Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
File: CiebQDjgAue9ZOUHbRo56-lvI8Q.mft (raw, json)
Hash identifier: zCNIbhnnwkvbZHcoJ4ddxVuzyvADzKXPcpDQyncyWb8=
Subject key identifier: F1:96:63:39:8A:27:10:DC:72:13:69:D4:B4:90:59:92:F4:C2:DB:0A
Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
Certificate issuer: /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Certificate serial: 01A000CA9A86B334190E5ABBF9CF088260BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
Manifest number: 0AAF
Signing time: Fri 14 Aug 2026 15:01:12 +0000
Manifest this update: Fri 14 Aug 2026 15:01:12 +0000
Manifest next update: Sat 15 Aug 2026 15:01:12 +0000
Files and hashes: 1: CiebQDjgAue9ZOUHbRo56-lvI8Q.crl (hash: 42k3jJSxRG9zmgGDJ0+CAoqTQPr+1k4ZqK2gHgnzJe4=)
2: INTBCoLNdz7dS74vmemjPaj4YZM.roa (hash: T73/8m3M1Tbn+oTqJQV/X3k5SIAZKJ+xpZ9QZlSwB80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:9a:86:b3:34:19:0e:5a:bb:f9:cf:08:82:60:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Validity
Not Before: Aug 14 15:01:12 2026 GMT
Not After : Aug 15 15:01:12 2026 GMT
Subject: CN=f19663398a2710dc721369d4b4905992f4c2db0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e5:b2:50:74:c8:5b:50:a2:b6:25:61:ff:9e:
d0:47:f8:d0:54:f8:80:33:61:7e:a6:50:98:b8:e4:
1d:df:5c:36:d5:99:eb:f5:8b:5b:e3:df:39:51:45:
b5:bb:38:26:c3:19:b5:4f:41:76:18:aa:ae:94:8c:
79:ff:b1:a7:ac:34:d3:b1:3c:49:1b:20:c1:f7:95:
8b:32:bc:3b:68:02:f1:1e:96:27:cb:0d:94:55:b9:
c6:ca:39:0e:5c:cf:44:02:31:5f:c8:0b:7b:21:31:
27:bb:72:7f:1a:4a:bd:87:54:f7:de:b4:39:94:e9:
15:ce:ba:df:ec:1b:a6:7c:b2:ea:38:8d:32:a4:59:
25:8a:c3:36:65:d3:50:78:b9:ca:db:f4:4e:53:da:
90:7f:27:57:bb:b8:e4:b0:07:15:d2:47:e6:69:4f:
14:dc:44:92:e3:6a:97:13:e2:95:2c:b6:51:47:41:
f0:28:eb:e8:59:63:07:17:5e:43:1e:81:14:d1:8b:
1c:32:b8:ed:a8:68:37:50:f6:ab:21:ad:4d:d4:15:
92:1b:c7:50:a2:69:47:eb:37:5c:13:2e:bd:c0:fb:
e1:26:14:92:6e:1b:30:8b:a0:b7:11:44:8d:58:6a:
ef:e9:1e:ca:f1:40:91:96:ec:dd:24:5e:7a:cd:04:
50:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:96:63:39:8A:27:10:DC:72:13:69:D4:B4:90:59:92:F4:C2:DB:0A
X509v3 Authority Key Identifier:
keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3c:96:97:c6:97:a3:57:4a:bc:e4:24:ab:8f:22:18:ae:48:
86:2f:1e:6d:86:e6:25:7a:d6:5f:6f:79:d3:7e:68:03:a2:20:
e2:32:01:8c:69:b4:96:f1:48:9f:66:33:69:cd:c9:13:3c:2f:
e1:43:4c:ee:a3:85:2f:47:dd:71:63:a8:5c:04:47:b1:e5:cc:
cd:58:04:88:0f:f8:cf:f5:a7:70:f2:3b:b9:78:b6:b1:13:f1:
9a:b4:af:b2:4b:6d:3b:f3:74:8b:11:ec:f3:15:47:86:90:26:
71:36:4f:8d:fa:66:0f:50:82:4e:da:d3:3e:5a:df:df:3a:97:
81:e0:3b:9b:38:23:7c:0c:2b:18:ff:b5:d6:50:3a:1f:b3:56:
0a:1b:d9:c8:e6:63:0a:5e:47:2b:34:81:a7:c5:4e:7c:c4:03:
4e:a7:4c:9c:da:03:14:a0:a9:e9:bf:11:00:48:9f:a1:d1:0b:
94:b8:74:3e:53:1e:ce:6c:59:3b:15:88:2a:b4:eb:7a:be:23:
67:65:16:e4:9d:bd:56:0a:4c:d3:44:c1:97:47:6b:9f:78:32:
0d:a4:e1:d8:af:20:87:ef:f2:a1:e4:03:b2:3a:2f:15:6d:c7:
8f:d8:77:41:28:95:a6:cc:47:a1:b1:d1:3a:01:ab:ad:af:e8:
74:cd:01:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:32:09 2026 by rpki-client