Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
File: CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft (raw, json)
Hash identifier: /sr/37l1XT5cdQ7+Zo35p2WZ/BbE2KXkELpEXPNfsYU=
Subject key identifier: 54:91:4B:6B:AD:3C:C3:56:05:87:4A:85:F3:C7:D0:9A:21:FB:D7:B8
Authority key identifier: 09:D2:90:BC:68:38:86:28:55:E1:9C:DB:DC:10:9C:BB:48:E0:8C:FF
Certificate issuer: /CN=09d290bc6838862855e19cdbdc109cbb48e08cff
Certificate serial: 019FF7230FB45AECE46F961A0C64FE112C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdKQvGg4hihV4Zzb3BCcu0jgjP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
Manifest number: 75
Signing time: Wed 12 Aug 2026 18:01:37 +0000
Manifest this update: Wed 12 Aug 2026 18:01:37 +0000
Manifest next update: Thu 13 Aug 2026 18:01:37 +0000
Files and hashes: 1: 91sagGL807dFWyb_xc8Ir81BNXY.roa (hash: 44SeTYivk7setzAfj/YcZ65NHA48BzCF/cH4WG2sv9g=)
2: CdKQvGg4hihV4Zzb3BCcu0jgjP8.crl (hash: +irir20JdgikEmKSBzrmjHJ58H0uS+VCYsQCQymkS/I=)
3: Qu8Crb_ZAs7VBqLYVlM9FbjtW-o.roa (hash: 7TC3kX3pyn+K8aImilRSJWDJ6ZVC2PHG3VTQ9cIjPH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdKQvGg4hihV4Zzb3BCcu0jgjP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:23:0f:b4:5a:ec:e4:6f:96:1a:0c:64:fe:11:2c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d290bc6838862855e19cdbdc109cbb48e08cff
Validity
Not Before: Aug 12 18:01:37 2026 GMT
Not After : Aug 13 18:01:37 2026 GMT
Subject: CN=54914b6bad3cc35605874a85f3c7d09a21fbd7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:90:dc:33:41:9e:78:6a:44:f7:ff:5a:be:
40:d2:ef:ac:1a:b5:a1:8e:6e:17:8a:f3:d3:89:5c:
cf:bc:9a:b9:d7:d4:fc:fc:24:37:3c:01:5f:5b:2d:
d5:6e:da:32:8d:bb:9c:a5:20:6b:71:43:eb:38:a3:
9c:c1:86:0a:f4:51:1e:5c:a4:3c:ab:23:62:df:1d:
09:89:9e:8d:e1:c2:14:18:12:7b:c5:31:c7:9d:89:
7f:8d:1b:9f:55:90:bb:56:21:be:a8:55:3c:86:e9:
cf:b3:ab:86:b7:28:7f:dd:10:fc:20:21:fa:35:1c:
f7:6a:05:92:3e:a5:de:7e:57:d5:22:35:d3:72:2f:
d7:1e:6a:5c:8b:64:04:1f:29:7c:1b:02:18:7e:f1:
2f:d8:f1:ab:41:ea:27:50:6c:c5:55:44:12:c1:59:
87:ff:d7:9c:11:45:ae:af:28:fd:c9:8a:f1:90:67:
14:ef:62:91:39:e7:af:37:79:fc:11:94:26:2f:82:
6e:55:62:1e:52:10:e1:a2:4e:29:f1:f4:49:b8:ba:
22:d7:e8:e3:1e:99:e5:53:e7:57:eb:ea:82:aa:65:
09:30:c8:a6:8b:26:06:e6:30:e8:1c:e5:c2:37:a3:
75:96:68:7f:ec:22:22:e6:fa:c8:56:39:2f:ef:9a:
b8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:91:4B:6B:AD:3C:C3:56:05:87:4A:85:F3:C7:D0:9A:21:FB:D7:B8
X509v3 Authority Key Identifier:
