Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
File: CI4DIScTMq_HfkyFefDlVZzAnFA.mft (raw, json)
Hash identifier: P01HI772+rmXrVXSDIcTQE6ZqrGDd24qAWLgHL8ujd4=
Subject key identifier: E3:79:1C:6E:CB:43:89:98:CB:5B:57:A1:E4:21:95:29:D8:5A:8A:D7
Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50
Certificate serial: 01A001A6047D6D89C2D31853C367197A11FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
Manifest number: 16C8
Signing time: Fri 14 Aug 2026 19:00:52 +0000
Manifest this update: Fri 14 Aug 2026 19:00:52 +0000
Manifest next update: Sat 15 Aug 2026 19:00:52 +0000
Files and hashes: 1: CI4DIScTMq_HfkyFefDlVZzAnFA.crl (hash: IydMl6SeobRCIhJiI4JkEhJeNFbTvefNyzzBfMXQdPU=)
2: KtMqQnXaTgjktxdZ9isOcMNd_ow.roa (hash: EvEd1Dr3LRZFLdIp6Wy0JVab3CsirxaKCwus40x7MwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:04:7d:6d:89:c2:d3:18:53:c3:67:19:7a:11:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50
Validity
Not Before: Aug 14 19:00:52 2026 GMT
Not After : Aug 15 19:00:52 2026 GMT
Subject: CN=e3791c6ecb438998cb5b57a1e4219529d85a8ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:be:72:49:f9:bd:70:90:2c:85:88:f4:94:90:
cf:82:2d:5a:4b:b6:67:36:3a:cf:86:e3:41:74:a6:
d5:52:89:47:bb:2e:09:fa:ba:0e:1b:13:da:35:23:
3e:5e:eb:1c:f5:88:c2:bf:09:81:a1:b2:11:a8:71:
bf:09:77:10:0a:37:95:64:c4:ee:df:f6:e1:87:4c:
95:21:0b:78:0a:b2:25:9f:c5:9b:19:c0:e9:ea:30:
32:47:38:83:d2:a0:e5:ff:92:a9:9f:53:8a:91:b5:
f7:30:c5:30:45:b5:d4:dc:21:03:47:2c:7b:b5:9b:
60:59:a4:0e:7c:75:80:d9:79:ed:a5:60:a8:13:b8:
c2:86:56:97:36:db:98:b6:ac:82:ec:8a:04:6c:f9:
a4:6e:97:1c:d1:22:7a:a9:cf:5c:61:0f:7e:95:40:
57:35:06:1a:f5:79:77:04:ad:99:66:90:93:6d:f3:
80:60:df:ae:1d:0e:c0:f4:3e:ff:6c:80:2c:57:9c:
e5:4c:8c:df:c1:48:19:4b:7c:3f:45:c2:a0:8a:2f:
f3:4f:d2:71:1f:7d:83:9a:3e:80:26:05:3b:18:f1:
1b:d7:29:16:de:e9:6d:f5:de:ca:9b:ec:f5:3d:22:
7c:56:cc:8f:24:71:3b:ae:df:0b:a6:8b:fc:fa:18:
e2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:79:1C:6E:CB:43:89:98:CB:5B:57:A1:E4:21:95:29:D8:5A:8A:D7
X509v3 Authority Key Identifier:
keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c3:86:5e:2c:f7:9b:d6:3e:22:25:63:bf:0b:f7:78:e1:25:
87:eb:64:b4:60:e9:a6:50:9f:ef:4b:b1:c1:f8:b2:c2:2e:6a:
55:7c:e4:bc:af:24:5b:4b:49:b3:d8:c0:81:44:8f:df:dd:0a:
a1:e5:60:fb:c5:b0:dc:b9:d4:d2:b5:5c:ee:2b:83:73:a6:d3:
1a:a7:f4:1b:79:40:e5:e1:84:86:12:54:ac:71:5d:e0:fb:9c:
5f:ea:e8:0a:dd:86:2a:4b:a4:f7:b6:a3:58:1a:48:db:ca:c4:
f7:13:5f:d2:4c:1e:23:5b:5d:ef:f8:7e:4d:07:5c:ff:80:fc:
e5:df:49:b4:85:1b:8c:3d:78:35:0f:8e:4c:48:8a:cd:f0:b0:
34:ce:b3:44:dc:58:e6:8a:76:4d:73:15:62:47:9a:3b:86:d9:
b9:af:d0:d9:70:f2:66:dd:8d:38:95:09:3b:ec:fb:3f:d0:d6:
6a:4a:10:ed:27:79:2d:14:73:fc:c4:e6:08:17:48:47:5d:59:
c8:d2:1b:0a:76:34:cc:d7:02:f6:3b:3d:3c:0d:00:1b:df:db:
e4:19:b3:3c:8b:19:87:3f:32:f9:1d:5e:7b:3e:1a:4b:6c:e7:
c9:c0:13:1a:44:b0:13:7a:57:0e:46:a3:fd:e5:23:86:2b:5c:
a6:31:2e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:28 2026 by rpki-client