Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
File: CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json)
Hash identifier: pdnLgzywqnbP4zFLX1JckKVaLmN80VVjJyaJCOIQ7SM=
Subject key identifier: 61:DC:30:97:2E:82:66:75:BD:6C:35:4D:40:4E:3F:1C:3C:45:CB:5C
Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
Certificate issuer: /CN=08819c27a5be3d2db222b05637447ed6e8324873
Certificate serial: 019F189F0F657BCB852D4D36BD8ADEBCCF63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
Manifest number: 16C9
Signing time: Tue 30 Jun 2026 13:01:45 +0000
Manifest this update: Tue 30 Jun 2026 13:01:45 +0000
Manifest next update: Wed 01 Jul 2026 13:01:45 +0000
Files and hashes: 1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: A/iEaQvVT/fu1z5zzLitI2gIngILPHZALAzGtu3tvPE=)
2: IQDg8XUunRwYK-C6GvbnJQ7EHM0.roa (hash: DFgB9yi6JU5q5PfQOPOS6steUe02MkhWX55KVlM+wDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9f:0f:65:7b:cb:85:2d:4d:36:bd:8a:de:bc:cf:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873
Validity
Not Before: Jun 30 13:01:45 2026 GMT
Not After : Jul 1 13:01:45 2026 GMT
Subject: CN=61dc30972e826675bd6c354d404e3f1c3c45cb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:95:11:c4:e9:a4:32:22:44:07:52:1d:e9:
c3:7d:e7:f2:9e:3a:46:a6:92:91:04:21:76:01:df:
8b:74:c0:7b:62:f7:5c:0b:ec:48:f1:4c:77:a2:d7:
48:12:c3:6a:fd:37:7a:fb:3b:5c:da:6d:6e:b0:21:
2a:7c:af:c9:c1:da:4a:32:4f:1a:3b:a4:94:cd:78:
1f:ae:b7:af:1c:34:21:a7:ce:a5:5c:56:e5:68:4e:
5a:cb:af:5d:e2:b7:27:20:a5:1f:e1:7e:a0:f0:8d:
af:95:93:27:81:49:69:e6:bb:18:6d:c6:57:9d:bc:
5c:34:a3:a9:f7:fd:e5:a6:e6:23:b4:e1:75:f5:f6:
3e:00:54:84:fa:93:10:14:c2:72:27:48:58:65:e8:
17:d5:9f:80:a2:fe:b0:52:6b:c2:22:93:77:79:aa:
f3:2d:f4:d4:c5:d4:5b:9a:99:eb:8d:42:98:f7:04:
20:81:00:4a:37:da:1e:f0:b4:11:93:db:23:28:97:
3a:25:6c:95:0e:3f:58:15:98:96:c1:69:c5:57:e3:
ca:f4:2b:71:2d:09:10:41:f5:3f:3c:6c:b8:d3:a8:
48:93:21:60:ab:b4:4c:55:c8:f8:01:7b:65:3f:31:
6f:a1:a0:08:6a:e7:e1:1f:b7:bd:04:b3:ff:e9:24:
57:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DC:30:97:2E:82:66:75:BD:6C:35:4D:40:4E:3F:1C:3C:45:CB:5C
X509v3 Authority Key Identifier:
keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8d:93:54:d0:1e:41:a1:5e:b0:a0:ff:5f:12:9c:fd:1c:56:
0a:f1:84:0b:b8:a9:18:15:2c:4c:7f:48:20:a2:7b:f7:4e:86:
cf:76:8f:a2:0c:56:ae:80:be:c1:c3:d4:20:43:c5:82:36:78:
89:1f:6e:0e:f9:be:e5:a5:97:ae:60:62:26:c0:cd:d2:c1:8a:
47:20:9c:7f:0c:d5:b9:54:37:5d:b3:a8:6c:89:69:de:c0:80:
fd:19:c3:43:ce:99:9c:d4:d5:f9:8a:99:52:8d:6a:af:93:54:
14:b2:41:9d:f8:1b:8e:99:51:c5:1d:34:fa:fc:87:67:af:74:
d0:e0:a6:92:fa:b1:2c:10:b1:e2:da:e4:47:ca:03:23:8a:4c:
57:e9:de:d6:f4:3f:cf:20:90:d3:ac:09:00:e3:f0:68:b1:eb:
56:18:57:cb:3e:16:23:11:bd:43:d3:3c:76:93:91:f5:61:d0:
72:27:1a:f7:58:32:ad:d3:9d:71:27:15:91:b5:a7:29:5f:8b:
f5:71:5e:15:85:27:ca:b1:ce:ee:97:a4:0d:9a:09:ae:29:16:
db:5d:f1:93:4f:3e:ee:48:3a:5a:77:c9:2b:2d:5d:d0:9c:fc:
26:90:31:25:26:be:ec:69:fe:92:a3:fb:b3:e0:07:6f:81:be:
94:b3:c0:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Ynw9le8uFLU02vYrevM9jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODE5YzI3YTViZTNkMmRiMjIyYjA1NjM3NDQ3ZWQ2ZTgz
MjQ4NzMwHhcNMjYwNjMwMTMwMTQ1WhcNMjYwNzAxMTMwMTQ1WjAzMTEwLwYDVQQD
Eyg2MWRjMzA5NzJlODI2Njc1YmQ2YzM1NGQ0MDRlM2YxYzNjNDVjYjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD6VEcTppDIiRAdSHenDfefynjpG
ppKRBCF2Ad+LdMB7YvdcC+xI8Ux3otdIEsNq/Td6+ztc2m1usCEqfK/JwdpKMk8a
O6SUzXgfrrevHDQhp86lXFblaE5ay69d4rcnIKUf4X6g8I2vlZMngUlp5rsYbcZX
nbxcNKOp9/3lpuYjtOF19fY+AFSE+pMQFMJyJ0hYZegX1Z+Aov6wUmvCIpN3earz
LfTUxdRbmpnrjUKY9wQggQBKN9oe8LQRk9sjKJc6JWyVDj9YFZiWwWnFV+PK9Ctx
LQkQQfU/PGy406hIkyFgq7RMVcj4AXtlPzFvoaAIaufhH7e9BLP/6SRXGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHcMJcugmZ1vWw1TUBOPxw8RctcMB8GA1UdIwQY
MBaAFAiBnCelvj0tsiKwVjdEftboMkhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMt
MWNhZjA2MTEzNzRkLzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMtMWNhZjA2MTEzNzRk
LzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR42TVNAe
QaFesKD/XxKc/RxWCvGEC7ipGBUsTH9IIKJ7906Gz3aPogxWroC+wcPUIEPFgjZ4
iR9uDvm+5aWXrmBiJsDN0sGKRyCcfwzVuVQ3XbOobIlp3sCA/RnDQ86ZnNTV+YqZ
Uo1qr5NUFLJBnfgbjplRxR00+vyHZ6900OCmkvqxLBCx4trkR8oDI4pMV+ne1vQ/
zyCQ06wJAOPwaLHrVhhXyz4WIxG9Q9M8dpOR9WHQcica91gyrdOdcScVkbWnKV+L
9XFeFYUnyrHO7pekDZoJrikW213xk08+7kg6WnfJKy1d0Jz8JpAxJSa+7Gn+kqP7
s+AHb4G+lLPAFQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:29 2026 by rpki-client