Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
File: CDV_W-4YX8YRVwhtWYVIU2myrNI.mft (raw, json)
Hash identifier: /zF4Pb41dH9ZE2bMLTrwuoELEX6CA1Qig+VkKkJlqjs=
Subject key identifier: 5D:5F:67:B4:F7:45:44:D0:D2:38:06:07:C6:6B:8E:98:1C:4E:A7:1A
Authority key identifier: 08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
Certificate issuer: /CN=08357f5bee185fc61157086d5985485369b2acd2
Certificate serial: 01A17A3A7AED474D37079B0248E98C8C097B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
Manifest number: 061D
Signing time: Mon 26 Oct 2026 22:00:15 +0000
Manifest this update: Mon 26 Oct 2026 22:00:15 +0000
Manifest next update: Tue 27 Oct 2026 22:00:15 +0000
Files and hashes: 1: 5X4tFjOIX_N_C_linYD-dKLQWr0.roa (hash: 4r5uz7Yu6TuLRQgXWinD8fhHQ8U2U5gKqME59YCCMZY=)
2: CDV_W-4YX8YRVwhtWYVIU2myrNI.crl (hash: TttICGXLisi68ScZYEXRcSpTqGO3yCxVS/LQjUpQyyw=)
3: frdEDuVlBLc1KIouDp6myM9rtIA.roa (hash: G223mpKSbVeBYMKKTw6KE3IJvyTw3v+DtTphKZ5P+JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3a:7a:ed:47:4d:37:07:9b:02:48:e9:8c:8c:09:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08357f5bee185fc61157086d5985485369b2acd2
Validity
Not Before: Oct 26 22:00:15 2026 GMT
Not After : Oct 27 22:00:15 2026 GMT
Subject: CN=5d5f67b4f74544d0d2380607c66b8e981c4ea71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:d7:26:48:64:f4:22:d8:e3:76:b7:23:ed:
b1:88:96:28:26:68:e6:cb:19:8d:ee:98:0e:a6:81:
14:bb:bd:04:64:50:2b:67:1a:2c:4f:63:3b:69:9d:
77:5e:7b:54:af:15:04:2e:43:9f:5b:68:76:0c:2b:
e0:6d:40:98:62:7c:8e:80:71:71:f2:0f:4b:0e:37:
9c:2b:3e:b8:09:5f:2f:78:55:92:3f:64:d1:7a:1a:
26:97:ba:78:fe:c7:20:3d:79:2b:23:47:78:e4:c1:
dc:cb:f3:de:8f:d0:62:4f:37:69:c7:5a:9b:39:61:
f3:b1:1b:70:83:e6:78:83:fe:ff:47:05:2a:1b:5d:
a5:00:e9:de:af:33:6f:82:10:95:e7:6d:b1:b7:cc:
8c:7e:4c:20:c3:a2:85:0d:84:d2:a6:19:c7:99:63:
06:f6:d4:d1:67:f6:23:c2:61:ca:90:40:c8:88:d5:
3f:1c:c1:fd:c6:24:57:8a:20:0f:ba:85:2e:66:62:
92:3c:65:c4:d5:7b:3b:0b:52:4e:ab:6c:5c:dd:c0:
fe:0a:a7:ab:1f:d2:b0:1e:83:d6:16:dd:56:86:3c:
d2:86:87:4d:90:03:18:c9:fb:fa:66:e9:25:56:72:
dc:fb:6c:ed:a1:0b:99:d2:32:54:93:76:c8:e4:c9:
bb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5F:67:B4:F7:45:44:D0:D2:38:06:07:C6:6B:8E:98:1C:4E:A7:1A
X509v3 Authority Key Identifier:
keyid:08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f5:57:d3:b7:ac:8b:d5:af:7b:98:46:a3:1b:a9:3c:6c:bc:
2b:5d:8b:21:51:e2:d6:d7:67:5e:0a:18:53:39:68:65:2b:4e:
e8:72:4f:ee:31:ae:71:ef:25:89:1a:24:dd:e9:aa:ef:6b:89:
05:61:9c:de:5b:48:dd:14:4b:1a:e5:82:fd:7b:cf:e9:1f:44:
71:7b:80:a1:a6:d6:94:d8:f9:1a:7b:7c:f4:3f:40:1c:6e:20:
89:72:75:7f:24:37:f8:20:45:43:e9:af:80:9b:cc:89:91:71:
6d:0a:60:48:c2:e6:d8:67:68:bb:7b:fa:aa:7e:4c:b2:ab:02:
09:fd:9b:b3:1b:44:70:70:aa:56:a6:04:71:2f:a5:57:3a:71:
cb:70:f5:19:9e:38:8b:65:69:9f:14:4c:f8:6a:bd:43:27:c5:
6e:ea:c0:19:8a:56:86:55:f5:28:9e:47:49:30:b6:46:3c:a3:
6e:aa:08:ce:98:d0:03:fd:36:0e:a5:a0:6d:43:2e:f9:ec:fb:
9e:91:6f:72:9f:17:49:bc:2a:4b:e8:5f:da:92:43:51:07:fc:
87:d3:8d:35:a5:bf:06:a0:0d:db:2e:df:b1:b1:98:b5:4f:c6:
8a:55:21:f5:09:9e:1b:c8:28:8c:b7:0a:78:55:70:35:03:92:
69:b6:dc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:14:07 2026 by rpki-client