Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
File: cIYS6HA6ZgiJyg9FfPG02KDVO00.mft (raw, json)
Hash identifier: uxSoOvveISvCSzANDxufxNLQejuKl+z1pB3k321aSE0=
Subject key identifier: CB:F8:D9:2C:3C:44:9A:E0:A9:D8:5B:B5:4A:CF:14:B9:C2:E7:7E:29
Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Certificate serial: 019D39776AF3F639F0A8B429A172A565A587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
Manifest number: 0F34
Signing time: Sun 29 Mar 2026 12:00:20 +0000
Manifest this update: Sun 29 Mar 2026 12:00:20 +0000
Manifest next update: Mon 30 Mar 2026 12:00:20 +0000
Files and hashes: 1: cIYS6HA6ZgiJyg9FfPG02KDVO00.crl (hash: 844NAm4pJUczZD2AFubdWmJKpt7UUSvZk2fvpNvu1mo=)
2: k_Yqfb61yxFVsUAlfMaFEyavSv4.roa (hash: zO6a703k+u6Hm7KUfbGiT3ypzSzlcRhCCpgBjvvWhs4=)
3: muW9cBNMeWZbUzZWm3451nPmZy8.roa (hash: Une3GtFaZuE/Q/AgcVr8m9ytRRPpxQYRTGkYYful7io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:6a:f3:f6:39:f0:a8:b4:29:a1:72:a5:65:a5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Validity
Not Before: Mar 29 12:00:20 2026 GMT
Not After : Mar 30 12:00:20 2026 GMT
Subject: CN=cbf8d92c3c449ae0a9d85bb54acf14b9c2e77e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:80:66:01:04:f9:2c:d8:40:19:40:16:90:
33:93:03:14:d1:0d:54:0e:d9:a2:33:3e:73:2f:09:
7c:d6:16:0d:97:fd:43:00:83:85:4b:26:88:3c:1c:
5c:10:e3:f0:88:20:d3:9a:55:d6:11:ce:66:d4:7d:
70:6e:90:89:5a:7d:fd:a0:90:48:06:bb:a5:1f:cc:
97:45:e1:96:72:a3:a7:56:25:65:95:36:c6:c9:39:
18:03:e8:6e:93:c3:35:74:b7:e0:41:08:a3:bb:16:
03:af:78:2f:2b:c2:a3:ca:fb:08:e3:bd:d3:6e:d5:
27:78:64:a4:40:f4:30:7d:dd:7c:c7:e1:a5:01:84:
90:28:e2:f5:30:0c:9f:38:50:a7:59:c3:cb:8a:77:
ca:c4:60:aa:8c:b6:91:8c:1b:bf:45:5f:64:2d:b6:
39:81:5b:c2:b9:95:7b:16:95:ea:14:2f:62:b3:65:
71:8b:21:8a:c0:52:e5:3b:70:17:90:1b:ec:57:9b:
03:15:29:40:9b:b6:23:5c:17:00:1e:d5:62:f7:f5:
e7:22:d0:cc:ca:57:bd:37:7c:91:7e:b9:c2:95:c0:
94:03:62:66:71:8c:15:ea:62:36:af:9e:99:db:c0:
3b:3b:c1:e2:aa:3f:e9:18:7d:3f:4c:23:14:2f:80:
5b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F8:D9:2C:3C:44:9A:E0:A9:D8:5B:B5:4A:CF:14:B9:C2:E7:7E:29
X509v3 Authority Key Identifier:
keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e9:d6:51:67:f8:31:19:3b:11:af:5e:d5:7a:46:78:e5:9a:
23:8e:00:d0:d3:e8:f7:02:6b:27:33:61:34:48:49:bf:46:89:
8f:e5:75:7b:b6:4c:e8:cc:89:4f:ba:c2:84:a0:fc:d0:70:aa:
43:05:d4:1e:3a:86:54:17:37:f0:f4:1e:d9:44:86:fe:80:c0:
c8:49:f6:69:0a:4b:e0:f8:56:49:78:f5:2e:33:88:84:a2:6f:
6c:06:27:c4:68:60:4c:20:c3:97:5c:5c:5e:75:2d:96:05:62:
5d:89:53:8c:b4:3d:a9:fd:3e:3f:27:a3:38:b7:9f:30:a0:84:
16:32:e1:18:b7:d0:8c:ce:8e:76:72:b2:2c:ba:86:62:1a:4c:
07:6f:49:fb:a5:18:11:40:1a:20:da:ef:5e:96:14:58:27:72:
d8:ed:db:80:bc:95:96:a5:9b:58:b7:99:64:7e:82:fa:02:db:
c6:0b:01:96:91:12:42:14:7b:b9:ac:25:06:a1:06:b4:c0:2a:
5e:43:be:64:49:df:44:ed:31:0d:b2:5a:4a:1b:0e:81:07:03:
09:62:67:49:cd:ef:b9:4d:0a:8e:46:4b:d6:68:a1:40:17:19:
85:ee:df:12:9c:48:17:dd:46:20:44:19:ff:50:7d:78:3c:c0:
85:05:1c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:07 2026 by rpki-client