Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
File: CdCil56bZlLWG5Ad1VoZKNv9z20.mft (raw, json)
Hash identifier: Y7SPzW/gHZW5n+BMwJvmwB+dpP84xoULcv7eved3v84=
Subject key identifier: 1D:C1:A5:50:CA:B2:B4:E5:37:D4:B5:D0:28:FF:EC:6B:1E:F9:71:05
Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Certificate serial: 019D389C23B54FFF14DB050A57B174D91163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 08:00:50 +0000
Manifest this update: Sun 29 Mar 2026 08:00:50 +0000
Manifest next update: Mon 30 Mar 2026 08:00:50 +0000
Files and hashes: 1: CdCil56bZlLWG5Ad1VoZKNv9z20.crl (hash: lO//pfkmoyI0AsSJ9cmNI5WFwI+zDa859H5QCu9v9mk=)
2: NmgrOBcP0tgFCTOWcRYJnixwDJY.roa (hash: Ao15E11G2dQ+8WLi/IRmXPfGBQ5eaUZAO3CZk8b1evU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:23:b5:4f:ff:14:db:05:0a:57:b1:74:d9:11:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Validity
Not Before: Mar 29 08:00:50 2026 GMT
Not After : Mar 30 08:00:50 2026 GMT
Subject: CN=1dc1a550cab2b4e537d4b5d028ffec6b1ef97105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:41:e5:e2:d7:3c:41:8f:1b:e9:d9:7a:54:94:
88:15:85:7c:fe:40:3d:4c:d5:29:69:71:47:3e:d0:
8c:ec:49:1a:b5:d7:0f:59:fb:89:21:ec:16:bd:54:
47:8b:62:ae:16:fc:3f:ef:59:f2:1d:f7:3b:22:f6:
f2:02:ce:07:a6:52:f5:d1:69:3e:b0:b4:06:85:fc:
4e:03:79:08:6f:4f:01:1b:25:e4:30:2c:c1:3c:66:
7d:76:9e:f2:c0:36:9d:7e:5c:83:d2:af:cb:b4:b5:
a7:4e:d2:62:67:cb:c9:bb:32:0c:8f:ac:7a:a1:2c:
fb:b1:5b:a9:87:8a:35:ee:10:e8:fe:f9:a1:62:9a:
ea:a3:d3:30:8e:88:37:25:46:a9:f0:c0:b1:b3:1f:
a9:25:ae:0d:13:27:e8:88:55:4a:6d:6c:7f:f8:fc:
bf:a5:44:3e:0a:a3:d8:2c:01:c4:b3:84:d1:ba:c7:
7a:d0:91:dd:2c:21:79:db:37:88:cd:c9:5b:d7:77:
57:5d:72:46:89:4b:ea:c5:07:a4:48:7d:27:ba:31:
f9:14:38:74:1e:95:00:3f:85:70:ab:da:85:02:ec:
99:b4:87:31:13:db:1f:8f:e0:ee:6c:49:cd:78:80:
0c:a3:28:07:76:05:b0:61:70:eb:23:65:40:28:c1:
f0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C1:A5:50:CA:B2:B4:E5:37:D4:B5:D0:28:FF:EC:6B:1E:F9:71:05
X509v3 Authority Key Identifier:
keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:10:db:82:6c:d6:05:12:5b:79:e5:19:af:28:11:83:95:10:
f9:aa:08:1a:d9:5f:47:3c:1d:24:7c:a1:98:b9:4c:39:ef:40:
ca:32:19:34:7a:cb:00:0f:51:16:da:93:03:66:0a:d8:04:e0:
31:bb:14:c5:49:f2:7f:f9:20:14:f9:97:4d:7b:32:31:11:c1:
