Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
File: CiINqbbilYVbYn_qYQ4cthZGiUs.mft (raw, json)
Hash identifier: zRbPyl6/HhCBGWVdpWdi9goIgTesiSbHqjkSTk/LAZc=
Subject key identifier: 02:79:D0:BE:8C:20:2F:D7:D6:CC:40:05:BE:F5:89:CD:67:CE:0C:06
Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Certificate issuer: /CN=0a220da9b6e295855b627fea610e1cb61646894b
Certificate serial: 019CACEBAC78B3307BAB9840599B56AF7D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
Manifest number: 13C7
Signing time: Mon 02 Mar 2026 05:00:51 +0000
Manifest this update: Mon 02 Mar 2026 05:00:51 +0000
Manifest next update: Tue 03 Mar 2026 05:00:51 +0000
Files and hashes: 1: CiINqbbilYVbYn_qYQ4cthZGiUs.crl (hash: lHNSBPVwuM4NmeQKyfmfUHvL4bs7vj0NcySLeGhKeGI=)
2: rXLqqCZ5hf5h4ak7-J87ANzm0Nk.roa (hash: mVE+xG0sJPMu7e4f75e+8AtJaA+JDEMEjzG8yFMRLQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:ac:78:b3:30:7b:ab:98:40:59:9b:56:af:7d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b
Validity
Not Before: Mar 2 05:00:51 2026 GMT
Not After : Mar 3 05:00:51 2026 GMT
Subject: CN=0279d0be8c202fd7d6cc4005bef589cd67ce0c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0f:e1:cd:da:c2:4a:35:3f:af:18:29:9a:84:
49:5c:30:d9:87:39:bd:3f:15:23:df:8d:4c:44:ff:
04:11:5c:aa:7f:65:3c:e5:01:95:33:fd:47:5f:8c:
30:80:3f:b5:11:2f:8c:df:9b:c6:93:54:fe:2d:64:
e0:00:74:bd:63:1a:02:3a:69:1e:f6:53:ac:6c:9d:
b3:30:32:61:74:43:4d:3a:60:5b:03:c0:50:ce:4e:
3d:7d:f5:d5:21:22:ae:61:c7:31:3f:99:90:5f:68:
70:29:f4:6d:f0:6a:15:16:05:08:1b:5e:46:42:ef:
89:55:2c:98:ac:53:aa:51:30:89:80:10:c1:ae:90:
18:08:d0:30:33:c3:ea:ae:40:e7:95:e2:b1:e4:31:
27:df:51:9f:18:25:b9:4d:85:c8:1e:32:6c:db:17:
62:da:a6:b2:6a:2d:cf:34:ce:02:99:db:d9:d3:1d:
ce:44:57:84:80:a2:18:31:f3:85:fd:d5:48:5e:b2:
67:99:cd:e1:d0:06:60:7b:ee:db:03:33:00:82:ef:
f5:08:46:a8:54:aa:1f:49:99:29:69:b3:60:30:db:
52:50:fc:d1:27:9f:f8:a3:63:8d:3a:19:8d:64:cb:
23:49:1b:a1:fc:90:bb:76:a5:ba:d4:39:d6:a6:77:
b8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:79:D0:BE:8C:20:2F:D7:D6:CC:40:05:BE:F5:89:CD:67:CE:0C:06
X509v3 Authority Key Identifier:
keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ae:2e:91:7a:a3:44:22:f3:3e:2e:8d:36:fb:b6:a0:e9:50:
e8:57:27:cd:82:ba:23:3f:73:b2:21:75:4b:fc:a2:d5:92:47:
2f:24:a5:e6:41:78:11:53:c5:1c:97:cf:dc:3f:7c:88:41:c2:
8c:4e:9b:76:d4:7d:1e:11:59:90:f9:80:ee:2f:fc:cb:a2:8d:
31:3a:ab:37:7a:d9:78:de:32:0d:46:43:e4:1a:af:1b:9c:91:
3d:79:cb:d4:ee:09:53:2e:03:d2:05:2d:17:1d:75:2f:9c:05:
74:5c:bf:76:01:a9:01:a2:5c:31:d4:d4:ad:d5:ec:e8:77:66:
c8:d8:61:05:d5:97:ba:28:87:07:f4:0a:49:7d:cc:68:3e:c3:
ff:b6:bb:ca:cd:18:2b:bb:81:24:06:9f:7f:e4:d4:53:75:42:
03:e0:39:fa:b5:bf:6f:81:67:0c:73:ac:b8:34:9f:4b:b9:d1:
da:92:53:dd:42:f4:0e:97:1e:a9:63:5c:49:31:d0:7a:95:1d:
2c:25:60:08:e6:9c:87:b0:a8:8b:7d:62:73:66:45:1c:c1:be:
c5:e5:c8:3a:ba:69:d3:00:02:eb:10:5e:20:df:f5:b8:97:89:
e4:f9:ec:18:30:39:02:23:6e:83:05:ac:9e:63:bd:82:e5:e1:
48:b6:5c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:17:47 2026 by rpki-client