Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
File: CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft (raw, json)
Hash identifier: bfm5z6uDtPFgcnIwZoajOQsDSe/DQpk4g96gavzyJZo=
Subject key identifier: E7:02:F0:57:E1:46:1B:C5:C1:B4:1F:95:43:F7:03:A0:4B:AA:23:25
Authority key identifier: 0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
Certificate issuer: /CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Certificate serial: 01A001A62E858C2BE1A8B92F15375676B7F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 19:01:03 +0000
Manifest this update: Fri 14 Aug 2026 19:01:03 +0000
Manifest next update: Sat 15 Aug 2026 19:01:03 +0000
Files and hashes: 1: CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl (hash: zf5BUrjebq8zMeGHUEB2lap5LhAdeB12WBpLFMkp8yI=)
2: jr3Qwfg8Z9qypQ7083QLXtA-1bs.roa (hash: BStTXqRwyFgu7NL9U4UDu4snXF66XXGZwBXM2f9Q63k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:2e:85:8c:2b:e1:a8:b9:2f:15:37:56:76:b7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Validity
Not Before: Aug 14 19:01:03 2026 GMT
Not After : Aug 15 19:01:03 2026 GMT
Subject: CN=e702f057e1461bc5c1b41f9543f703a04baa2325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:24:c5:bb:a7:a7:39:25:2b:1f:2c:35:62:
c9:7f:7c:bd:6c:4b:d0:ad:0d:f9:86:0b:ef:c4:e5:
6f:08:32:a6:92:f0:5a:4d:cd:e5:c4:5c:76:99:36:
7e:7b:1f:de:36:be:43:dc:44:a2:a5:28:e9:2f:33:
65:3c:ea:99:ae:72:90:ed:f5:53:3d:70:a1:47:ba:
0a:14:21:ff:a9:40:a5:b8:26:66:60:97:f3:54:46:
8f:5f:a2:4e:86:a8:26:90:68:29:2a:d6:dd:10:ef:
a2:5e:35:f3:21:54:53:4f:63:09:6e:44:63:4e:80:
16:20:65:90:1c:c5:4c:d2:2b:3d:a2:6a:40:e2:2e:
ea:03:c2:81:13:0f:b6:cb:b2:cc:04:2b:8c:aa:b2:
48:5e:87:25:e5:42:f4:da:8b:7b:37:4b:0d:88:35:
75:c0:a7:41:26:75:89:88:3a:46:59:78:68:33:63:
b7:c3:af:8c:c9:41:6b:1c:50:5b:b1:62:4c:c7:41:
24:d8:02:6c:d1:ba:aa:59:7e:01:92:76:f6:c2:b7:
03:a6:18:27:15:c2:d2:7c:e8:a6:c5:03:4f:2c:e5:
44:33:d0:d3:79:ae:87:9f:ba:d6:6d:3f:c7:34:8b:
72:a1:cc:f3:3a:b0:69:19:e3:bc:0c:a6:d5:5b:d9:
8c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:02:F0:57:E1:46:1B:C5:C1:B4:1F:95:43:F7:03:A0:4B:AA:23:25
X509v3 Authority Key Identifier:
keyid:0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7d:ae:b5:88:08:d2:0f:ed:6e:ea:6d:79:df:f8:74:66:03:
2b:7b:98:e7:f7:47:13:2b:db:bc:a9:ad:e9:9e:9a:f4:cc:f9:
ae:1b:35:c0:3c:6e:c3:78:63:8c:0f:80:03:54:88:7f:9d:c8:
d0:d0:32:5b:54:ae:96:17:39:a4:d3:d7:08:ff:65:6e:2a:67:
db:c7:a8:3d:f4:d4:81:d4:4d:cd:90:a8:4d:f7:07:3c:e7:a6:
be:4f:d2:6d:1b:49:21:1e:3f:36:3d:2b:0f:0d:f1:b4:80:bc:
b9:9d:39:fa:59:de:60:91:58:a6:d7:dd:e7:59:23:74:07:54:
1e:ab:27:03:55:07:a1:3a:f6:8c:97:88:60:10:01:fd:38:ea:
6f:38:2c:e9:77:ba:04:67:43:23:0a:bf:2b:0c:b4:49:75:8b:
3e:ac:05:47:a5:26:35:1c:1f:4f:dc:c2:94:55:3c:63:26:3f:
2e:94:fe:3e:06:91:f6:a0:21:7f:6f:01:4e:38:e0:b5:a8:83:
57:55:d6:3b:8a:9c:75:04:83:e9:a4:2c:e3:2f:47:21:40:a6:
62:ad:e9:56:71:09:a5:9b:e5:a4:2b:10:9b:ce:7f:74:74:a4:
2c:23:1b:fe:cd:b8:82:df:15:eb:3d:a6:95:8c:c6:32:35:d6:
a2:aa:4b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:25 2026 by rpki-client