Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.mft
File: ci0p5qil5cpi3rc-r_OrE95VBq0.mft (raw, json)
Hash identifier: 9d5CQnyuBf5Gx8RXJ+mLA+GQmDWXPeThivkaqyfizao=
Subject key identifier: 74:01:35:E4:D9:85:E3:D9:A3:40:FB:14:E6:54:1B:29:C4:54:E4:07
Authority key identifier: 72:2D:29:E6:A8:A5:E5:CA:62:DE:B7:3E:AF:F3:AB:13:DE:55:06:AD
Certificate issuer: /CN=722d29e6a8a5e5ca62deb73eaff3ab13de5506ad
Certificate serial: 019D39AED1F25F504965DE7C417E73F9EADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ci0p5qil5cpi3rc-r_OrE95VBq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.mft
Manifest number: 0396
Signing time: Sun 29 Mar 2026 13:00:51 +0000
Manifest this update: Sun 29 Mar 2026 13:00:51 +0000
Manifest next update: Mon 30 Mar 2026 13:00:51 +0000
Files and hashes: 1: ci0p5qil5cpi3rc-r_OrE95VBq0.crl (hash: /164TufmaJidh5VG9BwCKD3b4F/8VMhxnDHudS+j+QU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ci0p5qil5cpi3rc-r_OrE95VBq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:d1:f2:5f:50:49:65:de:7c:41:7e:73:f9:ea:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722d29e6a8a5e5ca62deb73eaff3ab13de5506ad
Validity
Not Before: Mar 29 13:00:51 2026 GMT
Not After : Mar 30 13:00:51 2026 GMT
Subject: CN=740135e4d985e3d9a340fb14e6541b29c454e407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:68:4d:de:25:8b:34:f3:99:11:27:e8:5c:59:
56:1b:c6:a2:4d:75:2a:e0:93:0c:f7:6e:14:7c:7d:
f7:63:d7:f6:32:2e:40:e4:be:4e:3e:8f:c7:84:98:
62:76:98:4d:b3:c0:09:6d:e1:36:87:91:fd:af:e1:
a2:10:c9:e7:2b:a1:dd:a0:35:cc:8a:ee:37:d8:6b:
6b:9e:4f:57:df:83:63:a3:8c:ee:7c:02:b8:ac:a2:
59:e0:6f:32:4b:72:82:0a:23:df:62:23:d7:9d:33:
a4:57:3b:ff:1f:e5:cd:58:91:32:ca:c8:e3:e8:f5:
05:c4:b7:72:63:dc:7d:58:e9:a2:6b:4b:6b:4e:c0:
c0:2a:00:c0:d3:7e:44:6b:87:29:fe:df:62:cf:cb:
b6:b6:89:50:e4:da:ed:d1:61:a7:2c:e5:cc:5f:0d:
13:43:e8:8b:24:ab:13:be:1e:0c:ba:fc:2e:51:fd:
ef:7d:53:7f:d1:01:48:2f:78:aa:3d:cc:6a:4a:34:
7b:84:4d:0a:90:23:43:d6:04:8e:05:ba:7d:84:90:
9a:8c:26:16:bc:68:fb:99:4e:29:70:a4:a3:e1:46:
45:63:fe:80:ad:90:58:f8:9e:be:c8:0d:58:13:c1:
7a:75:f3:50:28:89:a1:ed:a7:27:1f:ce:04:36:6f:
a8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:01:35:E4:D9:85:E3:D9:A3:40:FB:14:E6:54:1B:29:C4:54:E4:07
X509v3 Authority Key Identifier:
keyid:72:2D:29:E6:A8:A5:E5:CA:62:DE:B7:3E:AF:F3:AB:13:DE:55:06:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ci0p5qil5cpi3rc-r_OrE95VBq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:55:42:29:72:0c:d5:36:58:32:35:62:fe:2c:d7:94:01:6e:
2a:cd:2c:71:56:52:a6:17:66:68:e5:70:0c:82:77:58:4f:d5:
df:cd:e9:7e:1c:1f:ee:59:b4:84:aa:3e:e0:0c:f6:f7:71:b1:
9c:81:79:94:84:f3:87:5b:d3:12:4f:11:05:48:ab:c7:57:3b:
bf:ff:e5:20:03:f6:2d:00:4e:f5:20:4c:41:24:8d:4f:10:f6:
17:5b:8c:aa:6e:23:77:b3:3d:33:e9:80:1d:ba:f2:31:4a:e7:
11:fc:de:20:6d:30:c1:b0:9e:ce:fe:6f:44:be:0e:3d:8a:a5:
f9:79:0e:06:56:25:32:38:fd:3d:44:e7:c5:c5:4b:4f:9a:75:
38:f0:31:73:a7:1e:de:7f:a0:da:68:99:7f:b0:21:29:a4:7e:
1b:3d:32:ab:68:fd:e7:aa:37:b2:ec:26:23:e3:14:9b:e5:cc:
a2:5e:27:f0:80:de:93:35:0f:26:52:f2:c5:71:24:5b:3c:92:
3c:ef:f2:d9:57:79:95:b3:41:85:0e:26:09:22:72:b4:b3:13:
fc:04:e0:66:65:c7:77:3f:f6:d5:a7:7c:fd:ee:2b:3f:61:1f:
f0:f5:ee:17:cc:96:a7:a2:4f:aa:a5:6f:cd:e4:93:74:90:82:
91:5e:c1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:18 2026 by rpki-client