Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
File: CiINqbbilYVbYn_qYQ4cthZGiUs.mft (raw, json)
Hash identifier: PZA7Ff0DCHPysSHEOZQBr1rYGeVwVC8BT2GpDBOK8vQ=
Subject key identifier: FA:76:C5:45:71:CF:20:33:1B:00:A1:E5:77:8C:B0:ED:05:A0:68:16
Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Certificate issuer: /CN=0a220da9b6e295855b627fea610e1cb61646894b
Certificate serial: 01A00281F7F4BF471A312EE8F4D28A74159B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
Manifest number: 1581
Signing time: Fri 14 Aug 2026 23:01:07 +0000
Manifest this update: Fri 14 Aug 2026 23:01:07 +0000
Manifest next update: Sat 15 Aug 2026 23:01:07 +0000
Files and hashes: 1: CiINqbbilYVbYn_qYQ4cthZGiUs.crl (hash: htP1XSDle3yEAiE8NbopmTY4U1p4CPA2Q536FwVasMs=)
2: rXLqqCZ5hf5h4ak7-J87ANzm0Nk.roa (hash: mVE+xG0sJPMu7e4f75e+8AtJaA+JDEMEjzG8yFMRLQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:f7:f4:bf:47:1a:31:2e:e8:f4:d2:8a:74:15:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b
Validity
Not Before: Aug 14 23:01:07 2026 GMT
Not After : Aug 15 23:01:07 2026 GMT
Subject: CN=fa76c54571cf20331b00a1e5778cb0ed05a06816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b6:54:01:03:0b:f7:12:df:c1:44:c2:b8:5f:
9d:fb:73:10:d7:13:19:c1:0a:0c:0d:2f:01:76:29:
db:6a:69:6b:4d:f7:a6:03:9a:8f:85:7b:44:00:b9:
7e:0e:cd:22:7f:43:f0:76:dc:a6:09:3d:ce:a3:ed:
85:88:e8:89:c2:b9:a3:66:35:7d:b1:ca:17:91:31:
f6:fb:5a:b2:4d:ad:9e:6b:c6:ab:1c:f7:2b:b6:7a:
ee:94:e2:46:9d:b0:35:db:e1:d5:4b:c3:3f:4e:f3:
4e:3f:2a:3b:e8:0a:c7:d1:78:44:cd:1d:fd:66:5b:
c2:99:17:cd:b6:ea:e2:97:71:28:e7:3a:f7:d1:b8:
d8:75:af:5a:73:21:0e:06:f6:8c:d8:a5:c6:b7:a6:
7e:e2:52:7b:0e:f0:b3:9f:0c:59:6b:7a:cf:ab:09:
34:e9:46:20:dd:be:8d:e8:e8:da:10:52:a2:dd:49:
a2:16:6c:d4:02:aa:f9:f4:8d:66:b9:31:e7:13:18:
16:f2:5a:ee:87:53:17:42:a7:08:40:01:4a:eb:c7:
02:89:23:b8:58:bf:26:ab:35:ea:5c:8e:79:b8:88:
68:9c:d3:a2:18:b9:ba:4c:d4:72:0b:d9:1b:8d:63:
ca:2c:48:42:2a:9b:b7:19:ab:fb:e3:96:bd:b5:ef:
a4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:76:C5:45:71:CF:20:33:1B:00:A1:E5:77:8C:B0:ED:05:A0:68:16
X509v3 Authority Key Identifier:
keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:18:db:f4:c3:6a:a1:17:84:44:9e:97:f6:20:88:f4:53:81:
a9:46:db:0f:ad:c8:41:22:a6:ae:36:14:92:55:a9:7e:c9:60:
62:2b:0f:ba:d6:8f:73:19:41:06:fb:67:3a:42:3c:d5:b4:9a:
96:cc:2e:77:ba:1e:98:a6:c7:91:19:14:d6:fc:92:eb:85:55:
20:a4:2e:7e:25:3a:a4:4f:42:fa:f6:75:ae:8b:ef:f1:92:8a:
30:b1:4e:d1:ef:26:77:b8:ce:dc:3f:93:c3:0c:30:01:70:d6:
73:2a:5b:a0:0d:d5:33:ae:c5:d8:ab:62:04:14:00:7e:6c:15:
1d:ae:30:7a:50:44:83:37:e1:c3:c7:50:85:62:8d:b3:18:24:
85:6f:f6:c0:36:ce:d5:1c:cd:5a:51:02:d0:df:13:ee:d7:0d:
53:87:ec:98:7e:12:f5:e7:fd:eb:60:dc:7a:6b:ee:e7:d4:dd:
bb:4b:87:c9:b0:ea:2b:f2:40:2c:2a:fe:2b:82:c9:03:e6:29:
8c:f0:da:db:2f:c6:54:de:c8:67:17:fd:e9:bb:2d:30:46:cf:
2e:ac:11:19:2a:12:ab:17:2c:a1:8a:cf:2f:92:13:63:ca:79:
8a:8c:47:b4:4e:d4:e1:b3:39:e1:bf:01:8f:55:45:5c:56:e6:
55:5e:25:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:57 2026 by rpki-client