Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
File: CdCil56bZlLWG5Ad1VoZKNv9z20.mft (raw, json)
Hash identifier: cQDXtEXgHrMHiWKxyhJDPcrclyHuJbszMlMkCGNFtuY=
Subject key identifier: A8:1D:53:F3:F7:74:56:D9:16:1F:68:3A:AC:45:EF:E5:D2:2B:6A:F4
Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Certificate serial: 01A13DEF330BAE08229E9EC06C317441FA00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
Manifest number: 1AA9
Signing time: Thu 15 Oct 2026 05:00:48 +0000
Manifest this update: Thu 15 Oct 2026 05:00:48 +0000
Manifest next update: Fri 16 Oct 2026 05:00:48 +0000
Files and hashes: 1: CdCil56bZlLWG5Ad1VoZKNv9z20.crl (hash: ZcaqIVH1BplEUasR64bMd+B/OzL+RfmaQmD+wQJaqz0=)
2: NmgrOBcP0tgFCTOWcRYJnixwDJY.roa (hash: Ao15E11G2dQ+8WLi/IRmXPfGBQ5eaUZAO3CZk8b1evU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:33:0b:ae:08:22:9e:9e:c0:6c:31:74:41:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Validity
Not Before: Oct 15 05:00:48 2026 GMT
Not After : Oct 16 05:00:48 2026 GMT
Subject: CN=a81d53f3f77456d9161f683aac45efe5d22b6af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:70:3a:65:6d:ec:0c:dd:ec:9d:e7:ab:ee:5e:
7e:bd:30:2a:91:15:43:b3:db:1d:8c:46:06:33:ac:
e9:d7:db:09:9b:ab:4e:c8:ba:80:5c:60:88:b7:28:
76:b0:60:12:dc:c5:5e:16:99:02:05:8a:c2:31:83:
4f:11:af:da:73:e9:46:f5:8d:0f:91:ee:00:5f:89:
cc:35:4f:02:9b:4b:5d:89:66:cb:a9:79:9c:8a:25:
55:02:a7:8f:89:ea:3f:1a:c2:a3:7f:61:0a:1c:bf:
7f:aa:b2:12:9d:12:f6:d7:81:cf:74:99:99:d6:b5:
47:a8:e0:b8:d6:39:66:0c:8e:cc:0d:ff:f1:07:95:
e3:ba:84:50:58:c9:cd:a4:e4:37:4b:28:47:13:10:
8f:c8:eb:ab:96:ea:99:22:33:13:fb:87:de:91:b5:
b3:83:a5:1f:e1:f8:d0:1b:65:6c:37:c5:5f:d5:7e:
a2:96:db:f3:29:4d:be:c7:d2:5f:d1:bb:71:0d:bb:
e2:7c:b4:2b:9f:ff:d5:25:6d:0e:7b:23:c2:9d:25:
80:68:58:3c:5d:3b:b2:d2:c4:f7:e8:d6:5f:85:95:
e2:9c:76:35:61:c5:45:8b:d2:a7:cc:72:bd:f2:2e:
f8:f0:2e:3b:51:40:ab:c8:9a:be:0c:4e:34:f2:80:
a5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1D:53:F3:F7:74:56:D9:16:1F:68:3A:AC:45:EF:E5:D2:2B:6A:F4
X509v3 Authority Key Identifier:
keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:58:fa:fe:7a:63:a4:c2:c0:be:23:68:a9:bb:b3:83:86:2f:
bb:7e:55:00:b4:a8:73:c8:08:e3:f7:0b:e8:36:42:0d:38:90:
3e:5b:2f:33:f7:df:98:f8:7d:cc:42:4b:89:9e:66:e1:a4:9b:
97:d8:db:35:ed:8a:27:5f:05:a1:9c:b2:9f:3f:b6:3e:40:d1:
89:a6:d7:78:39:de:8c:32:ff:fc:96:84:b8:f3:12:7f:6d:84:
5f:50:97:2f:38:0b:04:ac:19:d1:a6:46:08:96:03:84:c2:81:
99:8c:6f:b7:ea:d9:45:23:79:6a:00:2f:f1:e9:5d:05:b2:2d:
51:fe:75:75:ee:61:ee:8d:98:9a:4b:b8:20:02:b3:7d:58:c0:
2b:7f:36:b1:99:6d:97:c9:05:2d:34:f9:39:4f:2e:3f:31:b1:
5f:59:30:84:0f:7f:c0:03:05:da:57:6c:c2:80:04:27:7c:c3:
66:c6:ea:a9:cf:e9:e1:11:ac:89:89:ae:aa:c5:a6:94:e9:38:
db:ee:0b:a2:dd:5b:5d:95:7b:3d:7f:2b:b2:26:2f:7d:1a:45:
7f:dc:8f:f5:fb:c6:53:35:32:4f:6f:6f:20:8a:7c:84:b0:cb:
23:49:cc:42:49:5a:de:57:3f:ae:ba:6b:43:55:e0:f8:b3:c9:
e1:ee:b3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:21:57 2026 by rpki-client