Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.mft
File: cIx-If6q6sViZpSXVEPndzXz_Kc.mft (raw, json)
Hash identifier: Jo/Po6OnidGzgRJ8tHdGmVhJak0RFwm9gmMwaWQIZ3A=
Subject key identifier: 51:53:79:E7:08:15:39:13:DB:49:62:98:98:DD:0E:70:4E:F3:0F:31
Authority key identifier: 70:8C:7E:21:FE:AA:EA:C5:62:66:94:97:54:43:E7:77:35:F3:FC:A7
Certificate issuer: /CN=708c7e21feaaeac5626694975443e77735f3fca7
Certificate serial: 019D38661E9C9DD65514AC8CCF7ACD47C8C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIx-If6q6sViZpSXVEPndzXz_Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.mft
Manifest number: 018B
Signing time: Sun 29 Mar 2026 07:01:49 +0000
Manifest this update: Sun 29 Mar 2026 07:01:49 +0000
Manifest next update: Mon 30 Mar 2026 07:01:49 +0000
Files and hashes: 1: cIx-If6q6sViZpSXVEPndzXz_Kc.crl (hash: BBqQaAjViTbp+t7EUToGPa1Cy9g0ELdVaHRvGqhmdbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIx-If6q6sViZpSXVEPndzXz_Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:1e:9c:9d:d6:55:14:ac:8c:cf:7a:cd:47:c8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708c7e21feaaeac5626694975443e77735f3fca7
Validity
Not Before: Mar 29 07:01:49 2026 GMT
Not After : Mar 30 07:01:49 2026 GMT
Subject: CN=515379e708153913db49629898dd0e704ef30f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0a:d3:82:0d:09:c6:2c:b0:2e:bc:8a:59:a5:
a0:61:3c:23:54:b7:54:35:c0:2a:a0:84:f5:03:ab:
c5:a6:a0:3d:03:16:51:8e:3d:d7:4a:88:7b:97:8b:
cc:09:fe:9f:b0:83:f7:af:f1:fc:25:28:9f:3f:bc:
17:42:b8:17:f2:6f:a0:36:1e:21:ec:87:43:4b:7d:
4c:50:b0:05:65:9f:e8:4c:6e:38:c5:e9:f8:d8:46:
68:e9:22:5f:7a:8e:94:ea:bb:3a:ba:6e:c0:f8:dc:
c5:99:46:89:86:4b:25:50:11:58:e0:7d:ac:ab:dc:
c1:0d:75:37:5c:9f:47:2f:78:b6:58:8d:3d:d5:9e:
ec:e6:b0:6c:de:f2:a5:a0:06:c4:c7:08:5d:77:53:
d4:2b:63:53:f9:99:91:81:e8:e1:d6:58:73:d1:05:
b1:4f:3b:9c:c3:73:18:44:bb:90:b8:b6:8d:f1:a1:
e8:38:b8:5e:bb:76:58:c7:69:52:96:d3:7b:db:76:
04:54:cd:bd:3b:71:b8:5e:01:a7:dd:38:e2:b7:d0:
64:c7:c9:b6:13:6e:3d:bd:49:1d:be:39:d6:fc:4a:
6c:8c:11:54:b4:4f:54:c9:12:ee:c5:58:4b:a4:5c:
a8:a6:fd:e1:3c:c5:f7:e2:88:45:14:c9:18:05:bf:
cf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:53:79:E7:08:15:39:13:DB:49:62:98:98:DD:0E:70:4E:F3:0F:31
X509v3 Authority Key Identifier:
keyid:70:8C:7E:21:FE:AA:EA:C5:62:66:94:97:54:43:E7:77:35:F3:FC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIx-If6q6sViZpSXVEPndzXz_Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e2:db:8e:a7:68:cf:ed:aa:9c:69:84:3c:93:28:e6:50:f2:
