Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
File: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft (raw, json)
Hash identifier: KPCBmcxYn4yh9YqY6ZJSSQWMC3ZH5dO+3377haQ4Ay0=
Subject key identifier: B6:70:E2:AE:F2:96:8D:F7:98:DF:70:E8:78:C3:3B:D8:04:E7:DB:CF
Authority key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
Certificate issuer: /CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Certificate serial: 01A13CDC39F03C50785096CA80F9A8879B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
Manifest number: 17DD
Signing time: Thu 15 Oct 2026 00:00:28 +0000
Manifest this update: Thu 15 Oct 2026 00:00:28 +0000
Manifest next update: Fri 16 Oct 2026 00:00:28 +0000
Files and hashes: 1: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl (hash: aB2h0yrLph1rOrh5iltAv5/AryixPxzCwyaX73J8t/8=)
2: n7VFRuXxwgQnbFBuSUUBxwFhG6c.roa (hash: 6D6FdS3Q7oE33CoT/nZTuBGeDlU4d2ghqGCtrD1KUXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:39:f0:3c:50:78:50:96:ca:80:f9:a8:87:9b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Validity
Not Before: Oct 15 00:00:28 2026 GMT
Not After : Oct 16 00:00:28 2026 GMT
Subject: CN=b670e2aef2968df798df70e878c33bd804e7dbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:79:a2:03:62:75:59:68:9b:4a:ec:ed:3a:10:
87:fe:23:3d:9b:6d:8b:ac:6d:0d:aa:f0:af:84:90:
88:5e:d2:de:79:85:15:60:d2:f6:cc:5a:6e:1a:26:
ae:2a:16:38:92:de:f7:d0:b7:c9:ca:62:eb:a7:09:
79:a6:e5:89:cb:86:39:df:e1:df:93:07:dd:1b:99:
2d:96:d9:f0:2c:f5:2d:00:73:75:18:38:ef:55:da:
15:5b:b9:2d:e3:1d:3a:3c:f8:c3:c5:b4:2b:23:1e:
9b:4c:6c:8d:f1:06:37:92:9e:94:0b:50:6f:8e:a1:
cb:69:f6:95:74:e6:f6:b0:47:ca:ec:c2:21:f0:65:
c8:57:c5:dd:2e:9a:3b:c5:d0:74:64:d6:ea:61:3b:
05:b5:5c:25:5c:a8:ce:95:e7:26:ec:12:b4:66:03:
50:73:d4:76:73:b9:10:a0:7c:0f:77:d5:fc:fb:2e:
1a:ba:1f:4a:b8:6a:ec:9b:1a:05:da:3c:3b:5e:8e:
39:e3:34:45:69:ca:c1:32:d3:d3:f0:2a:94:9b:b1:
1d:4f:d5:d2:c0:2a:8e:33:a1:71:d6:a7:5a:5c:8c:
f9:d0:a9:af:e5:10:72:82:f2:51:b2:e6:6a:f8:b7:
e2:78:21:d7:a4:d7:07:9a:30:10:7d:59:6f:e7:c2:
e6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:70:E2:AE:F2:96:8D:F7:98:DF:70:E8:78:C3:3B:D8:04:E7:DB:CF
X509v3 Authority Key Identifier:
keyid:0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:57:cd:9e:42:6d:9b:15:c9:5d:b2:70:de:61:f2:29:73:0e:
22:21:41:d4:44:ec:82:d5:24:56:0f:82:83:b9:5a:77:39:76:
