Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
File: CiebQDjgAue9ZOUHbRo56-lvI8Q.mft (raw, json)
Hash identifier: zAS9C+6M5bOMAU/SEdo0dAQnq6Kyiqtq8kjqDFp3Xbo=
Subject key identifier: E2:B7:B6:97:51:D3:B2:31:CB:F9:DD:EE:8E:53:F4:0D:C2:C4:58:A5
Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
Certificate issuer: /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Certificate serial: 019E2F5F968389FD404FA06C3C8F8473B27A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
Manifest number: 09BE
Signing time: Sat 16 May 2026 06:00:53 +0000
Manifest this update: Sat 16 May 2026 06:00:53 +0000
Manifest next update: Sun 17 May 2026 06:00:53 +0000
Files and hashes: 1: CiebQDjgAue9ZOUHbRo56-lvI8Q.crl (hash: Q7T2iA7mwCX409HjdXCvUHGBLfb/su3+M9wFZjW5sfU=)
2: INTBCoLNdz7dS74vmemjPaj4YZM.roa (hash: T73/8m3M1Tbn+oTqJQV/X3k5SIAZKJ+xpZ9QZlSwB80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:96:83:89:fd:40:4f:a0:6c:3c:8f:84:73:b2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Validity
Not Before: May 16 06:00:53 2026 GMT
Not After : May 17 06:00:53 2026 GMT
Subject: CN=e2b7b69751d3b231cbf9ddee8e53f40dc2c458a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:d3:d6:43:f0:c6:2d:40:92:59:d3:b9:40:
13:ae:a5:b7:55:fb:2a:36:1d:83:b5:4c:c4:ca:bb:
72:32:60:43:d9:4a:c8:96:37:35:05:0b:13:5d:b9:
94:1a:bb:b7:ee:bc:e5:e5:a3:b8:5e:80:13:a9:6e:
34:2e:91:1e:13:3f:85:61:17:65:be:38:f9:b4:df:
57:87:ee:fc:e4:e6:10:01:a6:15:92:6d:65:65:9e:
e9:ee:34:d9:78:c5:62:5a:18:3d:4a:98:9d:8b:5b:
8e:a7:ee:d3:1e:d8:1c:00:d3:44:3f:1e:dd:1b:72:
75:a1:d4:c5:be:d8:dd:e3:b2:5c:1c:16:b6:c6:2c:
c1:36:b6:66:75:9c:7e:62:2d:7b:a6:bf:33:4d:1a:
1d:5e:46:81:e2:ac:a3:62:c0:7b:0f:1a:d0:d9:72:
46:7a:f5:71:6a:7f:a9:05:8c:39:32:ad:47:13:44:
2d:4c:97:14:b8:c3:30:3c:b9:10:31:d6:5a:91:58:
f4:00:38:b6:36:80:d5:3d:bb:cf:ab:fc:62:f9:13:
09:60:ca:4f:1a:d3:6c:91:7d:ff:54:3c:01:6f:09:
6b:07:38:08:d8:6b:4d:ea:65:ee:36:ab:c5:6e:86:
6f:f3:24:85:de:8b:58:a3:85:90:ec:06:fa:14:5b:
91:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B7:B6:97:51:D3:B2:31:CB:F9:DD:EE:8E:53:F4:0D:C2:C4:58:A5
X509v3 Authority Key Identifier:
keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:87:d5:cc:30:dd:29:26:eb:e5:2e:11:16:68:f6:6b:cd:cb:
54:2d:69:59:56:f5:76:5d:e1:49:20:04:f0:70:71:ef:a0:b8:
3d:f5:ca:5c:15:f7:89:ba:1d:a4:f4:0f:f4:5e:ee:16:31:61:
f3:3b:96:14:08:28:5b:6f:db:f4:d8:d5:17:af:fd:cc:f2:56:
fc:56:35:66:6b:8b:da:54:9c:ef:a8:62:72:db:40:a3:b0:48:
b7:e7:e8:ac:64:ae:a6:ae:2b:53:57:c9:7f:6d:d4:ba:2a:4e:
49:80:24:73:2e:b7:c2:58:fd:4c:20:ca:8d:be:4e:96:95:32:
0d:63:0d:71:41:ac:d1:9d:ca:2d:bc:2f:6a:d8:1a:d2:bf:66:
52:95:cc:6f:9a:b4:d8:72:08:46:73:1d:c4:f0:43:87:36:ae:
6f:ff:67:ff:7e:94:00:bd:83:e5:2e:86:5d:6c:a1:d8:49:c6:
bf:d4:86:af:9a:bc:8a:9b:dd:d8:17:ba:86:74:15:6c:1a:1c:
f1:ea:9f:30:ed:e7:bd:80:e3:5c:17:11:dc:24:5e:00:8f:4d:
c8:e5:08:d9:b3:4d:e8:52:ef:e2:45:a6:f0:12:15:d1:c5:0d:
48:b0:a5:dc:e9:28:f6:d5:1e:4f:af:b0:06:42:60:1a:5f:b8:
7a:c1:e2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:27:11 2026 by rpki-client