Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File: CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier: izYWdFWPYs30kE4QZreJgKI7L/97gu746mFTTzI5GPA=
Subject key identifier: 6F:1D:C6:4D:CC:A4:9D:78:99:1B:CB:69:BA:42:E0:8A:85:31:2A:C7
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial: 019D38D2BFE9AAFC20AA88CCDE908E9F7B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:00:28 +0000
Manifest this update: Sun 29 Mar 2026 09:00:28 +0000
Manifest next update: Mon 30 Mar 2026 09:00:28 +0000
Files and hashes: 1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: 6kKk2gqoyedGxqGgu05DC+V6UlVYFhlJOrnkVm6nagk=)
2: OC2xnBQTRG6dTo8unU-AfiUJoPo.roa (hash: TCWmomXoe5LhZ7eUQal/1Sd3d3namiJ5LFej1VLenpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:bf:e9:aa:fc:20:aa:88:cc:de:90:8e:9f:7b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
Validity
Not Before: Mar 29 09:00:28 2026 GMT
Not After : Mar 30 09:00:28 2026 GMT
Subject: CN=6f1dc64dcca49d78991bcb69ba42e08a85312ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d1:5b:63:fb:a7:5e:69:fe:fb:a6:71:66:32:
52:76:11:bf:b1:4d:58:a3:b0:38:3e:0d:c4:4b:00:
35:eb:a7:91:e1:be:84:31:04:80:f6:f0:35:3d:31:
68:51:bf:9f:6f:35:c7:e1:e2:77:5b:9e:1c:ff:9c:
32:cd:89:20:f6:39:6d:47:ea:11:5d:be:4d:84:68:
0b:32:7a:e1:36:18:1e:5e:1e:aa:6c:98:58:06:7a:
36:1a:ee:46:bd:f9:82:bc:b3:6c:cf:36:9c:13:79:
0c:1e:cf:5f:7a:6e:e5:31:00:56:d7:d7:f8:f2:2f:
ff:83:d9:26:48:be:74:44:fa:0c:d8:eb:d0:cb:c3:
6b:fb:93:ac:b3:88:c7:16:28:88:03:7b:11:5e:92:
3f:bf:4b:b6:b6:ca:78:81:10:cd:69:4e:88:dd:a9:
b8:41:1b:f6:3b:43:9e:71:71:52:a9:46:29:6f:90:
41:98:be:3f:2b:1f:9e:79:d6:c5:a5:9a:59:b5:86:
ff:79:c0:9d:d3:eb:e8:8c:05:f4:45:76:aa:16:5d:
3e:7c:c1:ec:cb:9b:73:8b:a7:73:41:f0:d7:21:77:
91:cd:69:fd:10:36:1d:8b:51:f3:a2:f6:d3:16:f9:
76:a9:8c:d9:e6:0c:66:83:25:9e:2d:fb:0d:84:3d:
82:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1D:C6:4D:CC:A4:9D:78:99:1B:CB:69:BA:42:E0:8A:85:31:2A:C7
X509v3 Authority Key Identifier:
keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:91:6e:a6:74:ce:c4:35:33:16:53:ce:5a:5e:1b:3b:90:e9:
8b:7f:ef:08:f5:b6:f1:d4:bb:db:ca:65:b1:d9:d5:5b:8b:a8:
0b:cc:ad:42:1b:6e:12:d7:60:de:f6:90:6f:93:aa:9c:02:b5:
de:64:32:d5:97:75:91:2a:dd:8e:04:df:f0:6d:f2:2e:37:02:
9b:62:1e:eb:3b:1d:2b:07:35:4b:1a:ec:b0:02:30:ad:85:e4:
b2:6f:f4:e8:28:c6:50:f2:ed:ec:59:6f:ff:d6:47:5b:5b:8d:
a4:97:82:07:ad:21:71:7e:88:89:ee:4d:f2:bd:84:c7:5c:a6:
88:7b:62:0b:c2:a5:fb:43:58:80:c5:3f:30:8e:64:13:21:d5:
e9:e0:cb:ea:5f:b4:d8:1c:a8:8c:74:36:2d:99:cb:38:57:15:
30:e5:84:d3:0d:e3:5d:ce:a0:07:f0:79:16:76:73:ec:fd:b8:
f2:a6:c5:ce:16:f9:19:a2:ca:43:2a:76:9e:0f:2b:a3:b7:a3:
05:50:75:e0:e5:e4:97:1d:d1:85:5c:43:2a:14:b3:c6:d3:1b:
31:07:12:a4:b9:20:94:26:02:d8:9e:82:1f:a6:a2:fa:0e:1d:
bd:44:b8:95:4d:27:12:9a:dc:42:bd:06:cb:90:30:eb:16:e7:
d2:18:2a:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040r/pqvwgqojM3pCOn3tNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NTYxZDBkZTYyMjQ3ZTIwODViZjU5YTczYzg3ZDI1YTI0
Mzg5ODAwHhcNMjYwMzI5MDkwMDI4WhcNMjYwMzMwMDkwMDI4WjAzMTEwLwYDVQQD
Eyg2ZjFkYzY0ZGNjYTQ5ZDc4OTkxYmNiNjliYTQyZTA4YTg1MzEyYWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9FbY/unXmn++6ZxZjJSdhG/sU1Y
o7A4Pg3ESwA166eR4b6EMQSA9vA1PTFoUb+fbzXH4eJ3W54c/5wyzYkg9jltR+oR
Xb5NhGgLMnrhNhgeXh6qbJhYBno2Gu5GvfmCvLNszzacE3kMHs9fem7lMQBW19f4
8i//g9kmSL50RPoM2OvQy8Nr+5Oss4jHFiiIA3sRXpI/v0u2tsp4gRDNaU6I3am4
QRv2O0OecXFSqUYpb5BBmL4/Kx+eedbFpZpZtYb/ecCd0+vojAX0RXaqFl0+fMHs
y5tzi6dzQfDXIXeRzWn9EDYdi1HzovbTFvl2qYzZ5gxmgyWeLfsNhD2CbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8dxk3MpJ14mRvLabpC4IqFMSrHMB8GA1UdIwQY
MBaAFAhWHQ3mIkfiCFv1mnPIfSWiQ4mAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0ZZZERlWWlSLUlJV19XYWM4aDlKYUpEaVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lZDljNjMtNTZiZS00NzFiLTliYWIt
NTNlZDgyZDMzZDg0LzEvQ0ZZZERlWWlSLUlJV19XYWM4aDlKYUpEaVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9lZDljNjMtNTZiZS00NzFiLTliYWItNTNlZDgyZDMzZDg0
LzEvQ0ZZZERlWWlSLUlJV19XYWM4aDlKYUpEaVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZFupnTO
xDUzFlPOWl4bO5Dpi3/vCPW28dS728plsdnVW4uoC8ytQhtuEtdg3vaQb5OqnAK1
3mQy1Zd1kSrdjgTf8G3yLjcCm2Ie6zsdKwc1SxrssAIwrYXksm/06CjGUPLt7Flv
/9ZHW1uNpJeCB60hcX6Iie5N8r2Ex1ymiHtiC8Kl+0NYgMU/MI5kEyHV6eDL6l+0
2ByojHQ2LZnLOFcVMOWE0w3jXc6gB/B5FnZz7P248qbFzhb5GaLKQyp2ng8ro7ej
BVB14OXklx3RhVxDKhSzxtMbMQcSpLkglCYC2J6CH6ai+g4dvUS4lU0nEprcQr0G
y5Aw6xbn0hgqXg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:24 2026 by rpki-client