Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
File: CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft (raw, json)
Hash identifier: hmDGVfF0+SJjmyF5wlKr5SNCd7QY0anZ5MYy9wDlTww=
Subject key identifier: 49:39:03:E0:42:59:2B:28:B3:C0:B6:B0:D0:22:1B:B3:5F:C3:99:0C
Authority key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
Certificate issuer: /CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Certificate serial: 01A13E26303C82223DA24B09C155A773FF8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
Manifest number: 1008
Signing time: Thu 15 Oct 2026 06:00:52 +0000
Manifest this update: Thu 15 Oct 2026 06:00:52 +0000
Manifest next update: Fri 16 Oct 2026 06:00:52 +0000
Files and hashes: 1: 6NX7kHYLQEY_Fjy3vPy-MzWGuS0.roa (hash: QMXJPUTLlHe/t5S4J5pRp03CHJgFFci+ULIf4qsBmK8=)
2: CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl (hash: HtS7L4uKNyLOpU4VE/9Jhtwlk66IY3qHnp8xnxf+550=)
3: rKdvuJIJFgGPfjR9_tkt7GpYbuU.roa (hash: cOdZ/AGn383MF+NUE+R43rPhYLUIwbGM9+ozFG63CYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:30:3c:82:22:3d:a2:4b:09:c1:55:a7:73:ff:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Validity
Not Before: Oct 15 06:00:52 2026 GMT
Not After : Oct 16 06:00:52 2026 GMT
Subject: CN=493903e042592b28b3c0b6b0d0221bb35fc3990c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9e:f7:9e:78:09:c1:a2:7f:85:97:75:b5:8b:
ab:b7:20:4b:84:b2:bf:69:a9:75:54:68:05:7d:9f:
14:53:86:74:0c:2c:3c:64:1d:10:d4:a6:82:1a:ff:
8e:da:89:e7:68:8d:cc:50:f5:39:f3:c6:ca:fb:b4:
8c:c9:54:32:8b:1e:56:57:e1:e1:92:62:c9:fc:00:
b2:bd:a0:b5:64:7b:98:f6:6c:45:76:d0:1a:d0:dd:
20:43:13:09:ae:db:92:c7:68:3f:57:24:1e:39:67:
1a:69:b7:3e:32:9b:e7:56:85:6d:34:ff:61:41:73:
98:68:c4:2e:0a:58:f3:1c:1e:67:11:d7:c8:d8:8f:
e5:6a:e7:10:07:40:69:27:94:cd:a2:4b:6a:64:46:
ca:cc:8e:c0:02:97:8c:77:5a:f0:23:6e:81:03:ab:
8c:86:21:82:48:02:60:be:92:d0:ae:99:fc:ab:5e:
09:f5:2b:b3:52:eb:5e:02:12:3a:70:e6:f5:77:9b:
39:63:4f:05:cf:26:d7:5c:c7:68:ae:7d:78:c2:b1:
88:47:83:48:5d:e6:0e:45:96:93:2e:96:92:80:7a:
db:1b:74:e3:93:fc:47:31:9e:f6:cb:99:32:53:1f:
c6:4b:f1:74:f6:05:8e:ee:15:55:54:82:be:97:e8:
54:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:39:03:E0:42:59:2B:28:B3:C0:B6:B0:D0:22:1B:B3:5F:C3:99:0C
X509v3 Authority Key Identifier:
keyid:09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:dc:ea:2c:0a:d9:6a:b3:cf:53:26:5d:e3:64:d5:6a:73:45:
99:74:4b:04:f0:8a:d3:82:7b:4e:62:20:ba:3b:4b:50:e7:75:
80:0a:f8:ec:72:b3:5f:ae:fd:a7:c0:5c:32:1a:95:9f:0c:45:
74:46:03:9a:dd:40:30:5b:01:86:d1:f8:ff:7a:cd:ba:5c:c8:
4f:a2:61:bc:dc:ad:b6:e4:5d:74:55:81:4a:22:47:78:f9:5c:
0e:9a:13:aa:e3:de:51:7e:c9:6e:0b:51:aa:15:f5:2c:e0:27:
58:0d:1b:09:66:4c:c4:e7:bd:2f:fe:b6:e2:ed:4f:93:7c:96:
cb:a5:26:8e:c2:ce:d2:25:7f:5b:64:a1:50:d9:ac:b3:41:e0:
aa:c6:42:d3:9b:b5:de:06:29:14:33:2b:86:d4:cf:8d:ed:26:
1b:a3:6f:ec:d9:e3:f5:4e:4e:f0:99:28:35:76:04:11:5b:ee:
21:0c:1f:70:f6:4f:3d:05:28:37:e2:bc:1d:f0:29:76:68:e7:
b6:21:12:ff:06:85:17:74:58:a4:b6:ef:97:70:85:f1:3a:17:
17:d9:d2:4d:05:18:8e:c6:8b:55:42:98:d4:af:2f:85:51:d0:
0a:35:21:8b:ba:39:c1:0d:19:d1:af:ce:c7:01:4f:b3:31:c8:
53:fe:a1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:56:57 2026 by rpki-client