Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
File: CDV_W-4YX8YRVwhtWYVIU2myrNI.mft (raw, json)
Hash identifier: 91JhaMdro4SBadwBrB7Szy7kjcXg9W4uDtOe3sAiJBE=
Subject key identifier: 93:CD:2A:4A:6F:9C:6D:C8:E1:5B:7B:25:1D:71:AB:59:5C:63:D1:8F
Authority key identifier: 08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
Certificate issuer: /CN=08357f5bee185fc61157086d5985485369b2acd2
Certificate serial: 01A0889ECA8E3C3F004DBB4AA37F0F26A126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
Manifest number: 059F
Signing time: Thu 10 Sep 2026 00:01:42 +0000
Manifest this update: Thu 10 Sep 2026 00:01:42 +0000
Manifest next update: Fri 11 Sep 2026 00:01:42 +0000
Files and hashes: 1: 2OzQAiJ84eR942-HL-mCfiNn304.roa (hash: DoCu0JYoFviUnpmkl9K5MvFhWvoS3a+KpBFHFpRP62c=)
2: CDV_W-4YX8YRVwhtWYVIU2myrNI.crl (hash: aT8JzRAXoQIRjjfcru3W9aD7qoZifSzZq4ZlGHwe+Xg=)
3: frdEDuVlBLc1KIouDp6myM9rtIA.roa (hash: G223mpKSbVeBYMKKTw6KE3IJvyTw3v+DtTphKZ5P+JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9e:ca:8e:3c:3f:00:4d:bb:4a:a3:7f:0f:26:a1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08357f5bee185fc61157086d5985485369b2acd2
Validity
Not Before: Sep 10 00:01:42 2026 GMT
Not After : Sep 11 00:01:42 2026 GMT
Subject: CN=93cd2a4a6f9c6dc8e15b7b251d71ab595c63d18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b0:07:ba:83:75:5a:83:74:e6:21:a3:ec:ff:
c6:3a:e9:93:fc:84:b4:a1:37:17:dd:0c:b1:94:3d:
03:e3:1d:53:09:30:cd:97:c5:7e:c2:e1:dd:69:b0:
35:60:5b:53:3c:4e:a7:14:71:c6:34:be:4f:88:12:
75:32:52:d9:96:c1:25:9e:b9:7f:82:98:bd:35:23:
5e:65:f6:ae:81:cc:1e:14:73:49:5e:3a:11:b8:ed:
14:1c:43:5c:c6:aa:ca:3f:dc:ba:1c:50:27:80:24:
73:32:7e:1a:4f:cb:09:f5:ad:02:ba:4d:88:0d:c7:
90:76:d1:98:16:aa:f8:0d:f8:e2:98:c2:06:b2:bb:
8d:e3:dc:db:e8:60:65:d6:51:55:a3:5c:5f:61:9c:
c3:38:47:e2:4b:e6:25:58:7e:95:5d:a0:0f:8f:a1:
06:70:49:49:b5:18:d9:3d:98:3e:b2:37:3c:78:4b:
d8:a1:10:53:3b:50:0e:a6:60:82:b2:3e:3e:06:db:
fa:77:10:f5:37:3d:11:5b:41:9f:86:2c:38:b0:5b:
67:5d:94:fd:3b:b6:ce:35:44:53:78:d3:4f:da:41:
4d:6b:0a:ef:c3:25:77:e8:ff:c2:0d:ee:c9:ac:ee:
b4:14:ce:ee:a3:16:a2:8c:14:f5:54:74:c3:c5:5e:
87:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CD:2A:4A:6F:9C:6D:C8:E1:5B:7B:25:1D:71:AB:59:5C:63:D1:8F
X509v3 Authority Key Identifier:
keyid:08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:59:b3:e2:1f:2f:b1:8b:7d:1e:12:92:42:86:16:1f:b1:a4:
f3:c7:47:4a:e4:f7:43:0d:82:e7:c7:cd:21:e9:37:2a:0b:ad:
5f:cf:03:c2:9f:ba:13:21:ef:bd:c6:d7:1d:b2:1f:97:34:52:
3a:0e:24:8f:f2:64:17:7f:92:66:d3:2d:4d:51:5d:3c:2d:ff:
34:04:6b:58:e9:6d:4f:e9:d2:e3:fa:d8:cc:05:0e:2f:08:84:
b2:70:1f:31:45:b5:68:29:8b:1c:de:0a:5f:ea:db:a6:b5:e5:
23:d5:f0:52:27:8b:85:61:10:ac:e4:bf:db:de:c8:1f:29:f0:
32:41:d1:ec:67:48:3a:a9:c0:c0:c0:76:ba:4c:f3:4c:c5:b9:
59:fc:c8:9d:36:1b:19:06:1d:81:82:f5:be:4c:7c:02:78:77:
44:53:35:41:0d:10:6a:aa:c9:27:bd:f8:3a:00:8e:e9:1e:be:
11:a3:43:03:b2:2a:4c:c2:41:b1:5c:31:05:07:ed:e8:16:a0:
92:8e:7d:c3:9e:b5:0f:f0:90:b0:bb:eb:1a:b7:f6:14:d4:6b:
5d:50:4c:2d:98:a6:b4:de:30:dc:72:24:52:26:28:69:8e:31:
26:fe:9b:56:bf:b0:1a:9f:9d:38:e3:08:66:6a:99:a6:53:21:
44:0e:1a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:54:25 2026 by rpki-client