Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
File: CiINqbbilYVbYn_qYQ4cthZGiUs.mft (raw, json)
Hash identifier: FCErLM8fPEBSivIH06aqcPEFEm5inx8JxkuX8HXp90s=
Subject key identifier: 52:F7:29:58:DF:AF:40:C1:40:D6:8B:2F:31:2A:FE:42:BF:72:13:9E
Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Certificate issuer: /CN=0a220da9b6e295855b627fea610e1cb61646894b
Certificate serial: 019FA9ABAF8FCE490195F365F612AE9790B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
Manifest number: 1553
Signing time: Tue 28 Jul 2026 17:00:28 +0000
Manifest this update: Tue 28 Jul 2026 17:00:28 +0000
Manifest next update: Wed 29 Jul 2026 17:00:28 +0000
Files and hashes: 1: CiINqbbilYVbYn_qYQ4cthZGiUs.crl (hash: pQb+ml+sOxCeepNaw4SkllFL+MlU36mqg87RAE8Vss0=)
2: rXLqqCZ5hf5h4ak7-J87ANzm0Nk.roa (hash: mVE+xG0sJPMu7e4f75e+8AtJaA+JDEMEjzG8yFMRLQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:af:8f:ce:49:01:95:f3:65:f6:12:ae:97:90:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b
Validity
Not Before: Jul 28 17:00:28 2026 GMT
Not After : Jul 29 17:00:28 2026 GMT
Subject: CN=52f72958dfaf40c140d68b2f312afe42bf72139e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:a6:5a:f1:cf:48:82:7c:b3:fa:89:b5:59:
87:d7:1f:bd:f3:bf:b7:ae:c5:3f:29:53:92:dc:82:
20:06:8f:0e:21:7e:a1:59:42:79:5e:a9:45:dc:58:
d1:7b:43:ed:78:2d:1f:4b:3f:c1:31:34:b4:94:6c:
ec:77:f2:ae:75:2d:10:2f:31:98:55:57:10:45:20:
cf:bb:4e:4d:e6:b0:bb:b4:3b:0c:f9:d1:98:67:e0:
51:99:de:5f:71:d6:f0:70:be:ff:58:b4:51:3a:4c:
30:80:b5:1d:bc:f4:05:6b:15:98:dd:94:89:de:52:
9f:15:01:9f:07:fb:7c:ee:f5:d6:ca:09:b7:f8:8c:
4f:79:a8:b0:7f:b8:80:2e:08:b3:3e:ad:44:4f:bc:
3e:0d:e4:1e:20:27:39:ec:28:3a:ce:c5:a8:eb:a2:
50:82:14:d2:91:57:84:bb:7d:3d:c3:37:28:71:1f:
8e:07:1a:1c:ac:35:1e:30:31:c1:95:23:0c:27:51:
de:3d:62:0e:a2:a7:3a:58:ab:98:5d:eb:c6:64:d4:
0b:aa:c4:c7:de:78:33:d1:3d:48:73:42:d4:6e:92:
37:33:d1:79:36:23:f6:97:05:f6:68:1d:6f:79:ae:
4f:28:cf:68:fb:b2:56:ec:11:8e:4a:30:78:b0:dd:
4e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F7:29:58:DF:AF:40:C1:40:D6:8B:2F:31:2A:FE:42:BF:72:13:9E
X509v3 Authority Key Identifier:
keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:72:47:d1:60:a1:ef:c8:12:5d:2f:5c:4a:44:22:dc:cb:f2:
b2:fb:7c:d9:93:a3:f2:a3:7d:20:d5:c6:5d:8a:b5:e8:ef:5c:
cd:78:8b:87:f5:3b:01:80:6f:23:f2:2f:4e:53:41:22:ed:10:
1b:06:9e:a9:d2:3a:5c:e8:66:39:15:fd:f1:cc:76:37:10:34:
bc:fc:fb:ee:d3:0d:49:01:3a:f2:87:83:d7:ed:16:9c:4c:b0:
ec:04:34:b2:cd:67:27:2f:29:9f:03:78:4f:a3:20:37:b1:3b:
36:15:9c:f1:67:c2:b0:4b:f8:3a:6c:f1:66:da:d7:d7:1f:bc:
7d:6e:7e:24:96:e2:ab:e7:90:86:59:81:56:05:43:ad:96:c0:
08:d3:a4:1a:57:29:b5:75:4d:93:14:7e:01:82:27:4c:ff:d9:
fb:8c:73:29:ad:ee:0d:f5:e3:8d:ee:fd:00:52:10:93:b3:87:
74:e8:2b:e6:f7:03:be:91:60:69:0b:35:9b:f0:99:22:59:97:
1f:35:f8:89:a7:94:1d:dd:6e:45:32:35:1a:90:41:a6:60:b8:
07:fb:84:3c:2a:7f:4d:cb:b4:79:7c:e1:87:53:e6:b9:93:1b:
e1:ce:8d:70:92:96:21:b1:f1:d2:e7:17:53:b6:08:f4:21:95:
85:7d:f8:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pq6+PzkkBlfNl9hKul5C5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMjIwZGE5YjZlMjk1ODU1YjYyN2ZlYTYxMGUxY2I2MTY0
Njg5NGIwHhcNMjYwNzI4MTcwMDI4WhcNMjYwNzI5MTcwMDI4WjAzMTEwLwYDVQQD
Eyg1MmY3Mjk1OGRmYWY0MGMxNDBkNjhiMmYzMTJhZmU0MmJmNzIxMzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3OmWvHPSIJ8s/qJtVmH1x+987+3
rsU/KVOS3IIgBo8OIX6hWUJ5XqlF3FjRe0PteC0fSz/BMTS0lGzsd/KudS0QLzGY
VVcQRSDPu05N5rC7tDsM+dGYZ+BRmd5fcdbwcL7/WLRROkwwgLUdvPQFaxWY3ZSJ
3lKfFQGfB/t87vXWygm3+IxPeaiwf7iALgizPq1ET7w+DeQeICc57Cg6zsWo66JQ
ghTSkVeEu309wzcocR+OBxocrDUeMDHBlSMMJ1HePWIOoqc6WKuYXevGZNQLqsTH
3ngz0T1Ic0LUbpI3M9F5NiP2lwX2aB1vea5PKM9o+7JW7BGOSjB4sN1OXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFL3KVjfr0DBQNaLLzEq/kK/chOeMB8GA1UdIwQY
MBaAFAoiDam24pWFW2J/6mEOHLYWRolLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85ODE4MzktOWRmYS00MmQzLWFjYjEt
NjIxODgyOGVkODk2LzEvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85ODE4MzktOWRmYS00MmQzLWFjYjEtNjIxODgyOGVkODk2
LzEvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3JH0WCh
78gSXS9cSkQi3Mvysvt82ZOj8qN9INXGXYq16O9czXiLh/U7AYBvI/IvTlNBIu0Q
GwaeqdI6XOhmORX98cx2NxA0vPz77tMNSQE68oeD1+0WnEyw7AQ0ss1nJy8pnwN4
T6MgN7E7NhWc8WfCsEv4OmzxZtrX1x+8fW5+JJbiq+eQhlmBVgVDrZbACNOkGlcp
tXVNkxR+AYInTP/Z+4xzKa3uDfXjje79AFIQk7OHdOgr5vcDvpFgaQs1m/CZIlmX
HzX4iaeUHd1uRTI1GpBBpmC4B/uEPCp/Tcu0eXzhh1PmuZMb4c6NcJKWIbHx0ucX
U7YI9CGVhX34uQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:12 2026 by rpki-client