e3:74:80:ef:23:78:e0:23:ea:38:11:a0:e4:f3:6f:67:3d:3c:
52:b2:5d:a5:b8:33:44:de:d2:d8:0e:5f:3f:65:90:d5:87:52:
3a:27:72:cb:b3:14:ce:27:ae:8d:9a:d9:97:d1:8d:be:94:4a:
f5:fe:cb:8f:6b:25:ff:51:0e:bf:66:ee:e5:14:73:5d:15:88:
f9:84:f0:e3:36:8b:f2:9f:02:c5:0d:c9:5f:60:ab:6f:23:f7:
1a:78:c3:43:ea:56:9f:c8:06:94:3e:aa:c9:4d:9b:1d:5c:4f:
8b:84:a0:49:b5:9f:92:0f:a9:64:80:35:9e:80:d7:a7:b1:17:
d0:1f:d7:62:cb:3f:d2:32:1b:e1:d3:6b:02:df:d9:5f:aa:19:
36:b9:d1:2b:2d:b5:60:6d:2c:ee:28:12:13:65:44:66:72:9e:
3f:20:0b:95:ad:e2:2c:5d:4d:21:b2:9d:01:5f:36:e2:8a:ef:
38:6c:0e:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nCO1T/8U2wUKV7F02RFjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZDBhMjk3OWU5YjY2NTJkNjFiOTAxZGQ1NWExOTI4ZGJm
ZGNmNmQwHhcNMjYwMzI5MDgwMDUwWhcNMjYwMzMwMDgwMDUwWjAzMTEwLwYDVQQD
EygxZGMxYTU1MGNhYjJiNGU1MzdkNGI1ZDAyOGZmZWM2YjFlZjk3MTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikHl4tc8QY8b6dl6VJSIFYV8/kA9
TNUpaXFHPtCM7EkatdcPWfuJIewWvVRHi2KuFvw/71nyHfc7IvbyAs4HplL10Wk+
sLQGhfxOA3kIb08BGyXkMCzBPGZ9dp7ywDadflyD0q/LtLWnTtJiZ8vJuzIMj6x6
oSz7sVuph4o17hDo/vmhYprqo9Mwjog3JUap8MCxsx+pJa4NEyfoiFVKbWx/+Py/
pUQ+CqPYLAHEs4TRusd60JHdLCF52zeIzclb13dXXXJGiUvqxQekSH0nujH5FDh0
HpUAP4Vwq9qFAuyZtIcxE9sfj+DubEnNeIAMoygHdgWwYXDrI2VAKMHw8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3BpVDKsrTlN9S10Cj/7Gse+XEFMB8GA1UdIwQY
MBaAFAnQopeem2ZS1huQHdVaGSjb/c9tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2RDaWw1NmJabExXRzVBZDFWb1pLTnY5ejIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84YzMzYzItNmY3Mi00MWI2LWE5ZTQt
MDlmNzNjMzU0ZTdjLzEvQ2RDaWw1NmJabExXRzVBZDFWb1pLTnY5ejIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS84YzMzYzItNmY3Mi00MWI2LWE5ZTQtMDlmNzNjMzU0ZTdj
LzEvQ2RDaWw1NmJabExXRzVBZDFWb1pLTnY5ejIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRDbgmzW
BRJbeeUZrygRg5UQ+aoIGtlfRzwdJHyhmLlMOe9AyjIZNHrLAA9RFtqTA2YK2ATg
MbsUxUnyf/kgFPmXTXsyMRHB43SA7yN44CPqOBGg5PNvZz08UrJdpbgzRN7S2A5f
P2WQ1YdSOidyy7MUzieujZrZl9GNvpRK9f7Lj2sl/1EOv2bu5RRzXRWI+YTw4zaL
8p8CxQ3JX2CrbyP3GnjDQ+pWn8gGlD6qyU2bHVxPi4SgSbWfkg+pZIA1noDXp7EX
0B/XYss/0jIb4dNrAt/ZX6oZNrnRKy21YG0s7igSE2VEZnKePyALla3iLF1NIbKd
AV824orvOGwOkQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:08 2026 by rpki-client