Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
File: CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft (raw, json)
Hash identifier: efYEJ/Ql2j78J6FQcPaeRmCKY39WzJ/8hWPL9sPBfF8=
Subject key identifier: 3E:2F:F1:CE:27:05:5D:D2:61:AC:52:CD:78:DC:79:65:3C:82:F0:3F
Authority key identifier: 08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
Certificate issuer: /CN=08818cbb0f9d1e573773d791138a0122f28bec56
Certificate serial: 019D37F7313773CEF3495305AF7D7E7E6AC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
Manifest number: 182D
Signing time: Sun 29 Mar 2026 05:00:40 +0000
Manifest this update: Sun 29 Mar 2026 05:00:40 +0000
Manifest next update: Mon 30 Mar 2026 05:00:40 +0000
Files and hashes: 1: CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl (hash: 7prZ0MdAEx+UbvQSNySrIiSJGqUz0WjGysYmXZu7ii4=)
2: _89DnbijBQeF2cskoVpDTtK_5Rg.roa (hash: euBzCkVm4A9E+7P7b5QQPhEnEA1gc5PwXhqwL4l+p88=)
3: cuCsDpWQfSwNKoTxDF01haLSsl4.roa (hash: IAbjDvtvpTV67MkNRYgVgrsjV6vVbtlcGTDqIknDuaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:31:37:73:ce:f3:49:53:05:af:7d:7e:7e:6a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08818cbb0f9d1e573773d791138a0122f28bec56
Validity
Not Before: Mar 29 05:00:40 2026 GMT
Not After : Mar 30 05:00:40 2026 GMT
Subject: CN=3e2ff1ce27055dd261ac52cd78dc79653c82f03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:de:58:7b:df:be:d5:58:31:fa:c9:2e:ba:ac:
bd:d7:02:97:a1:55:83:fe:72:71:43:e1:5a:10:ee:
43:ef:1b:ee:e1:c1:21:c5:fd:77:a4:a5:40:43:f8:
20:fe:e9:cc:ff:15:64:d4:de:49:02:a0:26:2a:9b:
9e:0b:b9:c7:82:b1:f9:cc:d1:c1:37:22:7a:2e:73:
2a:ad:45:75:b7:90:a9:65:e2:ec:ee:0d:4e:a7:04:
db:cb:01:11:95:bf:ac:9c:c2:42:77:73:4e:d4:3d:
74:de:da:7c:7e:b7:19:3d:22:98:64:21:fa:c7:80:
70:ad:16:ae:f6:f9:fe:d0:fa:bb:f0:75:e5:c8:3c:
5e:9c:71:07:bf:cb:44:24:b4:2e:2c:bc:4a:3f:54:
f8:42:9c:de:54:22:9c:bc:c0:59:58:11:09:7f:0a:
87:41:e7:fe:19:ec:ad:d9:ee:6b:aa:ad:3a:62:d2:
d5:d9:83:ab:2a:0a:73:52:dd:0e:6c:e9:e6:79:5c:
e8:33:d5:d7:b6:44:f6:e9:8d:9f:84:c2:30:20:3a:
92:c9:d6:57:0f:40:4b:8f:55:22:88:a8:59:6f:1a:
8f:90:94:ed:6c:ad:55:90:6e:bb:ac:3c:c6:56:71:
f2:ff:67:4f:46:0f:ef:7a:93:c4:fb:05:da:ca:43:
1e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2F:F1:CE:27:05:5D:D2:61:AC:52:CD:78:DC:79:65:3C:82:F0:3F
X509v3 Authority Key Identifier:
keyid:08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c6:38:eb:f9:ce:a7:50:bc:d1:8e:ef:60:cc:46:e0:e9:10:
c7:92:ee:72:e9:86:8d:4d:34:f8:42:43:64:41:ac:d7:c0:a5:
20:5a:1c:1f:5d:53:d5:26:ea:c8:72:ef:74:af:25:b1:57:9f:
19:3a:f8:71:fa:a7:86:6d:6b:19:48:e1:d8:27:93:4c:4e:24:
b9:b1:d4:41:0c:bc:27:aa:7e:b1:f8:af:96:e0:af:58:c2:3e:
f6:44:0a:33:a4:96:4f:46:af:63:9b:fc:73:4d:10:81:2f:93:
34:7c:46:48:c8:6b:bb:90:97:7e:d0:79:25:48:03:29:c0:fe:
74:9c:86:4a:52:d1:b1:33:b7:bf:ee:0b:97:cf:98:e1:c3:87:
f0:52:17:04:f0:eb:52:22:3d:be:1c:8d:92:00:92:91:fa:ee:
e9:2b:12:43:7e:31:4a:16:31:ad:3a:7a:17:b6:3b:16:38:f0:
cd:77:4f:14:46:63:94:d8:a5:e5:e6:29:0d:ae:02:c0:ca:eb:
78:1d:68:7e:24:e3:13:dd:61:9f:1a:51:91:c2:c6:70:bd:8c:
04:0a:4c:b5:ca:13:9b:a7:e7:f6:a4:a8:5a:b4:d0:b3:f3:f9:
3e:61:88:78:29:d8:a7:d2:4c:53:59:66:e3:22:e8:8a:2c:6c:
5b:3d:e3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:33 2026 by rpki-client