Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
File: cdV4WLGdypZzvB9nIZ71Ab873Oo.mft (raw, json)
Hash identifier: WcjBNhZGo5Ls1am4/pQhdNDybX0CzEJHlkTL8ORZnSU=
Subject key identifier: 21:5F:65:F5:28:AB:03:CF:5F:6A:75:DD:CB:19:47:C8:93:54:47:02
Authority key identifier: 71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
Certificate issuer: /CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Certificate serial: 019D3865D339844892FA91D33C57356AF601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
Manifest number: 076D
Signing time: Sun 29 Mar 2026 07:01:30 +0000
Manifest this update: Sun 29 Mar 2026 07:01:30 +0000
Manifest next update: Mon 30 Mar 2026 07:01:30 +0000
Files and hashes: 1: cdV4WLGdypZzvB9nIZ71Ab873Oo.crl (hash: EQKe+2znmtlprjgkQrHW1tZ48ckS5IuEAel/Kya3zZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d3:39:84:48:92:fa:91:d3:3c:57:35:6a:f6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Validity
Not Before: Mar 29 07:01:30 2026 GMT
Not After : Mar 30 07:01:30 2026 GMT
Subject: CN=215f65f528ab03cf5f6a75ddcb1947c893544702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2a:a8:a9:3b:af:0d:b2:c1:47:6a:53:83:65:
11:ab:44:a1:4c:64:82:30:cd:ef:1b:c6:57:73:9f:
9c:68:2f:4c:f5:a5:e3:b3:d8:6f:2d:67:65:85:ca:
86:1e:4a:e9:00:25:29:48:72:3e:54:22:4c:0a:13:
1f:84:6e:e4:ce:71:a1:b8:26:51:8c:92:14:f2:76:
4a:16:db:12:07:ad:92:46:c0:2f:b8:cc:a0:68:d8:
bb:8d:cf:d3:a7:7b:22:ae:b3:24:5d:c0:dc:eb:c0:
1f:a4:5b:b2:a9:aa:91:34:49:94:d2:eb:d6:b0:ce:
a5:60:c3:9b:f2:eb:fc:d0:84:9f:c8:00:a8:15:94:
33:52:02:eb:6a:0c:34:a1:80:1d:9b:81:18:a1:e3:
cb:87:ac:5d:2c:37:e8:4a:48:34:53:89:ce:93:79:
e6:fd:c3:5c:6c:8f:ce:7f:1a:c5:ef:f6:b0:4b:34:
e0:37:48:36:77:7d:b7:06:47:23:75:5c:9a:4b:9f:
ca:28:ac:10:1b:e3:cf:70:c7:67:b4:e0:8e:60:2f:
2a:77:0c:01:06:c2:90:8d:89:37:4e:60:e4:14:5d:
63:0c:e2:f6:ad:44:32:65:85:ed:12:9e:e9:79:8d:
63:ae:00:cd:b2:5e:57:14:6d:01:fd:dc:26:24:e1:
41:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5F:65:F5:28:AB:03:CF:5F:6A:75:DD:CB:19:47:C8:93:54:47:02
X509v3 Authority Key Identifier:
keyid:71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:69:27:62:50:87:a8:4c:b6:ec:fb:8c:43:3a:a8:a5:41:db:
b5:8a:60:0d:bd:43:2c:69:78:35:ef:a6:9a:08:9e:d0:ce:af:
28:69:70:d6:e3:e4:15:ba:ac:9e:f0:15:52:c7:fe:43:f9:88:
6d:e3:a2:85:a0:76:a5:ee:64:b9:f6:62:e9:38:12:1c:b4:a3:
63:b1:9a:67:a4:4a:de:a4:13:81:a5:ac:0d:c1:e7:06:0a:8e:
ca:c0:eb:29:50:2e:39:a7:4c:05:64:06:1c:56:f6:a3:f5:2d:
a2:fc:c5:6d:95:5d:00:69:45:e5:a0:63:c3:f7:1e:df:d4:5d:
cd:9e:30:97:4e:11:00:54:52:4a:46:e2:e2:3b:2a:8a:d2:88:
ca:12:6a:57:d6:b4:ec:2b:7a:09:e6:c6:9a:e0:1b:0f:42:bf:
8e:68:0c:f0:4e:7a:16:85:2f:5c:7c:37:27:91:03:dc:23:c7:
ff:0d:ce:0b:7b:e2:9a:52:cb:24:eb:69:e6:c3:15:b0:07:dc:
3c:aa:b0:2c:31:d2:cd:9f:be:00:68:d2:fe:27:a2:26:7f:c7:
84:e3:44:99:df:3a:f4:3b:d1:8f:97:f1:fc:83:cd:ad:4c:30:
23:b5:3c:ec:4e:36:99:1e:e6:cc:35:d0:86:c6:05:01:38:1a:
14:15:bf:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:07 2026 by rpki-client