Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File: CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier: cdFMVZwvDn/Q4zopGf42GWD05m9buxPImsrhBMPR1pI=
Subject key identifier: C5:9A:FC:79:34:5D:60:A5:5F:8C:84:BD:A5:D1:8D:B3:BA:3A:42:95
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial: 01A0016FD7DA03DF6B039D8AD01AFE7C79D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 18:01:41 +0000
Manifest this update: Fri 14 Aug 2026 18:01:41 +0000
Manifest next update: Sat 15 Aug 2026 18:01:41 +0000
Files and hashes: 1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: lpngjnKIlr59mIX/07jXexEBXhpeJ340zSgKKktMBOA=)
2: OC2xnBQTRG6dTo8unU-AfiUJoPo.roa (hash: TCWmomXoe5LhZ7eUQal/1Sd3d3namiJ5LFej1VLenpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:d7:da:03:df:6b:03:9d:8a:d0:1a:fe:7c:79:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
Validity
Not Before: Aug 14 18:01:41 2026 GMT
Not After : Aug 15 18:01:41 2026 GMT
Subject: CN=c59afc79345d60a55f8c84bda5d18db3ba3a4295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f9:1b:96:ab:4d:e5:d2:5a:79:e3:c0:d7:33:
ca:e1:44:15:c6:c3:c0:f9:c3:c0:ae:de:17:3b:b9:
7e:81:b1:e7:87:c5:fb:c6:de:10:5f:4a:73:ec:92:
00:58:f1:88:3e:a1:37:d8:8f:f7:23:15:e7:07:fb:
59:ad:cb:00:ef:c5:5b:0d:e8:d9:ee:0b:22:0e:61:
87:89:5f:93:20:b5:85:8d:ee:26:da:8f:d8:4f:b8:
b4:7c:56:ee:88:d4:4d:e4:ee:8d:2b:d9:8a:5e:b6:
bf:ab:cd:3f:ac:ec:7a:29:63:84:e3:f6:cd:54:fe:
4c:f8:f5:9b:e7:5e:0d:61:67:bc:49:da:09:2f:9e:
3b:61:90:8b:7d:6a:6d:30:50:3e:7d:fc:46:c5:48:
c3:c4:11:b4:28:b4:50:89:bd:c0:58:ca:cc:85:07:
9c:6d:c6:7b:50:f3:55:e0:b7:bc:5d:8d:de:0f:73:
74:3b:d8:1d:45:9a:7b:84:4c:5b:55:a3:4c:54:db:
76:7a:ae:40:ec:b4:82:24:5c:aa:c6:f8:a8:2d:a6:
4e:31:28:79:91:fc:17:65:62:f8:f4:ed:50:87:fd:
d9:7e:b0:e0:bc:7c:c5:79:32:20:7e:5b:ce:db:e8:
8e:29:46:34:8c:ee:58:69:ce:13:52:34:46:c7:53:
c3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9A:FC:79:34:5D:60:A5:5F:8C:84:BD:A5:D1:8D:B3:BA:3A:42:95
X509v3 Authority Key Identifier:
keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:9a:6d:57:91:0f:6b:28:01:ef:b8:0a:cf:21:e4:fe:11:40:
ac:90:95:70:d8:e0:a2:1b:42:c4:3d:c8:df:22:82:cc:4b:eb:
f5:ff:cb:79:e8:d1:8b:f9:31:f7:ac:c0:a2:29:f7:4f:cf:a0:
fb:29:e6:9c:88:94:47:b9:e0:8f:0f:a4:fe:67:c8:b4:dd:2e:
67:54:33:cc:15:f3:7d:b0:86:12:d3:6b:cf:df:e8:65:f6:5d:
c1:5f:39:88:42:71:6c:f6:1e:03:d6:7b:06:0d:c5:4f:8b:e8:
1b:28:0f:01:dc:cb:e7:45:91:04:a5:25:7f:f0:44:69:40:d2:
c9:00:e1:58:68:02:36:f0:1b:3c:6f:2c:84:1b:76:4e:76:4e:
9a:5e:06:5d:00:89:89:d2:be:c5:a0:8b:d0:a7:8e:bc:e1:3d:
02:68:cf:31:83:f5:7b:a6:65:f1:7f:79:42:00:c4:1a:a2:4d:
21:9a:5b:68:d7:46:13:a3:aa:ca:b2:29:cf:0d:65:68:32:63:
b9:26:67:83:87:58:74:be:17:b8:ef:76:58:12:9e:d9:8f:66:
82:cb:98:ce:f6:6d:ef:75:50:42:8e:1c:c3:c5:dd:5e:6d:a9:
8f:be:8b:64:b4:20:83:99:27:f8:b2:41:54:74:8a:0f:52:79:
a7:d6:c5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:50 2026 by rpki-client