
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
File: CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json)
Hash identifier: joTDzFgsYVYEsa9qKF1prV7esMos9tfpT1Ygj1BkvxA=
Subject key identifier: 91:F2:FE:68:F8:C4:C6:1D:B4:63:FE:EB:61:66:B4:48:77:14:53:50
Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
Certificate issuer: /CN=08819c27a5be3d2db222b05637447ed6e8324873
Certificate serial: 019E30E09D277BAD2837A8B6D5C9653BFD34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
Manifest number: 1651
Signing time: Sat 16 May 2026 13:01:27 +0000
Manifest this update: Sat 16 May 2026 13:01:27 +0000
Manifest next update: Sun 17 May 2026 13:01:27 +0000
Files and hashes: 1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: dfmW36+lUN8iVX2zWR9D62d3lBxZ1TH198DuBJNh73A=)
2: IQDg8XUunRwYK-C6GvbnJQ7EHM0.roa (hash: DFgB9yi6JU5q5PfQOPOS6steUe02MkhWX55KVlM+wDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:9d:27:7b:ad:28:37:a8:b6:d5:c9:65:3b:fd:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873
Validity
Not Before: May 16 13:01:27 2026 GMT
Not After : May 17 13:01:27 2026 GMT
Subject: CN=91f2fe68f8c4c61db463feeb6166b44877145350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:aa:4f:b4:49:df:59:4b:3a:fc:c5:4e:59:
63:7d:db:c3:9c:d1:14:70:56:77:e4:ca:10:da:10:
9e:8b:fa:0c:44:4e:33:3b:14:04:39:a3:51:03:67:
92:95:7c:26:5b:fd:a0:1b:a3:36:61:3e:0e:eb:1d:
0a:1d:72:3f:5e:4b:88:d5:77:ec:76:af:b6:f3:76:
3a:d2:fe:7a:50:e8:d3:b4:e3:13:c3:b2:5e:0d:49:
ba:0a:02:f6:ff:18:45:60:28:31:22:b9:24:0d:3b:
59:de:f6:19:43:54:71:8a:73:50:3f:7c:92:3b:5f:
c1:61:20:6e:99:2e:ea:2f:e6:c6:ea:02:0c:dc:db:
e5:19:c4:aa:14:b0:d2:0d:13:a1:61:d5:73:e8:2c:
e3:7e:ae:9b:79:25:72:8f:91:07:27:07:00:e9:0a:
ef:59:f2:88:58:33:ba:7c:68:13:d0:85:db:1a:10:
2e:42:5b:97:f3:3f:3f:c8:72:3e:9c:a0:5d:04:7d:
7c:3a:d8:3a:15:1d:14:73:3d:bc:5c:7c:d2:1a:7b:
44:a8:ab:92:36:b5:2f:d4:bf:5f:35:ef:bb:9a:99:
f2:06:51:8a:2e:27:2a:ea:60:95:89:d4:fd:38:7d:
5e:e1:c5:a4:4e:99:fa:47:87:6b:5e:59:85:01:c6:
49:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F2:FE:68:F8:C4:C6:1D:B4:63:FE:EB:61:66:B4:48:77:14:53:50
X509v3 Authority Key Identifier:
keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e0:4d:84:0d:2d:ef:52:98:db:f4:9a:f6:85:ee:46:9f:24:
4c:34:3d:7f:aa:88:42:a5:9a:ac:f3:c3:93:59:19:9d:cb:05:
be:75:47:a7:46:b5:a2:60:ae:b1:60:51:8f:d3:6d:22:66:76:
25:c8:f1:e2:94:95:60:74:c0:6d:7e:8f:a6:5d:51:12:5c:7b:
d1:23:8f:f9:2b:1d:e6:eb:2f:76:0c:6d:c4:10:12:a5:62:df:
fe:7d:fb:74:90:35:d7:04:5e:da:ba:cb:23:4f:9d:44:6f:ec:
e2:29:fc:07:d0:4b:72:04:f6:36:6d:62:cf:ea:63:67:11:5c:
6f:c0:d0:cb:73:54:36:57:78:27:c4:3c:01:10:29:2c:59:2b:
34:e4:b4:60:d1:21:40:17:50:c1:42:26:56:b2:04:fe:fe:ae:
de:df:71:e4:a9:e9:89:da:d0:4d:be:b0:7a:e2:20:69:2a:11:
2b:11:48:b8:d3:4c:e5:4f:43:ea:7e:a6:db:e2:79:49:89:aa:
01:1b:5c:e9:c1:0f:37:f7:c8:15:bf:73:39:02:79:8a:67:2c:
c4:9b:bc:e8:89:cc:8a:1c:a2:5b:95:6d:65:c0:ed:5c:2c:c3:
e0:0d:0f:9f:a4:9e:95:fc:c7:23:d0:d3:ae:99:34:fe:8c:10:
10:00:d0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:47 2026 by rpki-client