Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File: CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier: 2AMBxOBWWQodYnd3Wn8mJt8/or22YcpK7Ta7Z0yAdZ4=
Subject key identifier: 44:E8:59:BC:F9:1F:63:13:48:0D:5B:2B:C2:D0:F3:43:0F:39:5F:06
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial: 01A13E26BE23852BBD1C43E63A39E44147AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 06:01:28 +0000
Manifest this update: Thu 15 Oct 2026 06:01:28 +0000
Manifest next update: Fri 16 Oct 2026 06:01:28 +0000
Files and hashes: 1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: 1edb78HXfBrcwlguEwTVxZKLt0ngi8XHsNkxO4lhzyY=)
2: OC2xnBQTRG6dTo8unU-AfiUJoPo.roa (hash: TCWmomXoe5LhZ7eUQal/1Sd3d3namiJ5LFej1VLenpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:be:23:85:2b:bd:1c:43:e6:3a:39:e4:41:47:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
Validity
Not Before: Oct 15 06:01:28 2026 GMT
Not After : Oct 16 06:01:28 2026 GMT
Subject: CN=44e859bcf91f6313480d5b2bc2d0f3430f395f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:12:a0:d0:72:0c:88:7e:40:06:55:c3:36:60:
74:54:a3:8c:5f:18:a1:ed:3d:46:cd:14:19:1b:c1:
50:8a:fa:6f:81:14:2e:20:41:b8:82:f2:3b:8e:63:
c3:c0:38:be:a4:38:de:83:c6:e8:04:86:bf:1b:e3:
1e:cf:6b:2a:c6:79:3f:9d:1f:ef:3e:75:f6:00:1f:
db:3c:21:ea:8e:1f:b0:5e:03:99:c4:3c:69:df:41:
a8:7e:c5:83:fd:c9:a8:12:bc:bc:32:12:bb:fc:30:
14:5d:b0:d4:12:c9:df:a7:f1:d0:de:8c:73:fd:99:
f7:1c:09:20:eb:0d:01:a7:18:8f:98:38:a7:18:53:
ea:f6:ec:c1:43:6d:27:e5:c7:70:2b:a1:aa:50:d1:
78:d1:67:b5:60:11:5b:52:39:ac:00:ba:b7:b6:d6:
64:22:56:83:33:f9:0f:1a:93:5f:c8:1e:ce:73:01:
fd:1e:57:a0:93:63:fd:30:97:9f:17:e8:29:4a:de:
41:f0:2d:2d:69:13:cf:2f:71:d0:84:4f:7b:74:00:
3f:b4:1f:4d:df:19:73:6e:f0:bd:5e:84:82:98:7d:
87:aa:03:30:30:60:21:20:5a:9c:87:06:88:b8:bc:
08:d1:70:c5:71:b0:91:b6:45:42:7c:ec:3b:23:4a:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E8:59:BC:F9:1F:63:13:48:0D:5B:2B:C2:D0:F3:43:0F:39:5F:06
X509v3 Authority Key Identifier:
keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:dc:6e:07:08:ba:43:47:28:e0:49:76:a6:9b:ad:46:ed:6c:
18:04:1e:fc:b9:57:07:94:2d:e1:63:0a:c5:b7:69:f3:72:bc:
53:bb:8f:d1:30:31:dc:d7:09:06:7a:a9:42:fc:93:8d:53:87:
bb:87:63:52:d3:c5:b5:50:37:b8:b0:61:da:4c:83:48:19:3d:
68:41:43:c4:40:9d:2b:c2:a9:b3:06:0c:4a:96:8e:17:96:39:
82:bf:ac:4b:be:23:71:53:31:81:4f:a2:a6:a3:12:70:00:58:
e2:df:d8:93:a6:c1:11:4a:1d:c2:7d:60:08:32:98:70:78:d8:
0f:80:ef:70:b8:5a:d7:48:43:68:18:c1:2c:e0:28:d8:38:d4:
6e:34:8d:0d:f0:c2:e3:0f:41:70:56:66:aa:83:50:31:76:95:
be:11:89:80:7c:4c:3a:2d:36:a0:9d:c0:76:88:10:5f:67:3b:
49:d9:82:57:76:a7:8c:e4:31:28:9c:44:94:8c:3f:1f:f0:1a:
26:bf:bb:0e:41:b3:b6:63:bd:c4:ac:87:2a:5a:a4:33:37:e7:
9e:05:53:cb:18:f2:d8:00:a5:30:cd:ec:8c:65:88:ec:d1:9e:
14:46:d1:7b:f5:a7:ea:fd:d7:a6:80:3b:0a:bf:17:ff:76:c3:
9f:11:95:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:21 2026 by rpki-client