Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
File: CIAqhiH4eCf9WXI85my1nDj5HyE.mft (raw, json)
Hash identifier: +aw9nXsTGtCezG3DAwgq7xlDCK5zWA3z3ZmS4KpwJNI=
Subject key identifier: 98:C6:F4:F8:5B:68:53:97:7E:84:37:82:62:9B:78:2C:C8:6E:A9:5F
Authority key identifier: 08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
Certificate issuer: /CN=08802a8621f87827fd59723ce66cb59c38f91f21
Certificate serial: 019F17C35BBAE7145A4D7E8FF9D45A9092EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
Manifest number: 0CDF
Signing time: Tue 30 Jun 2026 09:01:46 +0000
Manifest this update: Tue 30 Jun 2026 09:01:46 +0000
Manifest next update: Wed 01 Jul 2026 09:01:46 +0000
Files and hashes: 1: CIAqhiH4eCf9WXI85my1nDj5HyE.crl (hash: 6r9yiKJVvzWkmx4ZGPVGpWaqYRHSqTxMflJtlzM/iBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:5b:ba:e7:14:5a:4d:7e:8f:f9:d4:5a:90:92:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08802a8621f87827fd59723ce66cb59c38f91f21
Validity
Not Before: Jun 30 09:01:46 2026 GMT
Not After : Jul 1 09:01:46 2026 GMT
Subject: CN=98c6f4f85b6853977e843782629b782cc86ea95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:a0:19:e9:1b:46:70:31:ff:11:ab:ab:42:
2e:25:84:71:62:35:f8:91:75:61:da:d0:7a:b5:bb:
45:56:17:c2:91:a2:ed:53:cf:ed:76:f0:80:30:a0:
d6:c2:67:94:b3:c2:73:f8:cf:a3:53:03:ac:4c:88:
48:a2:72:1e:7b:98:c6:aa:1c:66:55:7c:5e:8f:12:
83:83:15:8c:c3:b2:7a:40:f5:5e:da:f5:38:52:33:
98:ec:e1:f4:75:8d:5f:b8:c3:79:cf:a4:4d:91:20:
da:18:d8:cd:7d:41:12:f1:02:1a:cd:42:63:0d:81:
96:dc:19:6e:0e:e4:2f:7a:51:e6:4c:d2:8b:62:c8:
07:84:cc:51:2a:95:ee:b7:f7:f9:72:f3:47:c2:bb:
7b:dd:3f:6f:7d:4c:78:d6:2a:af:f4:ca:d5:1a:e3:
bf:66:31:b9:30:4c:19:d6:13:7e:d0:9e:df:93:24:
74:c3:be:e3:74:50:eb:ab:43:0b:56:33:18:0c:b2:
9e:a0:22:63:18:3d:44:1b:dd:81:8c:7b:83:df:58:
a1:79:f6:40:05:73:eb:07:64:61:62:09:a9:14:d8:
6d:f4:64:48:db:f4:d3:9c:73:37:b6:21:db:d8:f4:
ed:45:c5:8b:ac:c3:a6:40:e0:48:b4:5d:62:79:22:
c1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C6:F4:F8:5B:68:53:97:7E:84:37:82:62:9B:78:2C:C8:6E:A9:5F
X509v3 Authority Key Identifier:
keyid:08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f0:12:4d:1c:f3:41:f3:c7:ad:25:b1:1b:78:0d:38:0a:54:
96:3f:ce:ef:c1:ef:f0:39:b9:27:55:b7:3a:c3:1d:fa:2c:ea:
b1:93:9e:ca:df:80:17:26:5f:d6:11:90:40:28:5a:35:4f:41:
6c:25:e1:c1:79:cc:83:e2:2d:f2:78:a7:06:28:99:28:7a:64:
19:5d:a8:09:f4:fb:da:30:97:06:d8:f2:88:cb:fa:d0:bf:1a:
bd:35:5a:0f:ab:65:bb:43:49:06:b5:28:49:98:fd:c0:99:1c:
2f:f2:c0:00:ec:70:1f:ca:55:67:5a:26:bf:7f:45:4b:df:dc:
06:7f:56:cc:58:33:4c:fa:6d:78:24:bd:b4:47:f5:c0:80:44:
1a:5e:16:4c:14:70:5d:36:ee:b3:08:24:eb:d7:e8:08:c9:c1:
43:93:aa:7f:37:c8:f0:2b:a6:2f:ea:f8:99:9c:a0:e8:15:89:
1d:ba:e3:45:5f:98:be:c3:c1:4b:d5:5e:ea:5a:09:1a:e1:e1:
21:fd:e3:1a:08:db:0b:e0:26:76:24:5e:7a:8d:c8:d6:06:85:
a6:30:b5:da:6b:87:87:83:fa:d5:f9:12:4a:5b:8f:10:02:b8:
97:9f:97:31:0c:2f:35:4f:43:1e:da:5a:8c:66:ae:02:d3:0a:
82:52:34:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:06 2026 by rpki-client