Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
File: CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft (raw, json)
Hash identifier: pV065lk20Ih7IM24T+e3JW+u2bVkYbcgRWGNg2U6HI0=
Subject key identifier: AD:DC:6E:18:49:27:56:C7:4E:BE:73:F4:FE:B8:E3:0B:99:24:41:DD
Authority key identifier: 09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC
Certificate issuer: /CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc
Certificate serial: 019D39AF408FF57CC2B395B5AAE7AA4C94EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
Manifest number: 0268
Signing time: Sun 29 Mar 2026 13:01:19 +0000
Manifest this update: Sun 29 Mar 2026 13:01:19 +0000
Manifest next update: Mon 30 Mar 2026 13:01:19 +0000
Files and hashes: 1: CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl (hash: q/r7Sxw6HtclHhbJ89WUKoaViItRnWXc/LQZejhhzUo=)
2: GMlNWwMvstKZbXWgh06o9T5EqTE.roa (hash: 3II56/e7g+EGOg2XDQ8qDvIUZO0rTVJTTs+Pzt9rihQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:40:8f:f5:7c:c2:b3:95:b5:aa:e7:aa:4c:94:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc
Validity
Not Before: Mar 29 13:01:19 2026 GMT
Not After : Mar 30 13:01:19 2026 GMT
Subject: CN=addc6e18492756c74ebe73f4feb8e30b992441dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2f:1e:66:e1:11:85:63:14:50:7b:c4:b4:5c:
20:c4:ef:56:a5:12:cf:f5:9f:0f:35:37:53:21:9b:
a4:99:a8:37:7b:c3:40:f0:b7:80:f3:e9:f0:a8:e4:
f6:92:23:30:ad:c3:74:c6:ea:7c:8c:bc:c9:df:55:
ba:15:9f:07:97:a5:04:8b:0f:b1:1d:5a:50:00:79:
57:05:80:c0:a3:bb:1e:d4:82:bf:45:57:4f:71:ff:
44:90:08:b7:0a:29:9b:e3:90:82:3d:d1:e8:f7:8b:
a8:15:45:fc:19:85:ce:35:2c:f4:ae:f0:8d:1e:39:
2f:8c:0b:13:a0:e7:2a:b0:7c:3b:7c:10:e2:85:60:
b9:fe:82:16:c9:1f:92:8e:38:68:f6:b5:5a:f6:3f:
ff:1c:f0:cf:4b:e8:0d:c1:39:b6:b9:16:9d:5d:4f:
04:bd:91:67:18:48:e0:5d:9d:5d:12:82:aa:d6:42:
18:89:17:d6:c1:a2:49:2c:1c:b0:fa:c8:a6:99:20:
12:d1:24:a1:17:5b:3c:80:c5:b2:82:02:7a:59:5d:
a8:94:15:71:de:fa:43:1d:0d:9a:f7:4d:fb:ea:ae:
69:88:a5:96:3f:3e:dd:bf:e9:42:45:2b:36:67:0d:
a2:3c:7c:f3:fc:b9:a2:15:4d:f5:e8:dd:2f:f8:e5:
2e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DC:6E:18:49:27:56:C7:4E:BE:73:F4:FE:B8:E3:0B:99:24:41:DD
X509v3 Authority Key Identifier:
keyid:09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:55:12:e4:aa:21:c1:88:93:61:98:49:36:26:17:76:30:2a:
db:19:3a:0b:70:84:21:c4:07:15:cf:e0:13:4a:aa:3e:b6:17:
2c:1d:57:6d:77:db:d2:61:cf:da:da:44:ef:a8:2e:bc:92:76:
a2:9e:c6:3c:8f:89:b8:56:2e:9d:d5:80:e5:fe:65:98:00:94:
a5:7f:5e:e4:9d:61:a8:ef:85:c3:66:da:79:87:63:b4:b4:22:
ab:8d:de:aa:17:60:03:4b:04:0e:ab:b8:e8:a6:20:23:12:dd:
69:d8:28:0a:1d:87:53:ea:ab:e0:5f:c1:28:fe:ab:19:b6:dd:
1b:81:5c:f8:97:09:17:45:34:32:55:a1:26:a0:ad:ae:6c:71:
2d:71:b3:fb:69:53:76:c9:d5:bd:fe:87:e0:1b:c0:7f:b5:cb:
ef:d4:11:a6:27:a4:d4:be:83:11:eb:8f:43:c2:e1:62:07:c0:
a8:5b:d1:0a:6a:53:ce:7d:b8:68:82:a7:e3:b3:d0:b0:e5:6b:
bf:09:91:2b:31:76:2c:95:26:1a:33:c5:31:d5:c3:78:1f:ed:
fa:9e:50:db:15:a8:af:2f:da:bf:78:cb:5b:12:2c:db:1b:9b:
dc:b5:99:c3:35:f0:bf:f2:ca:98:f8:a6:50:4d:64:ee:ed:8e:
05:13:51:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:18 2026 by rpki-client