Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
File: CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft (raw, json)
Hash identifier: YIwsQQkGVldI2h54AAxVIcbQkzokfDmRKjDvZY+IW4o=
Subject key identifier: 35:5A:F3:07:C0:E3:12:BB:79:E9:45:04:76:52:2B:00:60:6A:C4:15
Authority key identifier: 0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
Certificate issuer: /CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Certificate serial: 01A13E5D363BFD9E0BA02B0AF298B0EC68A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 07:00:58 +0000
Manifest this update: Thu 15 Oct 2026 07:00:58 +0000
Manifest next update: Fri 16 Oct 2026 07:00:58 +0000
Files and hashes: 1: CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl (hash: /OkYo/Zcnc/U0PhZcYB6OP4u0Rv33W4ZGoBw4S5dUAg=)
2: jr3Qwfg8Z9qypQ7083QLXtA-1bs.roa (hash: BStTXqRwyFgu7NL9U4UDu4snXF66XXGZwBXM2f9Q63k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5d:36:3b:fd:9e:0b:a0:2b:0a:f2:98:b0:ec:68:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Validity
Not Before: Oct 15 07:00:58 2026 GMT
Not After : Oct 16 07:00:58 2026 GMT
Subject: CN=355af307c0e312bb79e9450476522b00606ac415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:77:28:c1:12:3d:ba:36:96:77:39:df:be:f8:
b3:fb:16:02:7e:07:65:9e:0b:4f:b5:86:4e:90:db:
80:25:98:b0:d6:e5:4d:f3:5d:0e:db:38:20:0c:d9:
cd:3e:39:aa:e1:77:18:e6:6d:c2:89:cc:88:0e:73:
c1:b9:d3:70:b6:f7:ba:50:fa:27:23:66:cd:31:3f:
9b:e8:82:12:09:62:e2:60:be:fc:df:c3:3d:39:f9:
d6:40:8b:22:e7:b6:f3:d0:e4:27:65:18:54:23:82:
df:15:2c:d9:c9:6b:26:80:99:36:51:93:d8:ad:54:
d3:2b:f1:6e:cf:99:57:e6:d9:d3:d6:22:c0:c3:98:
8b:5e:32:0c:39:c8:ff:66:d9:a7:63:09:b1:6d:38:
1d:18:2b:b3:92:13:86:8e:88:36:0a:09:95:8b:4c:
73:0d:2c:14:42:06:be:01:12:5a:ab:8d:cc:74:91:
9e:ea:a5:2f:8f:1f:62:84:bb:1f:89:0b:73:e1:68:
f6:41:0f:a0:68:8a:59:05:cd:c9:79:3f:2c:86:f6:
6a:02:cb:1f:25:8b:5f:ab:24:7a:88:5c:af:da:3b:
b9:e7:7a:6d:80:dc:03:85:48:bc:70:ea:c0:1c:c6:
e7:b4:fa:36:7c:55:a4:70:f7:57:c6:80:b5:18:ce:
9a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5A:F3:07:C0:E3:12:BB:79:E9:45:04:76:52:2B:00:60:6A:C4:15
X509v3 Authority Key Identifier:
keyid:0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:11:a7:91:6b:d9:01:f1:07:70:a4:9b:27:a7:13:22:ed:f7:
fb:ad:45:3b:5c:a2:42:c2:f0:3a:19:19:83:1a:5a:d6:fa:62:
ad:a8:1a:e3:14:28:ae:88:59:95:34:e6:13:95:12:02:9d:ae:
13:29:3a:ba:38:70:8c:89:c1:16:bf:37:8f:b3:83:8f:3b:75:
89:d2:f5:3b:70:32:0a:d0:1d:e4:e8:4c:e0:fd:45:f7:2c:9e:
70:5a:cd:d4:12:c7:b0:4f:e3:39:c6:3f:27:90:c7:69:df:ec:
88:af:31:64:05:85:92:da:af:d7:5c:c8:9c:c9:7c:21:18:50:
90:28:dc:12:fc:56:d7:e3:b9:a9:ee:42:c0:89:5d:8f:c2:aa:
6a:81:9d:44:32:99:c8:5f:da:e7:63:5a:1a:00:08:e1:69:c0:
e7:b7:2a:6f:d3:04:01:ba:2b:93:b5:e8:8d:6c:c8:e7:8a:b3:
4c:ba:4e:e0:52:db:28:f4:25:2a:a8:2c:cd:b8:a4:16:bd:51:
97:09:ad:89:78:aa:cb:a6:f2:4d:be:8c:23:1a:f3:80:d8:98:
24:f0:6b:b7:f7:77:b0:c1:21:9a:64:77:16:cb:72:20:cf:44:
89:0d:be:63:98:6c:69:97:5f:28:3e:de:92:13:18:30:fa:2c:
ce:08:0e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:11 2026 by rpki-client