Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
File: CdCil56bZlLWG5Ad1VoZKNv9z20.mft (raw, json)
Hash identifier: MKhDfm3byK0y1hTNyTeNQvgRQQH1EUOhyt2QU729wxI=
Subject key identifier: 43:24:7B:90:C4:AA:A5:8A:A6:F8:04:D3:29:02:26:39:2C:C9:3A:D1
Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Certificate serial: 019F178BCA6B4D5E1A3791B5F371207A0882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
Manifest number: 198C
Signing time: Tue 30 Jun 2026 08:01:05 +0000
Manifest this update: Tue 30 Jun 2026 08:01:05 +0000
Manifest next update: Wed 01 Jul 2026 08:01:05 +0000
Files and hashes: 1: CdCil56bZlLWG5Ad1VoZKNv9z20.crl (hash: QEePwleK8tsqejkELPDBVI0bAAoLtAaLjTUa/ag7fsE=)
2: NmgrOBcP0tgFCTOWcRYJnixwDJY.roa (hash: Ao15E11G2dQ+8WLi/IRmXPfGBQ5eaUZAO3CZk8b1evU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8b:ca:6b:4d:5e:1a:37:91:b5:f3:71:20:7a:08:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Validity
Not Before: Jun 30 08:01:05 2026 GMT
Not After : Jul 1 08:01:05 2026 GMT
Subject: CN=43247b90c4aaa58aa6f804d3290226392cc93ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:08:f1:e1:df:2d:22:7f:45:f1:2a:7f:cd:
c8:f3:36:25:be:d1:e9:72:19:3a:d1:c2:6b:70:16:
8f:1d:32:d4:31:54:e5:72:5c:e9:18:23:c1:95:96:
07:e1:d4:af:bf:aa:7f:44:19:49:e7:06:6c:ed:f3:
05:6e:60:45:4c:00:8c:7d:bc:fa:cb:86:83:cf:ff:
6c:4f:d9:c9:0d:1b:08:bb:85:73:39:6f:c6:9a:db:
0b:e5:9a:b1:d4:e1:e4:97:6c:d5:08:52:ca:48:1c:
cd:7c:89:fc:87:5d:66:b3:73:63:5b:53:46:b2:2d:
73:06:2e:4e:4b:75:59:08:c6:78:78:c8:dc:2e:e1:
9b:3a:04:f2:a6:28:87:40:1c:09:06:12:ec:fe:03:
92:8b:31:7b:20:18:bc:e3:25:bc:20:72:27:3b:69:
00:1f:52:d3:d5:42:bf:39:97:4d:16:49:98:eb:be:
72:e4:a1:6b:92:b9:9d:fc:26:17:1b:14:19:20:98:
87:1c:04:55:5b:ac:3e:f8:37:60:8a:cf:31:f6:27:
4f:dc:b3:5a:03:8d:32:70:5b:61:20:c4:3d:a9:32:
da:e1:14:1b:36:3b:51:89:9b:cb:6a:b5:cc:0b:64:
ae:d3:8d:a5:e1:7d:c1:c9:da:93:60:5a:5b:ee:89:
08:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:24:7B:90:C4:AA:A5:8A:A6:F8:04:D3:29:02:26:39:2C:C9:3A:D1
X509v3 Authority Key Identifier:
keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:93:f2:75:62:fa:6e:26:9a:43:06:76:68:8b:4c:95:7e:da:
19:00:f4:75:1a:84:54:e6:49:24:37:bd:82:68:ee:95:3a:b4:
08:67:b0:78:4f:7a:4a:6e:60:b2:83:d2:a7:89:61:11:18:43:
29:a7:ea:ab:3a:53:75:d3:86:91:fb:e3:28:69:2a:47:15:06:
fb:89:c2:1c:90:4e:bc:35:47:3c:4a:df:03:b8:33:01:02:a4:
81:0d:3a:bb:a0:50:47:e6:b1:be:e0:63:ef:13:cd:ff:24:22:
97:70:cb:e6:a4:da:c0:46:b1:3a:a9:71:fd:f7:ca:ce:68:9f:
35:88:7f:6d:ba:8b:f9:ff:07:59:00:56:c8:05:05:dd:3f:9b:
c4:a4:ba:26:f3:cf:48:4b:dc:bc:40:f3:a0:0a:0d:e7:36:f3:
dd:61:91:4f:ea:13:b9:74:96:b2:f3:09:59:a7:dc:00:19:92:
06:2e:82:3b:4d:d0:03:57:73:1b:9b:60:ab:31:8e:ae:70:ea:
c6:a3:d3:66:20:7a:ee:99:ee:ad:16:d6:38:89:5a:45:3d:60:
be:67:a9:21:7c:78:f0:59:99:13:f6:0d:04:b5:9c:9e:04:3e:
47:77:ad:fc:bc:de:4d:92:42:dc:6c:88:f9:9f:b4:34:38:14:
b9:57:db:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:51 2026 by rpki-client