Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
File: CDV_W-4YX8YRVwhtWYVIU2myrNI.mft (raw, json)
Hash identifier: NLFw92qcTe3X9O46w26jbtrHSC+eltz0BxtfxccUl0w=
Subject key identifier: B0:6D:86:3A:FF:38:C0:B0:67:78:4B:E1:8B:C5:DA:E2:E2:64:E3:EF
Authority key identifier: 08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
Certificate issuer: /CN=08357f5bee185fc61157086d5985485369b2acd2
Certificate serial: 019FA0E01AB78A8E5D13B00D3DFE21484E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
Manifest number: 0527
Signing time: Mon 27 Jul 2026 00:01:09 +0000
Manifest this update: Mon 27 Jul 2026 00:01:09 +0000
Manifest next update: Tue 28 Jul 2026 00:01:09 +0000
Files and hashes: 1: 2OzQAiJ84eR942-HL-mCfiNn304.roa (hash: DoCu0JYoFviUnpmkl9K5MvFhWvoS3a+KpBFHFpRP62c=)
2: CDV_W-4YX8YRVwhtWYVIU2myrNI.crl (hash: 5J/G4tKn9U4C5FDr1XvVbedwwTjSP7fPA/crsYSW29A=)
3: frdEDuVlBLc1KIouDp6myM9rtIA.roa (hash: G223mpKSbVeBYMKKTw6KE3IJvyTw3v+DtTphKZ5P+JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:1a:b7:8a:8e:5d:13:b0:0d:3d:fe:21:48:4e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08357f5bee185fc61157086d5985485369b2acd2
Validity
Not Before: Jul 27 00:01:09 2026 GMT
Not After : Jul 28 00:01:09 2026 GMT
Subject: CN=b06d863aff38c0b067784be18bc5dae2e264e3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0b:50:f2:ec:1e:f2:c8:1d:7e:b6:0e:f9:d8:
02:9a:e9:fe:4d:57:77:23:74:86:8c:58:5d:0a:62:
50:41:c1:1d:36:01:93:0c:91:ec:3a:11:2b:b5:df:
88:64:5b:df:af:ef:b4:5c:0b:32:cb:cb:da:da:e3:
33:95:a8:60:8e:fd:20:7e:df:9e:09:5e:e6:4d:25:
ca:40:c5:1f:91:83:ab:5d:70:09:f7:7b:83:ff:b9:
6d:ae:87:5d:75:5f:fa:22:ef:bb:8c:dc:88:b6:22:
60:28:5e:b7:2a:fc:54:21:5b:af:9c:6d:0e:e9:2e:
d4:7a:4a:bb:5b:4a:45:6d:86:da:7a:9f:fe:43:bf:
ea:d9:1b:1f:9f:5a:68:02:aa:77:31:74:dd:71:9a:
a1:11:70:19:23:28:2d:7d:f2:f7:50:29:af:47:03:
c8:0f:9c:75:30:15:a4:d6:c9:d7:68:45:d2:af:06:
a4:f3:79:58:a2:7e:7e:21:4d:2f:08:6d:b3:cc:2f:
d3:8c:cc:f4:be:76:b6:76:a8:d0:89:4a:13:8e:31:
c9:be:91:75:2f:5c:2a:d0:ad:86:36:f8:1d:8f:32:
a0:79:74:8e:1f:d9:d4:35:f7:69:aa:13:27:86:44:
c2:ed:b6:7d:87:00:2b:e1:71:d3:5a:d8:92:01:c9:
44:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6D:86:3A:FF:38:C0:B0:67:78:4B:E1:8B:C5:DA:E2:E2:64:E3:EF
X509v3 Authority Key Identifier:
keyid:08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c0:20:5d:cf:4d:4d:5a:3b:b9:a8:c7:ae:22:c8:cd:84:b2:
e1:21:ac:de:dd:00:9f:9e:47:bc:d2:78:2c:27:d0:d3:60:44:
22:f3:f3:46:61:a7:4d:04:3d:16:24:9f:0c:38:f5:54:be:8b:
6f:cd:cb:1b:0b:58:91:62:f6:17:61:ee:d2:92:ac:34:6a:98:
4a:cb:f5:6a:a1:17:0d:b3:da:ce:4e:ee:7c:ff:b8:82:03:ae:
88:2d:5b:43:3d:1c:1e:81:2e:83:ea:7b:b9:d2:18:66:e3:ba:
00:a3:20:33:8b:ed:dc:8c:48:a7:d4:bd:c8:89:4a:28:1d:c6:
7e:de:a1:bb:f7:3c:af:28:fb:99:90:56:16:28:e9:b4:ad:d2:
81:16:20:cf:5e:0a:bc:09:18:05:54:59:62:90:65:d4:1d:bc:
8b:fd:2f:e2:0a:4f:0a:1e:58:f1:f2:7a:0f:5b:d3:e6:23:c8:
a1:15:39:0b:1f:82:0d:e2:83:67:68:6f:f6:b5:b1:04:cd:5c:
0f:b1:a1:c3:0f:63:24:24:5f:5b:f7:8c:2a:b0:49:7e:65:81:
eb:57:8b:aa:5f:5d:4b:11:2a:eb:a3:35:ca:3b:f1:d2:db:63:
3a:7f:06:c0:d6:22:93:5c:7f:38:77:32:c4:db:76:63:b4:77:
5c:ae:a8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:26:21 2026 by rpki-client