
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
File: CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft (raw, json)
Hash identifier: qkBd+4R+7lKnFEfVch+Sywfdjq+p1KTbYjmiQlpNpxw=
Subject key identifier: F8:F9:C5:61:5F:16:BB:E3:24:27:A4:3B:79:29:21:95:90:27:39:93
Authority key identifier: 08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
Certificate issuer: /CN=08818cbb0f9d1e573773d791138a0122f28bec56
Certificate serial: 01A13D4A1FCD767F25714918EEDE49D0FBFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
Manifest number: 1A42
Signing time: Thu 15 Oct 2026 02:00:30 +0000
Manifest this update: Thu 15 Oct 2026 02:00:30 +0000
Manifest next update: Fri 16 Oct 2026 02:00:30 +0000
Files and hashes: 1: CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl (hash: 5uK4DhCkwnG0y5xVF3MMgbqAgpwG6qZaJEZ5/yO0WGs=)
2: _89DnbijBQeF2cskoVpDTtK_5Rg.roa (hash: euBzCkVm4A9E+7P7b5QQPhEnEA1gc5PwXhqwL4l+p88=)
3: cuCsDpWQfSwNKoTxDF01haLSsl4.roa (hash: IAbjDvtvpTV67MkNRYgVgrsjV6vVbtlcGTDqIknDuaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:1f:cd:76:7f:25:71:49:18:ee:de:49:d0:fb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08818cbb0f9d1e573773d791138a0122f28bec56
Validity
Not Before: Oct 15 02:00:30 2026 GMT
Not After : Oct 16 02:00:30 2026 GMT
Subject: CN=f8f9c5615f16bbe32427a43b7929219590273993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:76:00:96:43:07:5f:e6:8d:ce:b7:a7:63:d5:
8b:61:ee:1c:3d:7c:de:6d:47:cc:d8:7b:2c:c5:cf:
4d:9e:93:d1:db:ac:22:11:ae:a8:dd:40:40:78:07:
e8:b0:eb:df:ab:72:9a:9b:06:02:12:f8:bc:25:89:
55:e8:b8:0a:35:3b:ae:81:ba:02:b4:fd:b2:18:e8:
21:a8:fc:27:cd:67:0d:da:e6:ad:61:0c:21:41:6d:
a4:97:c7:c2:2e:02:b4:a7:38:7b:21:df:18:4e:89:
17:a5:e6:c9:db:0c:58:87:66:0a:f4:5d:4e:bd:f2:
f9:d0:6a:a2:b7:26:89:dc:11:c0:91:9f:7d:95:db:
23:70:7c:7b:ac:c8:ab:f2:22:0d:a8:5b:72:c3:40:
7c:89:17:9f:d6:5b:bc:a2:3b:36:dd:54:20:20:4c:
31:32:c5:8d:8e:57:2e:0a:f8:cc:0b:ef:63:83:c2:
d9:f4:1e:fe:13:5f:33:3a:71:f0:f8:c5:ca:fb:8a:
2e:b4:10:1c:c9:a4:13:65:26:90:6f:ea:ea:48:a5:
f5:6d:e8:37:a6:f4:20:65:41:30:3e:99:7c:33:a2:
66:e7:7e:ab:19:f5:54:0b:56:b6:e9:d0:24:63:ff:
75:4a:77:cf:0f:a9:c6:5d:ac:84:51:57:cc:fc:97:
7e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F9:C5:61:5F:16:BB:E3:24:27:A4:3B:79:29:21:95:90:27:39:93
X509v3 Authority Key Identifier:
keyid:08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:4d:e5:d7:e0:ff:92:45:3d:c5:95:83:ed:1b:74:b9:5d:dd:
f8:ff:be:b5:ea:0a:91:95:31:94:62:f5:f4:10:9b:de:cb:a1:
5d:78:c0:c4:e2:5e:3c:de:9f:f7:1e:7c:b9:ab:e1:e9:2d:3b:
02:22:f0:67:fa:ee:ac:8a:55:d9:7d:16:77:f0:e0:78:35:fe:
d1:17:c0:64:48:b9:87:91:c8:bd:0f:57:9e:26:6b:7e:86:68:
25:9e:6a:ed:1b:51:74:cc:08:81:16:48:b5:7e:65:4d:45:48:
25:4e:25:b1:c2:58:9e:e4:2d:8a:53:56:32:84:2f:dd:a7:1a:
97:91:05:81:16:0e:f1:c9:50:fe:46:55:83:de:fc:a3:81:1d:
c1:c3:74:09:ee:e5:13:28:46:b7:71:1f:d4:be:87:46:75:1a:
62:29:a1:84:0b:73:35:f1:1b:0a:2e:40:d2:82:de:3a:74:68:
69:0f:40:11:f5:51:fb:8c:c7:23:fd:2f:c4:3f:7e:53:d5:d9:
3b:e9:e0:ee:d5:15:7b:d4:20:8b:81:9a:18:fb:49:bb:17:21:
a4:bf:91:4d:8e:3a:d2:72:1d:4b:34:42:1f:43:55:ce:17:81:
9a:26:1f:1a:b9:3f:0b:3b:93:76:da:16:f1:6f:c4:48:85:4d:
d4:7b:4d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:23 2026 by rpki-client