Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
File: CdCil56bZlLWG5Ad1VoZKNv9z20.mft (raw, json)
Hash identifier: 0JJIvmoBarF/ruUnCTI5QIMchreR6s70HRKhvXlr8Uo=
Subject key identifier: 38:79:F0:DE:2D:A1:4D:EA:34:6D:A7:93:9E:93:D3:E5:7C:78:B8:40
Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Certificate serial: 01A001388EE94BAED2AFA24F154B7A982BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
Manifest number: 1A05
Signing time: Fri 14 Aug 2026 17:01:18 +0000
Manifest this update: Fri 14 Aug 2026 17:01:18 +0000
Manifest next update: Sat 15 Aug 2026 17:01:18 +0000
Files and hashes: 1: CdCil56bZlLWG5Ad1VoZKNv9z20.crl (hash: R1xIr42xYG0eJkLG5LRhYyhRJDYoH6agDDwoWmyq9Tg=)
2: NmgrOBcP0tgFCTOWcRYJnixwDJY.roa (hash: Ao15E11G2dQ+8WLi/IRmXPfGBQ5eaUZAO3CZk8b1evU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:8e:e9:4b:ae:d2:af:a2:4f:15:4b:7a:98:2b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Validity
Not Before: Aug 14 17:01:18 2026 GMT
Not After : Aug 15 17:01:18 2026 GMT
Subject: CN=3879f0de2da14dea346da7939e93d3e57c78b840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:be:68:29:e5:9e:93:c6:fe:1b:33:e3:91:
17:53:2e:7b:06:ab:e9:28:97:f4:0e:52:15:76:6a:
72:68:cf:db:ec:cb:1e:54:e9:c4:e7:28:63:0e:b6:
a7:a1:ca:06:86:a3:87:3a:27:3b:18:36:af:1e:1e:
66:cc:1a:b5:cd:a9:f7:99:2e:4a:a8:a7:8d:83:af:
1c:f7:f2:83:f4:c4:a7:54:2e:45:5d:e3:9f:c9:42:
eb:a1:93:4f:e5:70:bc:b7:00:7b:82:67:ab:f6:89:
72:02:3d:42:61:fc:59:d3:1a:4d:91:ef:f4:b1:06:
2f:5a:ca:cf:95:ef:17:e0:36:c5:42:7e:ae:22:a7:
20:c5:18:29:3a:8e:23:a8:54:f3:04:cc:53:d6:b0:
41:a8:cb:cf:d7:ea:46:a1:d1:ff:d8:36:07:45:17:
93:6b:a3:12:4d:e2:fc:d5:bf:c9:f4:0a:a1:0a:9e:
75:4a:25:63:c8:94:d5:7b:88:cd:be:49:e2:2a:e1:
c8:e1:6e:1a:0f:89:da:90:88:76:3b:36:5e:1a:0f:
49:07:37:55:1e:95:13:a8:13:e2:f0:52:3f:4f:ca:
b9:8c:bc:19:92:2b:a3:c8:21:e1:4e:e6:e3:0d:1e:
bc:e8:96:37:47:36:06:8e:67:f8:be:2e:4d:79:9f:
a1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:79:F0:DE:2D:A1:4D:EA:34:6D:A7:93:9E:93:D3:E5:7C:78:B8:40
X509v3 Authority Key Identifier:
keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:58:6f:fa:26:a2:f1:cd:4c:9d:7b:9e:05:c7:82:6d:94:ab:
3d:db:9b:e8:07:ad:48:92:2c:e7:01:5c:e3:d9:1c:71:63:f9:
12:ff:08:a3:52:5f:8b:ae:21:09:9d:86:29:06:47:cd:92:a2:
f4:91:1c:c3:03:4c:9b:fa:19:1b:02:5a:59:d8:e3:2d:0b:25:
25:b1:4e:ae:15:fd:43:b9:7f:d3:3b:29:30:ae:58:81:90:38:
51:ef:1e:cb:3a:05:23:e2:b5:21:37:e5:6c:1a:42:2f:8c:40:
dc:07:a5:d3:3a:b3:2a:f0:4c:82:1b:b8:9a:03:9d:5c:7c:1c:
f7:0e:9b:57:8a:08:20:4a:fc:ab:f2:5a:86:bb:bc:24:53:06:
bb:8d:20:6e:96:4a:e7:14:3c:e3:97:c8:17:bf:a8:f0:69:24:
5f:f0:41:e0:f8:3f:5a:48:96:0c:7a:33:4c:8d:e0:78:a1:aa:
af:b3:d9:3d:c5:39:ab:5d:0c:a3:79:7f:30:a5:66:df:44:ac:
f1:ac:73:ba:df:82:ca:bc:a7:7f:5e:d7:49:c5:24:b6:c5:b9:
f3:70:fd:ca:4d:57:25:e8:9d:17:22:70:57:fa:ed:ad:a9:a5:
0a:cf:4d:91:06:5c:10:a1:69:3b:48:88:96:89:cf:cc:ef:00:
8e:bb:73:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:57 2026 by rpki-client