Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft
File: Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft (raw, json)
Hash identifier: 0glfraqsvVWIdQMP+FK9u/dUCDvPEjqqs/xHrbLxNBA=
Subject key identifier: DE:D9:A1:1A:E2:57:2C:51:24:1A:7F:09:76:43:25:5B:28:80:21:F7
Authority key identifier: 09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
Certificate issuer: /CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Certificate serial: 01A17F2AC5648912D86D1C34DC9BCADD1EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft
Manifest number: 1918
Signing time: Tue 27 Oct 2026 21:01:11 +0000
Manifest this update: Tue 27 Oct 2026 21:01:11 +0000
Manifest next update: Wed 28 Oct 2026 21:01:11 +0000
Files and hashes: 1: 4c-GbGdVRIrY9IqPjRy0nzn_VSE.roa (hash: icjwc3qakSmAHiw3iEGT6Xw+HBGCPaCuGNR8zcJ+6LU=)
2: Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl (hash: Df0C2C9KcrGDknJ8fZe314eW9MF2+nbVxazPiMNv4+A=)
3: G89I4eFQRreVo-7aKBmhJUYUtfE.roa (hash: Y0sI6cJ3p/tnjubSMmOmQUTjHM00CIS1iUsc5f8JH6o=)
4: bMKVFYdIM0_gtNgAPKfgAaQgoHI.roa (hash: gbtQk58mXwV4OjnS71gzCTvx3ePqnPPIiihPViEZ0B0=)
5: dYdu6qoIQ4XCeyHdAC497fGCxxs.roa (hash: oc3k4EGMJTIdaq924ORNmciOrYjNG46O7CO8iE2EBZI=)
6: lgCyYbtiym8UQxlU3Wsnfuin5Po.roa (hash: Y0pYZtEe50I9gKfovWkm1yNE+nmUWXQeAcc9hn8uT60=)
7: u3tl30EyAJsURqJzM6oI5-sRJh4.roa (hash: +MJkYGw5uZPSvZdWWPtxlmooe+ag+H3pOtple6Ilz3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2a:c5:64:89:12:d8:6d:1c:34:dc:9b:ca:dd:1e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Validity
Not Before: Oct 27 21:01:11 2026 GMT
Not After : Oct 28 21:01:11 2026 GMT
Subject: CN=ded9a11ae2572c51241a7f097643255b288021f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:07:a0:9b:27:02:bb:ec:65:05:96:ff:fb:67:
46:41:75:7d:28:82:96:a5:87:2a:0f:5d:b0:63:54:
eb:3b:66:a6:ca:4c:cb:9b:f3:72:17:24:04:67:87:
fa:e7:b4:19:26:08:ff:85:bc:0a:cf:09:12:80:f3:
69:b7:f2:19:67:2c:8d:a6:c1:ef:2b:84:65:b6:fa:
ca:67:8a:f6:76:91:d4:2f:3a:59:da:49:f5:cf:1b:
d7:eb:77:3f:5e:85:94:66:59:8e:2b:76:94:bc:d6:
07:f2:52:5b:46:f8:bc:4a:aa:cb:45:5d:65:b8:5b:
60:ab:19:79:79:c5:0c:07:96:f9:19:b7:90:3a:0b:
a4:c9:3e:39:81:36:80:19:0f:37:90:b6:b0:73:bd:
76:3b:50:19:5f:45:aa:df:d7:25:7f:63:62:2c:29:
22:e4:49:8a:5d:db:1e:09:7e:b9:84:07:fe:03:6c:
d2:ef:66:f6:15:95:80:00:95:88:77:bf:7a:a5:aa:
a6:a4:f6:60:0b:0c:31:ba:b4:84:b2:90:a4:a4:26:
e4:be:0a:b2:de:23:13:c5:44:90:db:d8:02:55:91:
0c:cd:68:7e:54:94:1b:ac:a4:85:f3:59:35:d9:e4:
af:4f:db:56:d3:9b:38:8f:b1:a7:52:9c:f3:6d:d4:
fe:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D9:A1:1A:E2:57:2C:51:24:1A:7F:09:76:43:25:5B:28:80:21:F7
X509v3 Authority Key Identifier:
keyid:09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:33:d2:7b:01:86:b5:45:73:77:b3:93:47:14:d1:48:6b:ff:
1c:05:8a:f7:b1:ba:e5:7f:00:55:e4:68:a1:5f:a5:05:fd:45:
f4:52:bf:0c:7d:62:bb:f9:64:e7:fb:20:b1:9f:71:73:9e:f2:
e0:c2:d6:f1:dc:b6:26:b1:7b:b6:e1:c0:55:34:f5:ac:4a:29:
19:64:a3:de:e8:12:4f:9a:78:b0:a3:ef:cd:2f:d0:ec:61:1b:
3d:5f:3f:f6:49:6e:9a:15:d9:e1:4c:ee:e6:4d:26:89:04:b3:
d3:ed:6f:c3:c0:30:c2:f4:08:fa:64:c7:be:21:4e:5f:ff:13:
4b:32:c3:7a:ea:98:59:cf:56:45:61:68:a3:95:a5:ed:3e:04:
8a:ac:0d:13:0a:ac:f6:8b:2d:3a:8a:83:c3:b4:9b:95:e2:f2:
1f:ee:e7:cb:bb:da:9a:ad:31:79:56:e0:22:33:1a:1e:18:f3:
ad:f8:e5:87:08:a7:e4:f7:80:99:58:4d:09:3d:d4:cc:dd:21:
fb:c1:86:89:16:2d:fa:ce:35:9b:60:90:4a:ee:7f:a0:65:e1:
66:eb:1b:7a:97:98:54:33:93:9a:7b:52:df:6c:50:e4:4e:f0:
11:4f:c8:9e:2f:66:a9:37:1c:64:f1:d8:71:73:87:dc:47:13:
f0:2c:58:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:22:54 2026 by rpki-client