Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
File: CIAqhiH4eCf9WXI85my1nDj5HyE.mft (raw, json)
Hash identifier: IEjZZ+krN1ah6c0LtHGhwIUn6ryfnKYvBPLvVUnLohQ=
Subject key identifier: 4B:DD:47:34:C5:84:03:C9:43:01:39:55:19:D4:DC:B2:0E:DB:3F:3D
Authority key identifier: 08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
Certificate issuer: /CN=08802a8621f87827fd59723ce66cb59c38f91f21
Certificate serial: 019D38D3080CF6386C584C96BD2FD63DD6D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
Manifest number: 0BE7
Signing time: Sun 29 Mar 2026 09:00:47 +0000
Manifest this update: Sun 29 Mar 2026 09:00:47 +0000
Manifest next update: Mon 30 Mar 2026 09:00:47 +0000
Files and hashes: 1: CIAqhiH4eCf9WXI85my1nDj5HyE.crl (hash: xKZonIhwvSplgqTh4PPPUDJSPxIOjdvGCXQ/Yix2umU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:08:0c:f6:38:6c:58:4c:96:bd:2f:d6:3d:d6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08802a8621f87827fd59723ce66cb59c38f91f21
Validity
Not Before: Mar 29 09:00:47 2026 GMT
Not After : Mar 30 09:00:47 2026 GMT
Subject: CN=4bdd4734c58403c94301395519d4dcb20edb3f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:54:8e:89:24:38:93:74:10:1f:5f:8e:d8:13:
ed:21:23:05:2a:02:9f:61:53:04:be:66:ed:76:3a:
de:3b:1b:de:67:a5:9e:86:b3:97:c7:ca:91:98:c1:
45:df:8c:68:35:05:42:48:e8:52:24:6e:2b:f9:cb:
91:2a:79:93:45:d8:c6:0b:03:a8:11:3f:a4:9e:1b:
d5:0e:73:eb:e9:ee:9c:c3:2f:49:9c:b4:a2:96:f3:
7b:e2:d2:d5:1d:43:aa:66:a5:25:a0:66:d9:f2:16:
f2:c8:6b:99:73:cb:2a:9d:19:51:8c:82:7a:51:96:
1b:44:e1:f9:1d:e4:e9:aa:4d:9a:46:a9:e5:09:e7:
38:c7:29:b9:d0:df:c8:94:9c:22:2a:14:01:64:54:
5f:c8:c6:50:45:a4:18:a4:06:66:d9:d8:be:8b:cc:
d3:a4:c5:d4:bb:1c:7f:a0:ac:11:99:5e:8b:14:38:
53:14:9d:e3:8b:ce:9d:4e:23:b6:96:4f:42:4c:2d:
34:01:52:e7:b0:c2:93:85:c3:a8:9b:9c:d5:3d:d7:
bf:f7:ed:6e:dc:25:24:be:06:f6:46:ca:e2:39:27:
59:99:24:63:b6:56:83:77:f2:7d:18:d2:53:ab:92:
ce:3c:04:e0:e2:7e:62:a0:a4:95:e2:64:83:be:16:
89:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DD:47:34:C5:84:03:C9:43:01:39:55:19:D4:DC:B2:0E:DB:3F:3D
X509v3 Authority Key Identifier:
keyid:08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:22:88:bd:ae:ba:ff:2f:28:1f:47:09:73:11:74:c3:f1:63:
85:a7:9f:17:62:e7:2b:e1:bd:29:a1:79:0b:5a:b0:c6:90:85:
4c:d8:31:17:f4:a8:52:20:1f:12:b3:14:8f:1b:ca:79:f3:75:
1f:fe:8d:ec:45:90:f4:d9:b0:0c:a0:bc:34:dd:22:f5:21:bd:
5f:86:1c:9b:52:93:29:dc:02:9a:28:47:54:01:19:b8:c2:26:
ab:11:4b:92:7b:67:a7:49:3e:f5:e9:87:ca:78:c0:58:a7:23:
6a:5a:ba:d0:50:ec:76:4c:83:5e:37:d5:4a:38:6c:ce:18:a3:
42:6f:17:b1:f0:56:c8:05:28:d1:be:f4:96:cc:c5:d5:a2:37:
e9:9c:72:99:c8:bd:11:b2:6e:8b:4b:e9:6b:a5:df:a0:0b:89:
83:6c:56:83:44:ec:d8:fe:cb:67:cc:62:73:05:47:89:3f:46:
07:d6:81:90:96:78:9a:7a:ed:e1:6a:56:99:68:8e:73:4f:6e:
ab:b6:27:7f:65:f6:af:57:58:1b:d5:42:79:e0:cd:d3:71:68:
97:d0:1c:89:dc:b5:1b:77:58:43:9a:4e:67:f0:41:30:16:fe:
23:85:6e:9a:fe:ed:7a:94:14:97:27:6f:52:02:2c:35:8a:80:
03:a0:1a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:04 2026 by rpki-client