Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
File: CIAqhiH4eCf9WXI85my1nDj5HyE.mft (raw, json)
Hash identifier: Y6b/1RFweh2N+9rdWupouwlOKg97RfY9ASzN+UiiEH8=
Subject key identifier: 86:D9:EF:9A:4D:B5:CE:40:66:2D:04:8A:22:D5:19:42:39:C0:EB:FE
Authority key identifier: 08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
Certificate issuer: /CN=08802a8621f87827fd59723ce66cb59c38f91f21
Certificate serial: 01A147CDEE42964324EF6C614E975650A05F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
Manifest number: 0E01
Signing time: Sat 17 Oct 2026 03:00:40 +0000
Manifest this update: Sat 17 Oct 2026 03:00:40 +0000
Manifest next update: Sun 18 Oct 2026 03:00:40 +0000
Files and hashes: 1: CIAqhiH4eCf9WXI85my1nDj5HyE.crl (hash: s+akzu08MubwKJ1U1jREUHE/rGfXoEGf1LnJ26v8d5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:cd:ee:42:96:43:24:ef:6c:61:4e:97:56:50:a0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08802a8621f87827fd59723ce66cb59c38f91f21
Validity
Not Before: Oct 17 03:00:40 2026 GMT
Not After : Oct 18 03:00:40 2026 GMT
Subject: CN=86d9ef9a4db5ce40662d048a22d5194239c0ebfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:cd:31:71:80:ee:f9:7e:f8:42:f8:88:6b:
cd:12:c0:6e:c4:dc:77:40:76:a4:24:26:b0:c5:a3:
1d:15:aa:31:7d:a5:89:39:14:04:11:ec:55:0f:da:
4c:34:f5:24:ca:38:4d:31:3f:d3:fa:c1:5f:d1:3a:
f4:34:8a:23:af:9b:c7:a8:9e:88:3e:f7:28:a7:a3:
40:b7:ee:0f:ce:76:b7:51:21:fc:f4:ce:73:1f:9d:
29:65:55:5a:c7:e4:cb:f5:02:c6:b7:f2:d7:3e:11:
81:b8:9d:4a:fe:80:6a:93:bd:fe:21:39:e8:a8:2a:
bc:0c:a6:fd:bb:92:a1:1b:2b:c1:3d:43:93:81:64:
2b:69:30:8f:a5:64:d7:6f:e1:ae:96:c5:2b:8d:c1:
07:51:98:72:a9:17:18:e6:11:ff:9e:19:ea:44:61:
a8:cb:d0:86:7f:3d:85:18:cc:1d:66:f8:df:88:03:
62:69:bc:e1:ea:59:24:1d:5e:27:af:ea:ea:9b:96:
9e:8f:65:2d:10:03:ce:55:b4:8f:97:3d:af:73:22:
a5:86:87:b3:40:ab:1d:76:5d:23:8a:4a:ed:23:2c:
d0:cf:39:c3:da:19:69:36:ba:77:5e:8c:70:3e:0f:
48:eb:09:6b:15:d7:d0:c7:9e:46:63:e8:b5:0b:b0:
f3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D9:EF:9A:4D:B5:CE:40:66:2D:04:8A:22:D5:19:42:39:C0:EB:FE
X509v3 Authority Key Identifier:
keyid:08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e1:ea:47:85:0d:b4:1b:e6:4f:4f:fb:4e:03:a5:eb:e1:41:
de:90:c2:72:4a:c2:95:90:8e:90:65:b2:82:83:d2:c5:75:c8:
7e:63:d7:3b:3f:94:72:be:71:11:92:2d:de:97:b7:46:fe:75:
98:81:f0:f6:a0:26:c8:b1:3b:91:ab:63:a1:dc:dd:4e:e9:39:
b2:ec:7f:bf:cf:00:7e:c8:45:5a:62:1b:fb:7d:e5:71:05:4f:
5e:a7:76:47:5e:b8:e1:58:47:cc:27:03:eb:cb:bc:dd:79:ce:
50:36:e2:9c:34:96:a1:96:2c:1f:a5:6e:8b:9a:67:57:15:30:
d3:1a:43:15:34:58:7d:0f:54:04:c6:d3:9f:5a:b4:ed:ad:98:
0b:f5:95:2b:56:70:2a:d9:0d:04:f6:8b:11:be:14:3b:59:92:
fc:d9:de:16:5b:85:8c:fb:1a:34:3c:4f:43:f4:5e:e8:dc:6c:
34:af:0c:36:3c:8d:44:ac:77:35:3e:d1:8d:2f:92:9e:88:4c:
50:67:61:07:bc:17:00:8c:00:46:ea:27:7b:14:ea:59:16:90:
ef:0f:96:c1:e4:4f:1d:62:77:a4:25:57:7f:4d:70:d6:06:5b:
69:67:89:9f:69:58:2a:47:97:ac:4d:7b:d1:4a:d9:0d:04:79:
cc:b1:0f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:51:52 2026 by rpki-client