83:25:97:4e:d4:f2:58:0e:31:07:94:f3:01:e0:6f:e6:5a:73:
bf:6b:84:d3:fb:bd:26:b2:2f:d6:96:f2:7d:87:9c:2d:36:6e:
ce:d5:66:3e:13:e9:86:8b:35:af:f0:a8:39:6a:3d:9a:7c:a5:
51:fd:57:91:a1:57:8d:d2:29:75:3b:23:6e:64:49:d7:cc:72:
21:0d:fa:6f:0f:4b:0f:c9:65:7e:9a:22:66:c6:ca:c4:0a:fc:
19:12:cb:7a:34:d1:72:33:3a:9d:5a:b3:b7:9d:b5:f1:8a:58:
01:8e:87:f7:db:97:e3:2e:32:88:3b:ac:a8:74:2e:c3:b1:16:
d3:b9:fb:5d:4a:8e:9b:9b:02:8f:58:ed:1b:fc:aa:b0:d4:01:
01:0f:89:21:30:ad:9d:c8:23:28:a7:de:97:90:44:05:96:52:
8f:e0:ce:6a:98:7e:e3:ae:2f:97:21:2c:6c:d5:1c:87:ea:79:
7a:a4:12:45:93:e5:6a:aa:18:29:29:4d:2f:b7:00:b3:4b:7f:
53:d6:dc:a8:d9:43:b5:79:df:32:e0:19:0d:c0:66:49:c6:a3:
fc:30:fe:0b:b5:82:cc:c2:21:1c:d7:a1:f3:71:17:5f:74:78:
c8:52:1f:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zh6cndZVFKyMz3rNR8jFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwOGM3ZTIxZmVhYWVhYzU2MjY2OTQ5NzU0NDNlNzc3MzVm
M2ZjYTcwHhcNMjYwMzI5MDcwMTQ5WhcNMjYwMzMwMDcwMTQ5WjAzMTEwLwYDVQQD
Eyg1MTUzNzllNzA4MTUzOTEzZGI0OTYyOTg5OGRkMGU3MDRlZjMwZjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgrTgg0JxiywLryKWaWgYTwjVLdU
NcAqoIT1A6vFpqA9AxZRjj3XSoh7l4vMCf6fsIP3r/H8JSifP7wXQrgX8m+gNh4h
7IdDS31MULAFZZ/oTG44xen42EZo6SJfeo6U6rs6um7A+NzFmUaJhkslUBFY4H2s
q9zBDXU3XJ9HL3i2WI091Z7s5rBs3vKloAbExwhdd1PUK2NT+ZmRgejh1lhz0QWx
Tzucw3MYRLuQuLaN8aHoOLheu3ZYx2lSltN723YEVM29O3G4XgGn3Tjit9Bkx8m2
E249vUkdvjnW/EpsjBFUtE9UyRLuxVhLpFyopv3hPMX34ohFFMkYBb/PTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFTeecIFTkT20limJjdDnBO8w8xMB8GA1UdIwQY
MBaAFHCMfiH+qurFYmaUl1RD53c18/ynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0l4LUlmNnE2c1ZpWnBTWFZFUG5kelh6X0tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82ZjU5MGEtYzFmZC00MDE5LWJiZTgt
ODdhYWUzNTc1YTJhLzEvY0l4LUlmNnE2c1ZpWnBTWFZFUG5kelh6X0tjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS82ZjU5MGEtYzFmZC00MDE5LWJiZTgtODdhYWUzNTc1YTJh
LzEvY0l4LUlmNnE2c1ZpWnBTWFZFUG5kelh6X0tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOLbjqdo
z+2qnGmEPJMo5lDygyWXTtTyWA4xB5TzAeBv5lpzv2uE0/u9JrIv1pbyfYecLTZu
ztVmPhPphos1r/CoOWo9mnylUf1XkaFXjdIpdTsjbmRJ18xyIQ36bw9LD8llfpoi
ZsbKxAr8GRLLejTRcjM6nVqzt5218YpYAY6H99uX4y4yiDusqHQuw7EW07n7XUqO
m5sCj1jtG/yqsNQBAQ+JITCtncgjKKfel5BEBZZSj+DOaph+464vlyEsbNUch+p5
eqQSRZPlaqoYKSlNL7cAs0t/U9bcqNlDtXnfMuAZDcBmScaj/DD+C7WCzMIhHNeh
83EXX3R4yFIftA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:33 2026 by rpki-client