Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
File: RciwwWM2uTM7RE_x4YzHjXanw_Y.mft (raw, json)
Hash identifier: IRtCHHI93Da76VAFMF5nOMMQk6OKKnfaGJPQ0fnJZTk=
Subject key identifier: C1:6E:B8:B6:BA:4F:8D:3D:47:63:9D:89:7F:32:C8:9C:4A:0F:8C:4C
Authority key identifier: 45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6
Certificate issuer: /CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6
Certificate serial: 019D38D3B8487D2CBF330337333013941DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
Manifest number: 04D8
Signing time: Sun 29 Mar 2026 09:01:32 +0000
Manifest this update: Sun 29 Mar 2026 09:01:32 +0000
Manifest next update: Mon 30 Mar 2026 09:01:32 +0000
Files and hashes: 1: RciwwWM2uTM7RE_x4YzHjXanw_Y.crl (hash: aX5eZ3viFGbAStq9HWUuDx2umDiegO7eMi7xJCYeubM=)
2: q547rqVuRHDrkdRQeLcAfoatWLM.roa (hash: pwOHGiBDa818vgm5rLQAdwYCv/4nGflJp4wp+uqq1YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b8:48:7d:2c:bf:33:03:37:33:30:13:94:1d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6
Validity
Not Before: Mar 29 09:01:32 2026 GMT
Not After : Mar 30 09:01:32 2026 GMT
Subject: CN=c16eb8b6ba4f8d3d47639d897f32c89c4a0f8c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:15:59:c6:3f:42:be:ad:ba:ce:29:a8:67:d7:
a0:c1:d2:8c:88:a3:3a:58:ed:bb:1c:7a:88:83:5b:
52:9a:0e:55:07:36:ba:5b:4d:2b:f5:69:10:10:08:
f9:9b:fa:43:07:36:7f:c1:13:a2:73:cc:94:fd:ca:
06:14:c1:78:5f:d5:c0:d3:e9:ce:a1:6e:2e:32:09:
5a:b4:aa:6b:07:a2:56:07:a9:bb:b8:8d:94:b3:ae:
66:73:3e:05:1e:ad:74:1d:fc:a6:86:eb:24:98:b5:
b7:1e:10:1c:43:21:2f:ea:4a:2f:07:55:3b:7a:35:
36:78:74:36:32:e3:d5:64:41:3b:f2:57:a7:98:d3:
ae:cf:e2:2e:5c:5d:e7:8b:24:cc:3d:71:88:c9:5b:
a7:18:45:ef:d7:1c:61:5c:a6:10:93:49:99:37:ff:
18:f1:ce:41:ac:1e:48:e5:f9:6b:b6:fc:d0:d3:8b:
a3:95:68:a2:a2:ab:89:71:b9:69:63:bd:c7:25:ff:
34:59:95:f0:ff:bd:6a:84:a1:85:09:22:2a:8c:7a:
92:91:72:6b:21:40:c6:39:67:aa:66:8f:69:8a:7f:
18:69:f0:cd:d9:37:8e:64:16:27:0f:cd:8a:12:c7:
87:80:b4:50:e0:63:da:13:93:95:8c:7e:00:19:73:
33:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6E:B8:B6:BA:4F:8D:3D:47:63:9D:89:7F:32:C8:9C:4A:0F:8C:4C
X509v3 Authority Key Identifier:
keyid:45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fa:e5:cf:5e:45:ab:32:f6:16:0a:6c:15:97:a1:7c:7a:0d:
8c:cc:95:0b:05:9f:92:90:8b:3f:32:0c:70:08:e0:ac:fc:65:
0a:99:4f:16:44:68:9a:91:bd:10:25:98:53:d3:83:95:0d:f9:
bb:11:c9:3b:44:0e:62:80:de:36:a5:17:2e:32:10:ab:96:4e:
17:aa:af:55:93:80:c3:30:f3:d3:9a:33:a4:5d:7b:12:6a:71:
c4:a9:98:ba:30:3c:fa:6f:81:9a:83:3c:f7:db:d1:02:4e:a4:
51:20:7f:90:45:0d:17:7b:9a:d2:8b:3c:9f:6b:33:5c:a1:56:
81:54:30:05:77:39:3c:4b:cd:9b:45:8b:25:7c:42:9f:cd:e0:
52:15:8e:e7:63:2f:5d:19:e9:fe:3d:cd:38:56:1c:40:32:fc:
ab:32:f7:95:cb:aa:f6:af:59:7c:24:bc:04:bf:09:7c:a6:57:
e7:bd:96:fd:d9:26:b5:01:90:07:a8:cb:d1:d4:e2:23:d4:65:
e8:09:da:b5:f4:1b:49:e6:0b:67:a4:4b:f9:da:e1:90:12:8c:
39:a4:08:f1:17:c4:6c:77:c7:4b:b0:ca:45:9f:3a:80:8b:7e:
0e:55:0f:14:4f:c8:47:f9:3c:c7:56:bd:1c:58:8b:37:41:e9:
de:bf:93:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:42 2026 by rpki-client