Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
File: CiINqbbilYVbYn_qYQ4cthZGiUs.mft (raw, json)
Hash identifier: LD3agkrLuvlvIRpQSLjK+b9Jh+lfY7m/LpkeovJPgR8=
Subject key identifier: 57:81:5C:C4:85:E4:40:5D:A3:37:6F:8E:E6:FC:CF:63:AE:31:3C:BF
Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Certificate issuer: /CN=0a220da9b6e295855b627fea610e1cb61646894b
Certificate serial: 01A13D49FB1434200F8B23B7A8D74C75ACC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
Manifest number: 1624
Signing time: Thu 15 Oct 2026 02:00:20 +0000
Manifest this update: Thu 15 Oct 2026 02:00:20 +0000
Manifest next update: Fri 16 Oct 2026 02:00:20 +0000
Files and hashes: 1: CiINqbbilYVbYn_qYQ4cthZGiUs.crl (hash: j07c90+/ppFWWrOUamp2u30RM4x8c9dPUFyN6uosHfk=)
2: rXLqqCZ5hf5h4ak7-J87ANzm0Nk.roa (hash: mVE+xG0sJPMu7e4f75e+8AtJaA+JDEMEjzG8yFMRLQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:49:fb:14:34:20:0f:8b:23:b7:a8:d7:4c:75:ac:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b
Validity
Not Before: Oct 15 02:00:20 2026 GMT
Not After : Oct 16 02:00:20 2026 GMT
Subject: CN=57815cc485e4405da3376f8ee6fccf63ae313cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:86:8d:de:86:fa:0b:cc:01:ad:9a:67:ff:
fa:ed:75:70:1a:2f:b1:2d:51:67:28:22:aa:78:9c:
a7:0c:91:41:45:b9:65:f3:6f:28:25:a6:fb:a0:53:
31:ea:be:47:b3:23:58:e8:e8:6f:77:c9:6f:68:00:
f7:0d:f4:94:f7:9c:d3:8b:a2:e8:51:5e:61:f0:a0:
ff:c8:f4:b5:cf:b0:d9:5e:d7:93:40:bc:27:b2:de:
a8:1a:14:19:8e:27:72:b1:82:15:5a:6f:9a:8f:f1:
d5:1c:57:2b:d0:f8:f8:46:68:ad:66:60:f4:e2:51:
03:ef:08:99:e4:6d:c1:ed:ff:30:e7:fe:dc:0d:a4:
4a:c8:88:f6:02:2f:c8:72:39:bd:1b:5a:55:17:17:
c2:57:7b:0c:a2:33:b6:4d:bd:76:95:9a:16:68:be:
46:0e:1f:a2:b6:25:9c:a4:a8:5f:49:21:9b:fb:74:
2e:18:1c:7d:a4:1d:ff:7f:bc:1a:61:49:38:c5:40:
9c:29:ad:dc:ab:f9:a5:ca:19:99:54:bb:49:19:92:
4f:c9:c9:80:7a:c1:ed:a6:ff:89:3b:11:6f:dd:d4:
b7:8a:2b:d5:78:51:5e:28:68:82:3b:64:ff:26:61:
71:73:c2:b2:9f:3c:f9:ae:8c:33:de:3a:64:89:93:
47:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:81:5C:C4:85:E4:40:5D:A3:37:6F:8E:E6:FC:CF:63:AE:31:3C:BF
X509v3 Authority Key Identifier:
keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:02:c1:00:a5:e3:43:58:e5:e1:90:59:96:fe:73:50:46:f9:
39:40:e8:3c:3e:2a:0b:ad:d3:28:af:8d:26:7a:e4:01:72:7b:
1d:47:77:0f:41:b4:e5:3c:95:87:85:bc:fa:88:1e:17:f9:8e:
54:82:d2:0a:24:2e:00:63:ea:f8:ca:24:b7:33:d1:fd:f2:fa:
17:0d:af:b8:e7:1a:de:05:e7:29:f9:dc:70:86:41:24:33:0f:
af:f2:e9:16:12:a8:f9:31:be:f8:05:ae:3d:e5:90:54:db:ee:
48:20:cb:68:3d:5e:de:6f:a4:7b:34:83:66:b4:0e:80:53:e4:
b2:e5:36:ab:28:64:ae:e1:fb:a2:6b:98:a0:5d:50:f9:e4:c8:
f0:2f:f7:32:3f:13:9a:b1:25:65:3a:74:82:65:b6:dd:2f:69:
a4:1f:d0:33:0d:7e:c3:34:34:5a:2b:4a:b3:8a:ae:0b:fc:56:
8a:bc:6a:5c:87:04:4e:55:33:55:88:f7:e8:83:cb:6b:2c:1a:
45:66:cb:aa:df:d7:e1:d7:26:2c:47:d0:66:8a:e9:71:3d:7a:
13:9d:05:7d:97:a2:04:06:53:b2:e2:65:51:37:e1:27:49:11:
77:57:bb:48:77:91:fe:1a:a9:b2:35:70:54:ce:7e:a2:b7:39:
0f:1c:7e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:38:14 2026 by rpki-client