Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
File: CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json)
Hash identifier: VMWgD+qAs35ktFU7uSUjmW0+5bZzyG2ZUs8a21hdUUc=
Subject key identifier: 79:52:8B:0C:04:BB:72:33:2C:BD:0E:95:AC:D1:12:F0:D2:15:AF:56
Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
Certificate issuer: /CN=08819c27a5be3d2db222b05637447ed6e8324873
Certificate serial: 019D37C054360604488D47A85ECD03DBE906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
Manifest number: 15D0
Signing time: Sun 29 Mar 2026 04:00:44 +0000
Manifest this update: Sun 29 Mar 2026 04:00:44 +0000
Manifest next update: Mon 30 Mar 2026 04:00:44 +0000
Files and hashes: 1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: zviHIwZgh4jhFP/ot36K0zI7qqhBmkS7qgi9xo4ZHjA=)
2: IQDg8XUunRwYK-C6GvbnJQ7EHM0.roa (hash: DFgB9yi6JU5q5PfQOPOS6steUe02MkhWX55KVlM+wDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:54:36:06:04:48:8d:47:a8:5e:cd:03:db:e9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873
Validity
Not Before: Mar 29 04:00:44 2026 GMT
Not After : Mar 30 04:00:44 2026 GMT
Subject: CN=79528b0c04bb72332cbd0e95acd112f0d215af56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:0a:77:08:da:5e:48:e9:8e:be:01:e1:72:
07:20:0d:b8:73:18:0b:b1:9e:22:3e:00:7d:e4:8e:
54:62:fb:27:e0:8f:ea:bb:f1:fe:45:27:37:0e:f0:
28:52:8a:eb:23:ad:35:a0:58:46:f3:09:e3:44:c0:
66:f0:f5:5f:6a:f6:40:cf:47:6b:ba:80:c6:63:a8:
61:89:34:b3:00:31:f0:89:41:dd:b6:8a:cb:28:c5:
3d:d5:a1:ea:2c:ae:99:f6:6c:9b:cd:99:52:84:5e:
75:f8:93:05:80:d2:fd:a2:88:76:a2:42:44:0d:03:
60:03:c0:63:24:39:8a:08:22:ea:9a:b8:90:7a:8f:
bc:06:6f:cd:9c:b8:86:56:ed:97:69:c4:91:fc:6e:
97:15:6f:e1:29:29:60:a1:00:0a:f6:34:aa:1b:cd:
f7:b9:ed:c9:c3:7e:01:5b:27:ee:78:42:08:e4:76:
07:50:51:1d:5c:66:a5:ee:f4:b7:b4:3d:1b:7f:e7:
e4:65:f6:88:6f:aa:d5:0a:fe:0e:1a:f0:29:04:ff:
a5:62:c2:47:0b:af:36:cd:63:3f:ec:18:cb:39:60:
8d:7e:de:ad:bb:84:a4:e2:a2:97:d6:f8:a1:79:7d:
ed:94:75:19:d3:a4:33:ad:b3:ad:e1:a1:e7:4a:e8:
b4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:52:8B:0C:04:BB:72:33:2C:BD:0E:95:AC:D1:12:F0:D2:15:AF:56
X509v3 Authority Key Identifier:
keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c8:e4:9c:33:07:2c:f0:3b:a2:c1:39:90:9f:90:7d:a9:00:
cb:03:af:2b:ae:60:89:e4:2a:d1:e1:dd:bb:97:e9:a7:b1:19:
34:8c:e3:6b:08:3d:92:ef:06:14:de:a9:3e:1b:82:93:f6:04:
06:8b:f7:1b:7a:59:c5:8d:cf:b7:b9:7b:95:f3:21:3d:86:d6:
15:e1:d4:f7:4d:03:06:09:dc:c8:55:c2:ca:36:5f:b4:a2:79:
44:43:58:cf:21:9a:93:d7:02:df:ad:6a:fe:04:e5:36:4a:00:
e2:b9:95:b0:6d:dc:aa:7b:52:44:8f:4f:db:4b:3b:d1:7b:a9:
2a:02:35:98:35:12:7b:c8:61:63:3c:76:d6:7f:7a:ce:f8:7d:
fe:be:cc:59:b4:9a:4c:0b:eb:c0:a2:88:11:28:b4:76:03:21:
81:32:18:01:d1:a3:68:5e:d0:d3:22:77:8a:47:7a:4e:c4:b8:
b0:21:33:3a:d4:2c:04:4f:73:d7:ae:1f:92:1d:05:c9:4a:8d:
b7:44:91:19:d7:30:f8:1e:94:80:21:6a:d7:a9:96:33:10:cc:
10:54:9a:a4:05:3b:12:64:b2:cb:0f:f6:41:63:db:6f:20:d0:
c6:84:47:22:0c:d7:0a:3e:5f:b4:5f:09:11:1c:48:28:cd:43:
df:77:0d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:15 2026 by rpki-client