93:b6:c3:99:4e:f4:cb:c1:d7:e9:83:a4:59:2a:2c:32:17:c8:
57:20:69:ea:af:01:ce:ca:aa:7e:44:b6:0c:6b:d4:ae:8a:b5:
02:fd:a2:da:66:21:93:b2:ac:ec:6e:7b:10:84:e1:a6:83:2b:
5f:43:b5:23:a8:a7:85:03:fb:97:1a:44:3a:d7:1a:ee:1f:5b:
a0:93:24:2a:8c:13:49:5d:ae:64:c0:55:e5:5a:77:04:2e:40:
95:94:94:d6:cf:fb:2b:4b:b3:82:78:d8:51:b4:3b:d4:be:ed:
f1:83:11:e5:cd:0c:f7:1b:9c:79:c7:b0:f7:90:e6:bb:b1:cc:
10:83:a3:bc:02:57:38:02:5c:5c:43:46:a3:bb:41:9f:44:7d:
e3:67:9a:78:39:31:99:fd:e7:5e:fa:d5:37:d0:dd:b8:07:4e:
e4:9c:8a:83:01:7c:56:db:ea:c3:22:bf:78:53:32:b5:a2:a8:
e9:96:0b:30:90:6e:08:b9:12:bb:a7:0a:3b:12:94:f2:0d:08:
fc:9e:9f:29:5e:c5:d9:8d:a7:21:a4:f2:da:5b:96:c1:42:53:
f9:03:bf:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE83DnwPFB4UJbKgPmoh5uBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMmQ3MWMwZDE0NWVmMjc4MDQ3MTA5MjdiOTQzYzY3ZTUw
YWU3YWIwHhcNMjYxMDE1MDAwMDI4WhcNMjYxMDE2MDAwMDI4WjAzMTEwLwYDVQQD
EyhiNjcwZTJhZWYyOTY4ZGY3OThkZjcwZTg3OGMzM2JkODA0ZTdkYmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHmiA2J1WWibSuztOhCH/iM9m22L
rG0NqvCvhJCIXtLeeYUVYNL2zFpuGiauKhY4kt730LfJymLrpwl5puWJy4Y53+Hf
kwfdG5ktltnwLPUtAHN1GDjvVdoVW7kt4x06PPjDxbQrIx6bTGyN8QY3kp6UC1Bv
jqHLafaVdOb2sEfK7MIh8GXIV8XdLpo7xdB0ZNbqYTsFtVwlXKjOlecm7BK0ZgNQ
c9R2c7kQoHwPd9X8+y4auh9KuGrsmxoF2jw7Xo454zRFacrBMtPT8CqUm7EdT9XS
wCqOM6Fx1qdaXIz50Kmv5RBygvJRsuZq+LfieCHXpNcHmjAQfVlv58LmtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZw4q7ylo33mN9w6HjDO9gE59vPMB8GA1UdIwQY
MBaAFAotccDRRe8ngEcQknuUPGflCuerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2kxeHdORkY3eWVBUnhDU2U1UThaLVVLNTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjkxMGYtZGNjMS00MWRiLTk2Y2Qt
MDkyZTg5ZDU5ZmE4LzEvQ2kxeHdORkY3eWVBUnhDU2U1UThaLVVLNTZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yYjkxMGYtZGNjMS00MWRiLTk2Y2QtMDkyZTg5ZDU5ZmE4
LzEvQ2kxeHdORkY3eWVBUnhDU2U1UThaLVVLNTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlfNnkJt
mxXJXbJw3mHyKXMOIiFB1ETsgtUkVg+Cg7ladzl2k7bDmU70y8HX6YOkWSosMhfI
VyBp6q8BzsqqfkS2DGvUroq1Av2i2mYhk7Ks7G57EIThpoMrX0O1I6inhQP7lxpE
Otca7h9boJMkKowTSV2uZMBV5Vp3BC5AlZSU1s/7K0uzgnjYUbQ71L7t8YMR5c0M
9xucecew95Dmu7HMEIOjvAJXOAJcXENGo7tBn0R942eaeDkxmf3nXvrVN9DduAdO
5JyKgwF8VtvqwyK/eFMytaKo6ZYLMJBuCLkSu6cKOxKU8g0I/J6fKV7F2Y2nIaTy
2luWwUJT+QO/GQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:36 2026 by rpki-client