keyid:09:D2:90:BC:68:38:86:28:55:E1:9C:DB:DC:10:9C:BB:48:E0:8C:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdKQvGg4hihV4Zzb3BCcu0jgjP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:0e:45:15:4a:ad:c5:ce:ea:7a:26:ec:d9:b8:30:f7:e5:dd:
22:db:56:32:63:44:1a:d0:99:08:70:25:fd:76:5e:86:a2:90:
a6:c7:14:6d:b3:12:97:cd:74:f0:c3:2c:c8:dd:ee:28:3f:fb:
7e:2d:88:cd:bc:65:72:ee:4b:6a:01:13:39:24:5e:6c:df:50:
4a:79:2d:3a:4a:b0:ea:b1:d9:af:7a:0c:3c:eb:f3:3d:c8:17:
dd:8b:11:05:cb:ce:0d:d7:94:52:6e:47:48:5e:0a:cf:e7:d9:
14:fb:7a:18:68:df:29:0e:89:c2:8a:a0:72:b1:78:01:f4:a3:
68:fa:5d:35:5c:a5:89:c5:b9:09:e6:29:c4:bb:11:2a:f1:9e:
f2:12:0a:4b:1d:52:ce:a5:9b:65:f1:7e:a3:14:ca:0d:dd:c4:
b8:e1:7c:b6:ff:67:3e:de:c1:a4:2d:c9:37:30:11:41:b8:3d:
b2:e0:4a:21:66:67:88:15:78:38:60:20:43:d6:04:8e:35:21:
15:eb:05:d4:b4:69:bd:0a:90:5f:ff:d6:be:0c:d6:75:08:4e:
5b:75:9c:ff:5f:84:e3:a0:39:37:ac:bd:98:59:19:aa:82:22:
6f:95:a4:67:a4:77:0c:f9:42:d9:a0:2e:e8:fb:aa:6d:31:77:
d1:1c:60:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/3Iw+0Wuzkb5YaDGT+ESw/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZDI5MGJjNjgzODg2Mjg1NWUxOWNkYmRjMTA5Y2JiNDhl
MDhjZmYwHhcNMjYwODEyMTgwMTM3WhcNMjYwODEzMTgwMTM3WjAzMTEwLwYDVQQD
Eyg1NDkxNGI2YmFkM2NjMzU2MDU4NzRhODVmM2M3ZDA5YTIxZmJkN2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMKQ3DNBnnhqRPf/Wr5A0u+sGrWh
jm4XivPTiVzPvJq519T8/CQ3PAFfWy3VbtoyjbucpSBrcUPrOKOcwYYK9FEeXKQ8
qyNi3x0JiZ6N4cIUGBJ7xTHHnYl/jRufVZC7ViG+qFU8hunPs6uGtyh/3RD8ICH6
NRz3agWSPqXeflfVIjXTci/XHmpci2QEHyl8GwIYfvEv2PGrQeonUGzFVUQSwVmH
/9ecEUWuryj9yYrxkGcU72KROeevN3n8EZQmL4JuVWIeUhDhok4p8fRJuLoi1+jj
HpnlU+dX6+qCqmUJMMimiyYG5jDoHOXCN6N1lmh/7CIi5vrIVjkv75q4rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSRS2utPMNWBYdKhfPH0Joh+9e4MB8GA1UdIwQY
MBaAFAnSkLxoOIYoVeGc29wQnLtI4Iz/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2RLUXZHZzRoaWhWNFp6YjNCQ2N1MGpnalA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81MjZmM2UtODkyNC00OGJkLWE3NzIt
YjUxOTUzMDM3OTkzLzEvQ2RLUXZHZzRoaWhWNFp6YjNCQ2N1MGpnalA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81MjZmM2UtODkyNC00OGJkLWE3NzItYjUxOTUzMDM3OTkz
LzEvQ2RLUXZHZzRoaWhWNFp6YjNCQ2N1MGpnalA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAow5FFUqt
xc7qeibs2bgw9+XdIttWMmNEGtCZCHAl/XZehqKQpscUbbMSl8108MMsyN3uKD/7
fi2Izbxlcu5LagETOSRebN9QSnktOkqw6rHZr3oMPOvzPcgX3YsRBcvODdeUUm5H
SF4Kz+fZFPt6GGjfKQ6JwoqgcrF4AfSjaPpdNVylicW5CeYpxLsRKvGe8hIKSx1S
zqWbZfF+oxTKDd3EuOF8tv9nPt7BpC3JNzARQbg9suBKIWZniBV4OGAgQ9YEjjUh
FesF1LRpvQqQX//WvgzWdQhOW3Wc/1+E46A5N6y9mFkZqoIib5WkZ6R3DPlC2aAu
6PuqbTF30RxgLQ==
-----END CERTIFICATE-----
Generated at Wed Aug 12 23:51:59 2026 by rpki-client