Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
File: cdV4WLGdypZzvB9nIZ71Ab873Oo.mft (raw, json)
Hash identifier: me5UUQvncjxWrtGE5Xii729EBdlKLWyUMEXMfMbsguk=
Subject key identifier: 66:EE:B8:41:09:5E:01:E4:E6:60:A9:25:E9:AD:02:C7:43:3B:FF:AC
Authority key identifier: 71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
Certificate issuer: /CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Certificate serial: 01A17D73E480F8D93639621BD6055D041A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
Manifest number: 09A3
Signing time: Tue 27 Oct 2026 13:01:49 +0000
Manifest this update: Tue 27 Oct 2026 13:01:49 +0000
Manifest next update: Wed 28 Oct 2026 13:01:49 +0000
Files and hashes: 1: cdV4WLGdypZzvB9nIZ71Ab873Oo.crl (hash: QBvrLm5AvpH40Cwkfbk+VQC8BGxerwIccHvoMJ45nf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:e4:80:f8:d9:36:39:62:1b:d6:05:5d:04:1a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Validity
Not Before: Oct 27 13:01:49 2026 GMT
Not After : Oct 28 13:01:49 2026 GMT
Subject: CN=66eeb841095e01e4e660a925e9ad02c7433bffac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:50:7f:4f:73:d1:e9:b8:58:c6:eb:f4:1a:ce:
15:94:cf:6a:1c:2e:aa:a5:37:d6:49:34:7f:a4:4e:
25:79:97:a5:9a:5c:97:81:e3:79:f6:7b:dd:e8:27:
44:73:ec:d2:0a:ff:05:74:5c:cb:d3:2d:0d:63:f4:
2c:21:ab:0c:3c:e6:bb:21:1e:40:50:f2:7a:14:5f:
78:60:61:44:42:63:d9:9f:de:7b:1e:f1:65:ae:71:
74:ea:eb:44:dc:c6:4d:0c:27:4d:1d:25:c5:14:7f:
aa:b7:66:29:30:2d:82:15:90:96:9f:89:e3:8d:34:
1a:f9:a1:7e:c7:4b:4d:05:04:f5:e4:c4:b7:d1:e1:
5c:5e:8e:e3:3f:e6:22:de:54:90:ca:41:71:ed:79:
f4:f3:18:6e:43:8a:f7:86:83:c3:c0:7b:ab:47:6a:
81:b7:62:31:05:81:e5:85:4b:0d:11:8c:82:08:f0:
ba:26:b0:c1:23:dc:a7:a7:ef:db:a9:fd:98:33:73:
7e:e8:60:13:d8:e7:3e:cc:fe:19:31:20:51:fd:a0:
58:f1:17:1b:f3:1d:f3:2b:99:f4:8d:64:cb:2f:4e:
6d:5a:88:24:65:58:45:f2:de:90:34:a6:58:76:26:
0f:14:4c:19:5b:d4:3d:1f:ca:c0:9c:12:44:61:be:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EE:B8:41:09:5E:01:E4:E6:60:A9:25:E9:AD:02:C7:43:3B:FF:AC
X509v3 Authority Key Identifier:
keyid:71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f8:f6:57:c0:b6:8d:5d:50:21:85:28:c1:f1:fa:3d:57:65:
82:41:bb:12:cf:ac:4a:02:17:57:5c:2c:8d:d8:ac:c7:68:e2:
5d:64:dd:56:1b:37:d0:c3:cb:c2:13:15:97:88:1a:33:1d:11:
85:95:35:92:52:cd:5f:e1:03:85:57:9a:b3:1e:79:69:20:3a:
5a:0e:d5:91:5a:80:1a:01:0c:f5:26:0c:42:4a:8d:45:dd:2d:
e3:4e:b2:31:9f:12:84:16:61:18:fe:6b:0e:7f:3f:2b:85:23:
54:de:e2:2e:56:61:75:88:f6:6a:87:99:c5:e7:ec:c5:b3:8a:
37:a2:84:f1:a2:4f:e6:e4:e0:d4:0a:b0:bf:dc:8e:b1:fb:9b:
28:00:1b:64:b4:56:27:c4:a5:c8:7a:cd:de:1b:9c:93:74:8e:
cc:97:6b:7f:cd:48:57:d7:93:d6:36:ff:11:60:41:8b:79:ea:
b3:df:3b:15:26:cc:16:c1:46:1c:c3:9a:59:80:d3:12:81:a3:
8a:46:94:c6:32:39:f1:bf:6d:95:68:11:3d:7c:21:5a:53:d9:
30:63:5f:70:f7:d8:ab:53:4f:af:85:b0:dd:e1:b6:f3:96:7a:
58:3f:0c:14:e1:88:74:df:95:06:b7:8f:6c:77:9e:3e:62:9d:
20:3a:fe:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:23:11 2026 by rpki-client