Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
File: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft (raw, json)
Hash identifier: 5IYQD8hmTK4c1wHw/YvksH5tzJIK0Y4VvxabesAoIqc=
Subject key identifier: 9B:36:D8:90:52:A9:40:85:A4:CB:76:FD:44:EB:F6:B0:BE:E5:3B:74
Authority key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
Certificate issuer: /CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Certificate serial: 019D3977F22081727ACE9293BED73009D4DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
Manifest number: 15C9
Signing time: Sun 29 Mar 2026 12:00:55 +0000
Manifest this update: Sun 29 Mar 2026 12:00:55 +0000
Manifest next update: Mon 30 Mar 2026 12:00:55 +0000
Files and hashes: 1: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl (hash: G9ZctvX0Lca+1P4v/MNKiV3t2crsAMb3j3pF9LrmU+g=)
2: n7VFRuXxwgQnbFBuSUUBxwFhG6c.roa (hash: 6D6FdS3Q7oE33CoT/nZTuBGeDlU4d2ghqGCtrD1KUXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:f2:20:81:72:7a:ce:92:93:be:d7:30:09:d4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Validity
Not Before: Mar 29 12:00:55 2026 GMT
Not After : Mar 30 12:00:55 2026 GMT
Subject: CN=9b36d89052a94085a4cb76fd44ebf6b0bee53b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:ea:06:47:e4:86:71:28:69:0f:da:29:3c:
b2:fa:27:9c:c8:c6:d4:37:29:4a:e0:fa:25:b6:9e:
b3:cd:6a:eb:c6:1b:5a:4d:93:44:d2:92:57:0c:34:
e8:ee:84:3b:af:a1:77:d4:87:77:23:46:d0:0b:e2:
33:70:78:c2:0f:6b:56:b2:c2:f4:0c:c6:74:39:5c:
93:89:de:e6:fc:9e:88:93:46:ba:8c:3e:43:b0:f4:
bd:3c:5d:c9:d4:8d:9f:46:3e:14:bc:ce:77:fc:58:
f7:9f:05:15:15:44:9f:69:a9:c9:8b:2a:1a:a7:5e:
0c:a8:71:60:6b:ab:2d:de:85:eb:ec:a0:c4:d5:fb:
56:b6:be:66:fd:70:46:10:e3:85:18:a8:f2:74:62:
6d:05:0d:18:38:d3:f4:ea:29:5d:cd:a9:1a:38:45:
6f:e1:d4:96:a0:a4:f4:58:38:88:87:45:61:67:e9:
f4:ba:08:4d:84:80:87:1b:10:37:15:0c:a5:5f:e4:
d8:98:0d:9a:1b:92:b7:df:d9:d1:14:44:b2:cf:8c:
3e:d8:2e:55:f4:22:f3:c3:ba:90:41:42:36:62:8a:
4b:e0:9e:42:9d:96:9f:c7:b2:c8:cc:9a:2b:1d:92:
4d:e3:79:fb:9a:2b:97:6d:03:0c:1c:87:63:82:92:
88:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:36:D8:90:52:A9:40:85:A4:CB:76:FD:44:EB:F6:B0:BE:E5:3B:74
X509v3 Authority Key Identifier:
keyid:0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:27:b5:5b:49:d9:a6:d9:eb:ea:93:e5:95:a3:3b:6c:4d:3d:
9e:85:32:cd:e6:fc:02:ea:d1:26:8e:38:4d:fe:03:28:59:6c:
