Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
File: ci8LM2ULfWSYufWKrFopfpJhSCI.mft (raw, json)
Hash identifier: jk1DsSxcTJirp392yXHwS+i76pFv+fUnPVuT1MhghPI=
Subject key identifier: E1:0C:69:29:59:BC:75:D7:5B:FB:80:4C:68:85:D3:4E:FA:6E:7B:40
Authority key identifier: 72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
Certificate issuer: /CN=722f0b33650b7d6498b9f58aac5a297e92614822
Certificate serial: 019D375336CB5F57D7FC5434772FE9D25756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
Manifest number: 0C22
Signing time: Sun 29 Mar 2026 02:01:33 +0000
Manifest this update: Sun 29 Mar 2026 02:01:33 +0000
Manifest next update: Mon 30 Mar 2026 02:01:33 +0000
Files and hashes: 1: KdbDrACu7SHeiWA-TJ0Gd5nmSmM.roa (hash: kgfS9/IVC7NXMOo6Zbhxeb9stsHC0de13w/KTw9Txuc=)
2: ci8LM2ULfWSYufWKrFopfpJhSCI.crl (hash: roTz+fctCtcbGTWmYdis8s36atF0QEd1ukRksDa7bho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:36:cb:5f:57:d7:fc:54:34:77:2f:e9:d2:57:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722f0b33650b7d6498b9f58aac5a297e92614822
Validity
Not Before: Mar 29 02:01:33 2026 GMT
Not After : Mar 30 02:01:33 2026 GMT
Subject: CN=e10c692959bc75d75bfb804c6885d34efa6e7b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:99:c0:4b:ee:59:c9:d4:3f:5f:7b:ac:a3:
2b:d0:b5:c2:a5:fd:ed:b5:ad:c0:8a:11:b5:28:c6:
1b:95:f7:68:ce:29:21:d4:b9:c4:b1:f5:97:82:8d:
d8:38:91:26:ac:21:35:84:22:d2:70:9f:4d:a2:38:
e8:75:28:99:e9:45:a2:e0:dd:ce:9e:6a:ec:fb:db:
ad:42:1f:91:a4:75:e5:41:7f:e9:6f:8c:3a:5e:02:
16:26:59:d1:10:f6:f2:ea:a9:74:f0:49:45:0b:9c:
65:94:f0:b2:12:87:ee:09:26:a4:a7:94:86:c0:af:
1c:be:33:8d:82:5b:d2:65:93:75:cb:b4:2f:bb:10:
4c:49:20:a3:9d:71:46:28:9e:00:87:59:80:dd:ac:
78:1f:d1:de:44:b5:ee:e6:e8:b2:90:fd:3e:cc:2d:
a7:c4:58:49:2f:a8:5a:17:76:ee:94:41:75:d3:2a:
f0:6c:01:c4:5c:19:92:70:52:18:1c:07:66:b0:93:
82:e3:86:b7:b8:82:8e:bf:34:78:bb:4e:35:70:0c:
94:a6:99:4c:6c:3e:b7:ce:49:af:2d:04:ad:47:4f:
6f:86:44:b1:48:b8:aa:57:cb:ba:5d:2d:7d:a5:f5:
5e:20:ad:1a:80:de:e3:55:5c:a3:e6:27:69:41:41:
ad:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0C:69:29:59:BC:75:D7:5B:FB:80:4C:68:85:D3:4E:FA:6E:7B:40
X509v3 Authority Key Identifier:
keyid:72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:35:47:b8:a0:82:fd:b7:8b:2b:87:45:44:86:e5:31:60:08:
bd:05:65:7a:dd:4e:bf:ff:f1:d0:16:fb:1c:df:5a:c2:47:6d:
e7:32:5d:3f:ac:a7:2e:e6:96:ae:66:0f:aa:85:3a:6b:c5:28:
fb:af:4a:9c:34:1e:a4:68:39:5c:bd:fb:6c:ea:0b:ef:60:68:
85:5f:49:4d:bc:42:d4:f9:8a:59:12:21:1f:55:60:79:cb:d3:
7d:59:6d:76:61:9c:91:0a:da:a9:a1:a5:d1:d8:71:c0:03:c6:
69:92:9a:83:53:57:be:8c:00:78:88:69:cb:16:7c:4c:84:f0:
7f:48:1e:54:fd:3a:6f:8d:eb:d2:4f:af:79:cc:20:42:bf:bd:
fa:b5:77:cd:a8:d3:85:52:1f:bd:8a:74:7c:48:8a:7b:84:f5:
7e:7e:48:f6:aa:c2:57:48:ed:70:79:e5:f8:07:29:fa:a5:37:
3f:58:d1:30:0d:d1:36:c4:59:d2:91:5d:2f:c5:25:04:dc:13:
24:0b:be:3e:32:d9:85:00:a6:6e:c6:88:ad:6e:80:f7:cf:cf:
09:80:61:54:93:75:fb:4e:14:c8:80:d4:d7:2f:b6:7e:70:74:
62:73:72:57:22:7e:ce:c7:e3:b0:8f:a9:75:1e:36:e5:19:7a:
41:61:80:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:51 2026 by rpki-client