a:e1:e1:00:ae:03:f7:7f:8e:f0:a5:20:
69:de:a9:1f:30:3c:2b:ec:6e:47:62:a6:85:91:df:
0b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7C:D8:2B:61:52:57:8D:B7:5D:38:29:7C:74:7E:16:D9:B7:4A:46
X509v3 Authority Key Identifier:
keyid:71:D8:B0:97:57:33:31:26:DF:B5:83:48:0E:A8:E2:D3:D3:46:C0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdiwl1czMSbftYNIDqji09NGwI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6b9626-fb1a-445e-b95a-b002f35be739/1/cdiwl1czMSbftYNIDqji09NGwI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6b9626-fb1a-445e-b95a-b002f35be739/1/cdiwl1czMSbftYNIDqji09NGwI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:78:1d:21:15:c7:74:31:a2:44:8d:98:b9:24:e7:09:03:bf:
03:cc:24:b1:fa:eb:b6:93:a9:63:c9:f0:ee:3a:9d:c6:bf:5b:
b2:00:6e:bf:4e:bf:e9:ff:b1:eb:18:b9:8e:b3:7a:47:3a:8b:
b4:74:fa:03:3e:d8:6f:f0:01:96:f5:a5:3b:00:17:01:37:b2:
b4:ce:81:14:91:11:be:7c:58:22:8c:2f:14:6b:f4:1e:94:f0:
85:d8:ba:79:5e:58:42:4e:b8:74:2f:9d:4e:db:46:e5:c8:b7:
0b:6b:f9:f9:05:34:b4:5e:fe:84:c2:53:ee:e8:f1:74:20:13:
f9:05:dc:38:e3:43:5d:6b:e5:9d:60:2d:b1:b1:5d:c0:c6:c6:
b3:ac:98:11:c1:01:b2:0d:6e:55:86:4d:7c:37:12:ee:37:1c:
b5:c4:7d:98:5b:de:e5:f5:89:14:35:db:69:f9:8e:15:ef:ba:
b4:58:d7:d1:62:2d:cb:f8:04:51:a6:dd:69:5b:95:b0:6b:a6:
ce:9d:03:92:5f:fa:6a:ea:18:5d:20:1c:3d:2a:c5:4c:b8:e9:
ae:60:53:73:0b:fe:b8:d6:b2:12:cb:2e:d1:4d:95:96:07:e6:
92:43:47:bf:9a:2a:c7:39:1f:e7:3e:18:c1:a5:39:7c:1c:bc:
01:29:54:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:53:05 2026 by rpki-client