Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
File: CiINqbbilYVbYn_qYQ4cthZGiUs.mft (raw, json)
Hash identifier: tcI+85y8ZZPI8f4KM2UxKLhcqtZnUHHy0C6pNowjZIM=
Subject key identifier: 1F:D0:72:ED:32:86:B4:4F:45:B4:73:D6:DC:91:57:CD:26:52:BE:42
Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Certificate issuer: /CN=0a220da9b6e295855b627fea610e1cb61646894b
Certificate serial: 019EC1EDE0A7DCF9435E1083E2D029E054DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
Manifest number: 14DB
Signing time: Sat 13 Jun 2026 17:00:52 +0000
Manifest this update: Sat 13 Jun 2026 17:00:52 +0000
Manifest next update: Sun 14 Jun 2026 17:00:52 +0000
Files and hashes: 1: CiINqbbilYVbYn_qYQ4cthZGiUs.crl (hash: U8UNRA9Qy8cN5BfvkH2OdxW4LSkVT9lnz7BYe86Pso8=)
2: rXLqqCZ5hf5h4ak7-J87ANzm0Nk.roa (hash: mVE+xG0sJPMu7e4f75e+8AtJaA+JDEMEjzG8yFMRLQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:e0:a7:dc:f9:43:5e:10:83:e2:d0:29:e0:54:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b
Validity
Not Before: Jun 13 17:00:52 2026 GMT
Not After : Jun 14 17:00:52 2026 GMT
Subject: CN=1fd072ed3286b44f45b473d6dc9157cd2652be42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f4:1f:20:89:96:b4:b8:2c:c7:9d:fa:f7:0c:
4e:87:54:45:6e:2f:b9:b9:56:09:2b:98:34:e5:17:
0a:b0:88:19:3c:fa:66:7b:e7:8e:31:4f:d6:37:cf:
66:41:1e:3a:30:32:f1:c4:ac:01:41:25:0e:04:28:
95:5f:ef:98:f8:f7:ff:64:82:2b:67:3b:cc:d5:ce:
2c:70:4b:db:ed:15:14:fd:73:6c:40:c9:95:1b:0f:
b0:9f:2d:e8:c1:83:fd:70:05:5c:df:0a:11:60:46:
ae:4d:59:29:94:b7:96:c7:d0:31:7b:77:fa:30:46:
b8:6a:f4:bb:4e:96:a8:e4:ae:96:4d:73:a6:7f:06:
0f:e6:d6:fd:80:d7:c2:2d:cd:d5:84:2a:a8:78:5d:
18:d0:f3:64:40:5f:86:b7:d4:1c:1a:e5:7e:ea:a9:
10:9f:b4:3a:8c:71:57:eb:ed:43:61:4f:87:e4:12:
d3:d4:6e:70:0a:03:a6:a3:45:4b:40:ca:69:6b:2f:
07:0c:69:dd:04:64:c6:1d:ed:bb:c6:7e:b3:db:12:
e7:56:52:8c:87:70:bc:c0:d0:59:c0:6f:65:0d:cd:
39:de:d9:ec:24:4b:9f:4b:da:34:3c:2f:31:56:3b:
cf:88:66:81:76:09:a2:c9:fa:16:80:b4:06:73:8a:
33:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D0:72:ED:32:86:B4:4F:45:B4:73:D6:DC:91:57:CD:26:52:BE:42
X509v3 Authority Key Identifier:
keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:41:8e:73:47:4f:ee:72:16:46:8d:44:4c:bd:08:f7:99:d1:
3b:40:47:5f:22:48:72:4d:2e:4c:27:13:bb:eb:9e:01:b7:fb:
40:bf:a5:0f:71:d7:bd:9c:21:01:b7:5b:43:93:82:48:3b:2f:
73:f2:fc:0e:08:95:1f:ae:2d:c2:20:de:5e:bb:a5:99:78:c7:
88:09:90:1e:e5:5f:6c:87:2a:41:d9:1b:0e:86:3c:97:3e:f4:
57:2d:a2:0d:90:9b:e8:c7:d5:77:cd:18:16:08:fb:6b:4b:9a:
26:6f:34:6a:98:f2:de:31:1a:55:d1:f9:93:5d:53:fb:47:0f:
25:42:b5:ee:60:10:49:b6:2c:58:76:ee:70:11:af:39:36:01:
f8:fb:e8:72:39:91:e4:e0:77:54:de:5c:f9:63:97:e5:63:80:
ff:27:21:cd:32:65:24:97:ab:fa:2e:9b:ec:86:ce:43:60:37:
31:c6:dc:98:82:83:e0:9a:d6:48:02:b9:ac:83:f2:f7:b1:5c:
9c:34:e7:d9:4f:16:f6:d5:e2:53:14:4a:e1:cb:22:ef:26:d0:
3d:f7:a0:70:ff:6f:ab:44:6e:ec:21:e8:70:40:0d:f5:29:43:
f2:00:ff:2c:b4:f8:82:ec:da:d6:16:79:75:14:bb:5a:d1:08:
39:7a:e0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:26:58 2026 by rpki-client