Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/83709f-9b03-45c2-b170-b52d61cd5f00/1/CdHrJzMjVUBDlgDZXBF4Qc2Kb9I.mft
File: CdHrJzMjVUBDlgDZXBF4Qc2Kb9I.mft (raw, json)
Hash identifier: xSIavLrZXxYufkvDJkWSm49Q/O8ED7Vfzn/5yMEfMkI=
Subject key identifier: D4:B4:E8:26:41:12:B1:96:38:DD:68:68:CF:77:D5:F8:24:C9:AC:A8
Authority key identifier: 09:D1:EB:27:33:23:55:40:43:96:00:D9:5C:11:78:41:CD:8A:6F:D2
Certificate issuer: /CN=09d1eb2733235540439600d95c117841cd8a6fd2
Certificate serial: 01A040BC480FAEE1A188B4BCB44661263D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdHrJzMjVUBDlgDZXBF4Qc2Kb9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/83709f-9b03-45c2-b170-b52d61cd5f00/1/CdHrJzMjVUBDlgDZXBF4Qc2Kb9I.mft
Manifest number: 2B
Signing time: Thu 27 Aug 2026 01:01:16 +0000
Manifest this update: Thu 27 Aug 2026 01:01:16 +0000
Manifest next update: Fri 28 Aug 2026 01:01:16 +0000
Files and hashes: 1: CdHrJzMjVUBDlgDZXBF4Qc2Kb9I.crl (hash: xZ4MdzsK6DUM4ttK3ajKaAMYNJ4WYf/42lVLLQqGuA8=)
2: DFatI-fa2bP3viYsjB14AzSsTC8.roa (hash: vSqr0xRZG9fh1VXfYFbTiEYLZgLbzG6fPsC+ESzrS/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/83709f-9b03-45c2-b170-b52d61cd5f00/1/CdHrJzMjVUBDlgDZXBF4Qc2Kb9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/83709f-9b03-45c2-b170-b52d61cd5f00/1/CdHrJzMjVUBDlgDZXBF4Qc2Kb9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdHrJzMjVUBDlgDZXBF4Qc2Kb9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bc:48:0f:ae:e1:a1:88:b4:bc:b4:46:61:26:3d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d1eb2733235540439600d95c117841cd8a6fd2
Validity
Not Before: Aug 27 01:01:16 2026 GMT
Not After : Aug 28 01:01:16 2026 GMT
Subject: CN=d4b4e8264112b19638dd6868cf77d5f824c9aca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:63:57:e0:c3:eb:31:7a:56:9e:97:46:6d:
8c:0c:9c:2f:16:57:58:7d:60:f2:14:46:e3:48:d0:
72:a8:0f:5b:61:14:44:e4:2f:5d:e8:74:47:26:35:
aa:4b:71:5c:19:b8:58:31:10:e2:2b:12:2c:83:8c:
ed:0e:23:fb:17:98:3e:55:32:0f:58:c9:c5:64:41:
54:28:52:b8:6d:42:e1:1c:17:f5:8b:11:46:72:66:
9a:ef:f2:f5:16:ff:06:fa:61:b9:d2:9a:fc:43:1f:
38:46:6a:9b:52:6c:d5:35:cc:da:fe:15:e9:7c:fd:
76:a9:70:01:7b:10:52:51:de:50:07:6e:06:60:31:
c6:b7:29:d1:91:58:ab:4a:55:4d:b8:e0:ad:8c:f0:
12:21:94:b7:bf:be:70:98:d4:86:6e:22:4e:fd:f2:
ac:1c:6e:0b:a6:23:39:8b:5e:8b:54:5c:2a:ba:e2:
d9:20:da:a6:11:a0:a2:c3:e5:27:82:45:7f:77:63:
b6:61:26:c1:de:84:c7:32:75:a8:67:b3:19:4f:1a:
d0:20:5f:a8:52:7a:de:b4:27:25:4f:38:16:bd:fd:
68:81:49:3f:57:10:aa:32:39:01:a4:08:0f:62:65:
0b:f0:8c:6c:47:ad:47:fb:02:e8:14:0c:e0:1c:b4:
3d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B4:E8:26:41:12:B1:96:38:DD:68:68:CF:77:D5:F8:24:C9:AC:A8
X509v3 Authority Key Identifier:
keyid:09:D1:EB:27:33:23:55:40:43:96:00:D9:5C:11:78:41:CD:8A:6F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdHrJzMjVUBDlgDZXBF4Qc2Kb9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/83709f-9b03-45c2-b170-b52d61cd5f00/1/CdHrJzMjVUBDlgDZXBF4Qc2Kb9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/83709f-9b03-45c2-b170-b52d61cd5f00/1/CdHrJzMjVUBDlgDZXBF4Qc2Kb9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:51:ec:bf:1b:15:d6:3e:9c:6f:3b:d4:88:bb:18:bf:91:3d:
93:07:21:b5:f8:9d:b3:0e:63:43:65:15:e1:5a:00:d2:8d:e9:
4a:cd:e2:3c:8d:09:40:61:b8:7d:d4:f2:3b:22:18:19:a5:c4:
b5:ad:72:ed:45:18:87:07:4d:6a:a6:d1:1e:50:40:24:5b:e1:
c7:67:d7:c0:1a:aa:b6:05:de:b2:d2:e7:bd:46:7a:dd:50:4e:
ec:13:4a:6b:c4:06:61:46:29:f5:94:89:36:4a:b4:8a:12:a0:
d6:fd:c9:d0:f4:51:a4:05:59:e6:2b:09:1a:f4:bf:86:67:16:
5d:69:28:95:b7:a6:8d:b6:b0:b1:6d:5d:37:25:e2:ad:39:6d:
45:3b:e2:49:51:3e:98:c1:05:04:4e:70:6c:fe:91:cf:b9:6e:
e1:60:09:fc:c8:f4:e0:63:f4:f9:a7:72:2a:c4:37:bf:00:b7:
a8:86:32:4d:17:07:7d:3a:f8:38:8a:89:e4:d8:23:d0:7a:1e:
6f:a4:8e:c0:b1:2a:20:8d:8c:10:a7:3e:07:6b:f6:03:61:20:
4d:a2:8f:f4:4b:57:a5:07:d3:39:db:b8:3b:d4:30:01:5c:80:
37:6a:0d:17:57:7e:18:ad:b4:af:a7:97:c7:90:ab:9d:d0:74:
aa:34:39:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:49:54 2026 by rpki-client