Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
File: CIAqhiH4eCf9WXI85my1nDj5HyE.mft (raw, json)
Hash identifier: Bd9jpVsKPhW4aaKYltyijXbwNMum7h06ybjCD7a72nE=
Subject key identifier: 44:A3:64:4D:21:09:70:D0:2F:5F:DD:C3:17:81:34:E9:C4:CE:E7:0F
Authority key identifier: 08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
Certificate issuer: /CN=08802a8621f87827fd59723ce66cb59c38f91f21
Certificate serial: 01A0016F1D2FE3E675215E6A2A092BECC46B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
Manifest number: 0D58
Signing time: Fri 14 Aug 2026 18:00:54 +0000
Manifest this update: Fri 14 Aug 2026 18:00:54 +0000
Manifest next update: Sat 15 Aug 2026 18:00:54 +0000
Files and hashes: 1: CIAqhiH4eCf9WXI85my1nDj5HyE.crl (hash: mWSvYPQk/VdTYpL+EXzOM+aVWR4i9h5F5tSISm5D9bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:1d:2f:e3:e6:75:21:5e:6a:2a:09:2b:ec:c4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08802a8621f87827fd59723ce66cb59c38f91f21
Validity
Not Before: Aug 14 18:00:54 2026 GMT
Not After : Aug 15 18:00:54 2026 GMT
Subject: CN=44a3644d210970d02f5fddc3178134e9c4cee70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:a7:f1:4e:69:26:5d:0b:56:2d:96:6b:59:
de:69:ee:22:fd:6f:f8:90:f0:24:39:5d:96:b0:40:
9b:f3:38:53:57:80:1a:30:5a:5b:64:f4:28:9a:cd:
e5:46:28:0b:8c:e9:c0:eb:88:e0:f2:f8:4b:d2:c0:
96:05:7f:16:f1:82:f5:2b:38:89:87:b5:56:aa:5a:
58:e8:63:84:a2:ee:2c:9f:4b:f5:fe:5f:11:9c:50:
69:5c:0e:8b:15:61:40:d1:ba:e8:8c:0d:12:01:78:
54:3e:5c:a1:c1:7e:67:49:d0:ea:72:c1:44:1c:a0:
2f:87:05:a1:e2:bd:59:e8:61:f0:24:97:0c:13:d8:
e0:81:7f:d6:92:5e:de:5b:06:b9:bf:18:d8:af:6f:
60:1d:bf:da:45:45:4d:43:14:91:9c:a9:7a:2b:fe:
5d:3d:af:75:bd:13:9d:51:23:dd:c4:eb:96:e6:4f:
2c:49:6c:d9:0a:d9:df:c8:7c:aa:79:c4:64:07:72:
15:68:98:69:af:0b:3a:12:dd:d3:dc:1b:17:7d:48:
93:c0:37:37:91:4c:9c:fa:c2:a1:84:8e:e9:86:b4:
f3:4b:1a:da:6d:4b:10:de:a0:b9:52:9b:12:22:38:
2d:eb:79:cb:0d:65:6b:79:21:88:bb:67:4e:2c:e2:
23:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A3:64:4D:21:09:70:D0:2F:5F:DD:C3:17:81:34:E9:C4:CE:E7:0F
X509v3 Authority Key Identifier:
keyid:08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:94:6e:e8:85:68:2b:8b:02:62:08:00:86:19:a2:8d:61:aa:
ca:bb:7c:5e:dc:ec:e6:9c:96:d7:24:23:9c:22:25:0e:6d:5b:
fc:23:21:6d:9d:8f:8f:7b:0e:58:28:01:8f:14:93:e2:b3:84:
41:12:e1:09:5b:62:a4:06:7a:71:62:c5:d2:2c:bb:86:36:d9:
4e:5f:2f:76:07:92:57:74:e6:96:9f:36:2c:3b:28:c1:bf:b0:
77:42:c1:30:21:05:89:77:03:bd:75:6b:91:40:e0:50:dd:aa:
df:11:e6:13:3c:9f:03:51:a8:2a:8e:ff:4d:c5:5f:42:92:fc:
40:59:16:88:3e:2a:7f:91:85:98:f8:66:e1:13:fe:85:f5:5b:
e4:9f:a2:1d:51:75:5c:c8:01:38:e4:5a:8b:49:43:0c:87:a5:
68:a4:dd:28:5f:15:36:3e:26:23:82:c0:be:2c:4c:9c:5f:eb:
21:a1:6a:2d:65:54:d4:58:56:93:fd:51:51:19:e4:54:da:ff:
b8:22:58:2f:ec:ec:b8:90:16:fb:bf:fb:5e:e3:8f:5e:c9:ea:
1c:29:6b:47:89:09:27:41:ad:99:0a:40:d1:48:f9:1c:da:4a:
c4:9b:5b:c4:e4:4b:01:a6:e5:ac:6a:31:db:03:4a:d9:26:5e:
ab:be:fd:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABbx0v4+Z1IV5qKgkr7MRrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODAyYTg2MjFmODc4MjdmZDU5NzIzY2U2NmNiNTljMzhm
OTFmMjEwHhcNMjYwODE0MTgwMDU0WhcNMjYwODE1MTgwMDU0WjAzMTEwLwYDVQQD
Eyg0NGEzNjQ0ZDIxMDk3MGQwMmY1ZmRkYzMxNzgxMzRlOWM0Y2VlNzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhqn8U5pJl0LVi2Wa1neae4i/W/4
kPAkOV2WsECb8zhTV4AaMFpbZPQoms3lRigLjOnA64jg8vhL0sCWBX8W8YL1KziJ
h7VWqlpY6GOEou4sn0v1/l8RnFBpXA6LFWFA0brojA0SAXhUPlyhwX5nSdDqcsFE
HKAvhwWh4r1Z6GHwJJcME9jggX/Wkl7eWwa5vxjYr29gHb/aRUVNQxSRnKl6K/5d
Pa91vROdUSPdxOuW5k8sSWzZCtnfyHyqecRkB3IVaJhprws6Et3T3BsXfUiTwDc3
kUyc+sKhhI7phrTzSxrabUsQ3qC5UpsSIjgt63nLDWVreSGIu2dOLOIjUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESjZE0hCXDQL1/dwxeBNOnEzucPMB8GA1UdIwQY
MBaAFAiAKoYh+Hgn/VlyPOZstZw4+R8hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lBcWhpSDRlQ2Y5V1hJODVteTFuRGo1SHlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82YmMwZjEtZDFlYS00OTAwLTk4Y2Et
ZjE2Zjk5NGVjZjQzLzEvQ0lBcWhpSDRlQ2Y5V1hJODVteTFuRGo1SHlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82YmMwZjEtZDFlYS00OTAwLTk4Y2EtZjE2Zjk5NGVjZjQz
LzEvQ0lBcWhpSDRlQ2Y5V1hJODVteTFuRGo1SHlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYpRu6IVo
K4sCYggAhhmijWGqyrt8Xtzs5pyW1yQjnCIlDm1b/CMhbZ2Pj3sOWCgBjxST4rOE
QRLhCVtipAZ6cWLF0iy7hjbZTl8vdgeSV3Tmlp82LDsowb+wd0LBMCEFiXcDvXVr
kUDgUN2q3xHmEzyfA1GoKo7/TcVfQpL8QFkWiD4qf5GFmPhm4RP+hfVb5J+iHVF1
XMgBOORai0lDDIelaKTdKF8VNj4mI4LAvixMnF/rIaFqLWVU1FhWk/1RURnkVNr/
uCJYL+zsuJAW+7/7XuOPXsnqHClrR4kJJ0GtmQpA0Uj5HNpKxJtbxORLAablrGox
2wNK2SZeq7798g==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:33 2026 by rpki-client