Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
File: CI4DIScTMq_HfkyFefDlVZzAnFA.mft (raw, json)
Hash identifier: ZqKqkiZV+B/gX3ImfKWni1rl6ukUK7FJa3hgBUBYTPE=
Subject key identifier: B3:85:B7:33:F9:A2:38:49:83:50:67:95:B6:10:A7:00:D5:37:0F:64
Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50
Certificate serial: 019D390A4A78B72FAD6CE627E5D9815A8955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
Manifest number: 1557
Signing time: Sun 29 Mar 2026 10:01:08 +0000
Manifest this update: Sun 29 Mar 2026 10:01:08 +0000
Manifest next update: Mon 30 Mar 2026 10:01:08 +0000
Files and hashes: 1: CI4DIScTMq_HfkyFefDlVZzAnFA.crl (hash: DUezd2dEq6jYmUjcTfrhmHNwKp5Xll5/0EEo1KtF7PM=)
2: KtMqQnXaTgjktxdZ9isOcMNd_ow.roa (hash: EvEd1Dr3LRZFLdIp6Wy0JVab3CsirxaKCwus40x7MwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:4a:78:b7:2f:ad:6c:e6:27:e5:d9:81:5a:89:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50
Validity
Not Before: Mar 29 10:01:08 2026 GMT
Not After : Mar 30 10:01:08 2026 GMT
Subject: CN=b385b733f9a2384983506795b610a700d5370f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d7:0d:b1:9f:57:d4:0e:b1:f5:bd:d4:9b:1f:
1c:5c:b1:1b:77:7b:45:ea:5a:b0:99:da:31:91:e0:
f0:62:ea:08:ca:ed:8e:72:26:ab:5d:aa:3d:32:85:
a4:6a:65:ed:d7:15:fd:4f:ee:1d:f5:77:07:23:03:
b2:fd:c9:c8:f7:c7:71:a5:88:0e:1d:37:8a:52:35:
72:ff:00:00:77:24:27:60:26:55:bc:f4:87:c8:73:
d0:17:cd:6a:71:6e:85:8e:9d:67:c2:85:be:05:e3:
de:e9:0f:37:c9:70:7f:03:f0:42:a9:f7:32:46:ce:
a7:bb:cd:ff:f8:24:dd:f2:97:6f:a6:cd:e7:e5:ac:
16:80:5b:b8:c3:f0:b1:9b:29:82:59:e5:d5:52:fd:
c6:f2:09:07:ca:cb:c5:ef:30:00:97:d4:f0:53:cb:
16:2f:94:00:b1:7c:96:4b:07:c5:a5:31:e5:7d:de:
19:cf:1a:4d:3b:e5:bc:f1:84:e4:b6:cb:a7:61:ae:
24:fc:7f:9f:8f:89:12:76:fd:7e:21:3f:73:cb:8f:
95:69:98:27:2f:b2:74:61:4f:bb:0a:2e:18:bd:fe:
bf:9e:a0:68:b6:fa:d6:35:5d:d6:9f:8b:71:be:cb:
fe:7d:b6:64:3c:48:c9:c3:cc:1d:d0:7f:02:9c:04:
a0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:85:B7:33:F9:A2:38:49:83:50:67:95:B6:10:A7:00:D5:37:0F:64
X509v3 Authority Key Identifier:
keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9f:11:14:f2:cd:11:7a:63:2d:eb:bd:9c:eb:38:5c:df:7f:
d4:25:cf:9c:ce:ad:42:32:9a:87:8f:bb:a0:9e:c6:3e:05:44:
59:9d:77:6d:e0:56:36:93:ec:68:3c:25:8f:ce:d4:33:ee:01:
ae:b5:5e:40:70:18:ce:0e:af:fb:4e:f8:64:cd:03:79:a2:41:
d0:59:1f:f5:b8:01:66:cf:47:b0:b8:a3:16:28:75:15:2c:db:
cd:a5:83:57:91:d8:4d:57:52:e3:bb:7b:99:2a:ac:64:d8:ba:
e0:bc:8f:34:0f:40:4a:75:6c:16:41:2d:f2:24:c2:9d:6c:3f:
40:c2:88:5c:bd:30:83:1d:71:bd:df:30:d5:eb:39:34:bb:08:
24:41:eb:93:6f:d7:be:54:72:f8:0c:dc:23:22:d2:a3:29:51:
f2:c2:40:16:d8:e0:db:4a:93:3d:96:49:7c:3b:aa:3b:5a:60:
ab:75:ea:ed:35:20:7f:73:b3:a3:f2:d2:29:69:54:f3:73:b1:
e4:d5:71:95:3d:2b:1b:40:be:13:72:c8:14:96:6f:88:d9:a9:
b7:10:49:1f:82:b5:aa:0d:07:48:d7:a3:97:3b:90:0d:a7:34:
89:ae:96:e4:fa:9c:e7:43:25:0a:9b:1f:43:03:2b:31:49:36:
a7:dc:53:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:47 2026 by rpki-client