Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
File: CiA8bv-edCJgMJP4PmIR2pjHWCk.mft (raw, json)
Hash identifier: M1gbbmcLpRPoAbwtz+SF4RoLqUyzahvVOefrTx46dK8=
Subject key identifier: 22:EA:9C:D4:53:11:57:2F:92:61:98:2C:3E:76:E3:6A:0E:0F:2E:89
Authority key identifier: 0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
Certificate issuer: /CN=0a203c6eff9e7422603093f83e6211da98c75829
Certificate serial: 019FAA1A45D1139E294130917ECE43108ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
Manifest number: 0D67
Signing time: Tue 28 Jul 2026 19:01:16 +0000
Manifest this update: Tue 28 Jul 2026 19:01:16 +0000
Manifest next update: Wed 29 Jul 2026 19:01:16 +0000
Files and hashes: 1: CiA8bv-edCJgMJP4PmIR2pjHWCk.crl (hash: SjkvB0gTWKWuFegWmAindc14EGUEUm0MqLnP/t8DPMc=)
2: VjXNqFR-k-RE3bGhNFiBb6fGRIo.roa (hash: 3g7GHBy2J5M65ZKj6UpQWjQ6sqNGGq3QnOtwBXdJZgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:45:d1:13:9e:29:41:30:91:7e:ce:43:10:8e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a203c6eff9e7422603093f83e6211da98c75829
Validity
Not Before: Jul 28 19:01:16 2026 GMT
Not After : Jul 29 19:01:16 2026 GMT
Subject: CN=22ea9cd45311572f9261982c3e76e36a0e0f2e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cb:5e:b4:d2:e0:fe:4d:79:98:90:3a:e7:a0:
3d:7b:08:85:58:3e:40:f7:6e:0e:fd:48:f9:d4:80:
8d:c3:23:1c:75:37:48:21:24:c2:ad:78:63:0b:22:
03:68:c2:12:7b:64:a1:ef:bf:97:c7:0d:95:e1:94:
5f:4f:b4:93:51:92:bb:df:cc:0a:be:48:0b:88:6c:
a5:38:05:fb:90:3e:42:18:25:f6:fd:fa:30:2b:42:
e7:54:c3:63:f4:73:b9:4e:24:e2:32:3f:03:34:6e:
1a:64:de:14:0c:68:35:15:2f:ce:1f:fa:ec:d8:e3:
2d:40:68:be:2f:ea:b9:6a:f6:40:51:16:b0:e9:e6:
77:ff:1b:eb:55:69:40:01:12:37:10:b6:df:1c:ca:
f1:3f:c3:be:84:7c:14:09:4d:1d:c7:f1:ca:b8:15:
f4:ce:d3:1a:13:af:9d:f6:a7:4c:c7:f4:b4:de:fb:
07:1c:49:9f:5a:0f:b1:18:6b:e2:82:1f:f6:6b:da:
0b:18:6b:63:ac:19:bc:98:4f:37:e5:45:1f:11:ae:
fd:75:a5:d5:ae:68:dc:35:a6:46:4b:a1:29:5f:35:
a6:24:09:34:a1:9a:78:3a:a4:cd:53:52:f1:26:d0:
94:d5:6a:af:5e:cb:87:ad:15:df:bf:fd:51:65:c7:
d5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EA:9C:D4:53:11:57:2F:92:61:98:2C:3E:76:E3:6A:0E:0F:2E:89
X509v3 Authority Key Identifier:
keyid:0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a7:1c:0e:2b:e0:9b:ed:71:e8:2a:54:2b:e1:40:7d:36:27:
1a:4c:2d:a3:62:3f:b9:29:40:51:ad:03:64:61:58:f0:85:e5:
bd:c1:60:d1:bd:61:cc:3c:ea:ea:49:1c:44:20:77:55:83:b9:
2a:ae:80:19:a3:98:c6:6d:d1:05:47:bf:25:c3:30:65:ff:18:
3d:53:fb:e3:19:fc:0c:de:6a:fd:a8:8a:8c:19:a0:20:03:d8:
f2:73:e7:b7:06:54:e9:f9:3d:40:d2:eb:28:58:98:c0:6a:41:
8c:72:aa:f7:d4:c1:2f:c8:32:5b:0d:fc:0a:5f:70:71:e3:f0:
bb:49:16:aa:76:f3:78:68:ae:51:90:b2:ac:2b:96:ea:8f:91:
12:58:45:c9:4d:34:f9:8c:bc:c7:3b:22:22:d8:3f:82:6f:78:
86:9f:79:98:e6:0c:d9:04:c8:af:7c:94:71:f4:55:0e:98:75:
ce:04:45:bd:da:82:7b:9d:66:d7:d9:d3:15:9f:d4:cb:ca:b6:
2e:d3:c0:3c:5f:b7:e7:9f:07:c1:d4:d4:a1:fa:9d:a0:84:b9:
cc:db:bf:93:a2:a5:a2:e1:c1:82:0e:a7:72:89:8a:c0:63:b6:
60:11:7c:c0:3c:ac:7a:47:fb:c9:84:d2:10:bd:49:82:43:69:
b9:70:e9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:15 2026 by rpki-client