Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
File: cIYS6HA6ZgiJyg9FfPG02KDVO00.mft (raw, json)
Hash identifier: V/9/g0gBAB0N7k81qrjuNhcWcedSf5XB2yD3fwQ2Olk=
Subject key identifier: 77:93:C4:2E:CF:B9:08:81:C3:2A:86:61:71:44:29:FD:50:DC:10:6A
Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Certificate serial: 019CAA8FCA58067523E0FAC779DCF7614ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
Manifest number: 0EEA
Signing time: Sun 01 Mar 2026 18:01:15 +0000
Manifest this update: Sun 01 Mar 2026 18:01:15 +0000
Manifest next update: Mon 02 Mar 2026 18:01:15 +0000
Files and hashes: 1: cIYS6HA6ZgiJyg9FfPG02KDVO00.crl (hash: vPc3Zo5uAfS9QzilQ1lPhtX7Gcv90d1pVofKJieNIQ8=)
2: k_Yqfb61yxFVsUAlfMaFEyavSv4.roa (hash: zO6a703k+u6Hm7KUfbGiT3ypzSzlcRhCCpgBjvvWhs4=)
3: muW9cBNMeWZbUzZWm3451nPmZy8.roa (hash: Une3GtFaZuE/Q/AgcVr8m9ytRRPpxQYRTGkYYful7io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:ca:58:06:75:23:e0:fa:c7:79:dc:f7:61:4e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Validity
Not Before: Mar 1 18:01:15 2026 GMT
Not After : Mar 2 18:01:15 2026 GMT
Subject: CN=7793c42ecfb90881c32a8661714429fd50dc106a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:55:9c:4e:b0:a9:9f:5c:73:a5:53:b9:d3:
ea:3d:63:7f:65:7c:05:29:8b:c8:9f:2c:33:ed:24:
45:ae:79:36:80:09:98:0f:51:0b:64:28:69:5a:2b:
5f:e0:00:89:60:40:08:a1:61:85:99:b9:80:91:30:
1f:75:c4:d7:e9:f5:c4:3d:57:98:ba:c2:cf:8d:3e:
ff:49:aa:ff:23:95:56:0f:22:cc:83:43:41:c7:39:
4b:be:13:21:f2:e6:22:8c:e9:d0:96:d3:56:34:06:
46:2a:2a:d0:64:86:16:36:29:d1:67:1f:47:7d:be:
a4:e4:bb:7f:9f:d7:c1:25:c1:ca:72:5a:d9:c9:f2:
ea:c1:74:06:8c:15:93:8b:29:3a:cf:91:c7:dc:ba:
05:79:85:d1:36:97:64:25:8c:18:48:26:47:b1:b4:
bf:c6:2f:e7:a2:73:e3:41:b2:96:e2:3f:7c:76:b5:
c9:75:44:88:e6:1b:09:82:69:b9:5c:b9:a6:e6:37:
52:1f:e6:32:f7:2a:04:83:db:23:a3:d4:a5:09:0b:
f1:6a:d7:0a:43:32:d5:c1:fd:19:c8:22:37:bb:fe:
8b:0f:ee:c7:8c:28:a9:61:bb:6b:17:75:4a:f7:83:
a2:ad:c7:7e:26:fc:71:d8:ef:76:6e:c7:c3:54:25:
14:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:93:C4:2E:CF:B9:08:81:C3:2A:86:61:71:44:29:FD:50:DC:10:6A
X509v3 Authority Key Identifier:
keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d2:a5:cf:65:64:0e:36:34:e7:12:2b:0a:5d:ec:51:f4:c0:
de:d0:82:74:8d:18:8e:4c:74:ed:7a:c4:5e:c0:31:00:e3:5e:
fb:5e:bb:2e:b6:d0:15:65:bb:d9:fe:a4:18:35:6b:b4:20:94:
ad:4c:42:09:99:6f:e9:25:fd:c4:d0:61:97:8f:47:10:05:21:
fa:08:e4:e8:76:52:81:f3:5a:de:06:01:dc:44:ab:6d:be:55:
1a:b7:17:dd:fc:52:70:27:a1:41:69:12:de:ba:9c:4e:7d:5f:
47:30:bf:36:a2:c4:eb:06:2a:96:33:e0:3b:25:01:81:4c:ac:
4e:aa:68:bd:48:3e:67:65:12:e0:ec:5f:4b:dd:77:8f:1a:bf:
02:0f:06:b5:47:2f:8c:00:45:13:46:2a:09:6d:dd:1c:c3:40:
19:d5:8f:f4:8c:9d:a7:7e:b0:03:bc:dd:5a:c5:ac:d1:4c:8f:
a2:0f:c8:ca:a4:40:00:76:78:ac:3f:6e:e2:ac:6f:e5:7e:ed:
27:17:7a:ff:56:f5:64:86:31:39:f6:83:5f:e3:4b:fe:95:17:
b0:70:f3:aa:f5:61:0a:24:d7:6f:db:39:90:73:93:c3:64:10:
e8:55:ab:f8:d0:55:c5:f5:cf:8f:de:1d:15:6d:0c:b7:f8:23:
b4:e3:00:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:44 2026 by rpki-client