5c:01:fd:86:33:69:f8:24:30:2a:94:64:01:94:94:1d:3e:5f:
4a:e7:fc:da:84:ae:ba:72:6f:87:ff:94:08:15:b8:8f:d5:29:
58:26:8c:6c:e3:f5:10:23:9c:5e:c9:aa:f3:33:36:1d:f6:fe:
14:73:2a:cd:0f:b0:13:4b:67:cd:df:85:27:a4:1d:51:23:e0:
f6:b8:04:02:fe:84:b3:af:c2:b3:62:0d:7d:e3:59:9d:ed:57:
a9:9e:ad:5e:84:92:eb:5a:ce:7e:b7:51:6f:87:bc:51:63:57:
23:51:6f:8a:0e:a6:3d:74:7e:f1:da:33:49:26:9e:e6:93:7a:
6b:3c:8c:d3:b8:33:cc:1f:85:ef:87:f3:5a:4e:10:52:df:61:
a0:8f:01:f1:1f:ce:25:33:b7:78:ca:1a:5d:36:6e:68:4e:4f:
fa:b5:d2:a6:28:5b:f5:30:57:39:2a:a8:b5:c6:03:c7:13:cf:
2e:9f:f6:a4:b6:2b:54:73:1f:00:fb:4b:79:a5:6f:11:d5:2a:
8f:f3:b4:79:57:46:a9:af:c4:0a:9e:ca:86:45:2a:9d:14:a1:
30:b0:ce:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d/IggXJ6zpKTvtcwCdTcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMmQ3MWMwZDE0NWVmMjc4MDQ3MTA5MjdiOTQzYzY3ZTUw
YWU3YWIwHhcNMjYwMzI5MTIwMDU1WhcNMjYwMzMwMTIwMDU1WjAzMTEwLwYDVQQD
Eyg5YjM2ZDg5MDUyYTk0MDg1YTRjYjc2ZmQ0NGViZjZiMGJlZTUzYjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv7qBkfkhnEoaQ/aKTyy+iecyMbU
NylK4Poltp6zzWrrxhtaTZNE0pJXDDTo7oQ7r6F31Id3I0bQC+IzcHjCD2tWssL0
DMZ0OVyTid7m/J6Ik0a6jD5DsPS9PF3J1I2fRj4UvM53/Fj3nwUVFUSfaanJiyoa
p14MqHFga6st3oXr7KDE1ftWtr5m/XBGEOOFGKjydGJtBQ0YONP06ildzakaOEVv
4dSWoKT0WDiIh0VhZ+n0ughNhICHGxA3FQylX+TYmA2aG5K339nRFESyz4w+2C5V
9CLzw7qQQUI2YopL4J5CnZafx7LIzJorHZJN43n7miuXbQMMHIdjgpKIxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJs22JBSqUCFpMt2/UTr9rC+5Tt0MB8GA1UdIwQY
MBaAFAotccDRRe8ngEcQknuUPGflCuerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2kxeHdORkY3eWVBUnhDU2U1UThaLVVLNTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjkxMGYtZGNjMS00MWRiLTk2Y2Qt
MDkyZTg5ZDU5ZmE4LzEvQ2kxeHdORkY3eWVBUnhDU2U1UThaLVVLNTZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yYjkxMGYtZGNjMS00MWRiLTk2Y2QtMDkyZTg5ZDU5ZmE4
LzEvQ2kxeHdORkY3eWVBUnhDU2U1UThaLVVLNTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGye1W0nZ
ptnr6pPllaM7bE09noUyzeb8AurRJo44Tf4DKFlsXAH9hjNp+CQwKpRkAZSUHT5f
Suf82oSuunJvh/+UCBW4j9UpWCaMbOP1ECOcXsmq8zM2Hfb+FHMqzQ+wE0tnzd+F
J6QdUSPg9rgEAv6Es6/Cs2INfeNZne1XqZ6tXoSS61rOfrdRb4e8UWNXI1Fvig6m
PXR+8dozSSae5pN6azyM07gzzB+F74fzWk4QUt9hoI8B8R/OJTO3eMoaXTZuaE5P
+rXSpihb9TBXOSqotcYDxxPPLp/2pLYrVHMfAPtLeaVvEdUqj/O0eVdGqa/ECp7K
hkUqnRShMLDO8Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:56 2026 by rpki-client