Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
File: CiINqbbilYVbYn_qYQ4cthZGiUs.mft (raw, json)
Hash identifier: 3d238/k0GE/Oq7ofOlZsSJokYxQfBxCgDGhbtkQjqg4=
Subject key identifier: D1:C5:A5:0E:D1:31:FF:26:C9:9A:97:18:06:FE:C9:AD:06:95:69:1B
Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Certificate issuer: /CN=0a220da9b6e295855b627fea610e1cb61646894b
Certificate serial: 019D9A74AD545761B9F4F158A3201D648FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
Manifest number: 1442
Signing time: Fri 17 Apr 2026 08:00:30 +0000
Manifest this update: Fri 17 Apr 2026 08:00:30 +0000
Manifest next update: Sat 18 Apr 2026 08:00:30 +0000
Files and hashes: 1: CiINqbbilYVbYn_qYQ4cthZGiUs.crl (hash: C/BDOyqEezNHvMMsUD8KReqqKlrEPGAS4jPj4ZTXxBw=)
2: rXLqqCZ5hf5h4ak7-J87ANzm0Nk.roa (hash: mVE+xG0sJPMu7e4f75e+8AtJaA+JDEMEjzG8yFMRLQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:ad:54:57:61:b9:f4:f1:58:a3:20:1d:64:8f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b
Validity
Not Before: Apr 17 08:00:30 2026 GMT
Not After : Apr 18 08:00:30 2026 GMT
Subject: CN=d1c5a50ed131ff26c99a971806fec9ad0695691b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:99:ea:bd:66:0f:82:6d:a8:df:ce:6d:45:c0:
4a:94:d9:e6:8e:5f:c6:0b:a7:0a:c8:fc:13:23:76:
7c:78:a4:4b:92:3c:e6:56:e2:10:f4:54:db:12:4d:
38:ad:1e:56:68:9f:d1:03:01:ce:31:c1:55:53:79:
f4:d1:d2:fe:25:c6:53:73:50:6b:89:0a:23:28:13:
24:0b:14:e3:3b:23:dd:a9:e1:87:f4:ec:bc:c6:99:
6d:d4:1a:88:68:49:41:2a:ca:c4:b9:e2:b5:f4:86:
71:2d:e5:20:c4:d1:69:27:bd:b0:b8:ef:22:4c:bc:
71:dc:86:6f:68:32:9a:72:e1:4d:f9:46:f2:14:f8:
c1:44:f7:64:26:be:8b:45:25:22:cd:49:c9:ac:f4:
ce:fa:91:ad:c4:6f:80:ba:0a:bd:03:c4:b8:d3:c8:
8a:21:7c:48:ab:1a:a4:f6:2c:54:01:25:e2:59:6c:
ce:33:8d:fb:0a:4e:6d:49:e1:c4:6b:56:28:b5:c2:
ac:05:5d:2a:ef:bc:97:2b:77:75:44:ec:ed:1c:90:
26:f4:76:82:b4:db:7d:61:77:5c:21:41:16:cf:98:
02:d7:78:f3:d6:2b:a5:27:93:96:d7:fd:d1:d9:5f:
7c:b4:22:95:85:5a:48:5b:2d:09:d0:48:b9:62:5a:
19:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C5:A5:0E:D1:31:FF:26:C9:9A:97:18:06:FE:C9:AD:06:95:69:1B
X509v3 Authority Key Identifier:
keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7c:fc:05:73:c4:91:87:18:9e:b5:e7:65:54:7d:54:94:c4:
2f:b1:07:1f:62:13:bc:7d:00:1a:42:4b:39:a0:7d:ea:bb:45:
6e:ea:05:85:9c:4e:5d:3c:82:72:f0:7e:aa:7d:85:1d:5f:2d:
60:d6:37:58:7c:25:85:34:af:f3:63:34:da:50:0e:74:2d:38:
47:d5:41:88:e6:3c:80:88:45:e1:c2:a5:eb:1c:13:03:d4:bb:
d0:c1:a8:09:2e:ca:2b:29:69:ef:cf:ac:ec:bc:d0:e4:49:76:
a8:40:3f:41:85:a5:3b:fe:61:8f:ef:dd:91:c0:f7:44:86:cc:
df:fa:13:f8:b0:d3:17:65:3a:2b:9c:db:5e:85:62:87:b6:ef:
db:f3:8d:b1:6e:5c:26:70:c4:9d:d1:28:85:2a:cb:0c:af:6a:
90:b6:05:e9:6f:1e:f7:8c:da:3c:bd:c6:22:30:f2:47:42:cb:
42:b3:35:9e:8e:f7:40:59:89:b0:4a:39:b6:42:9a:01:3c:55:
f6:a9:5f:d1:27:dd:a7:cc:51:a3:b3:cd:f3:a3:83:fa:16:fa:
6f:69:88:22:90:9d:45:e9:6d:1c:a0:63:22:97:d3:79:46:0a:
91:ea:9f:9a:3c:4f:8e:9e:2e:41:52:3d:7a:56:46:96:19:60:
d4:8a:a0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:40:02 2026 by rpki-client