Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
File: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft (raw, json)
Hash identifier: MnCnlg3hCexgT+JA4PSzgNJvRO93a69F4ppa0six6HU=
Subject key identifier: BC:AF:F7:DA:2C:B1:37:42:3B:66:EB:0C:D5:1F:97:4C:70:4F:FC:A6
Authority key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
Certificate issuer: /CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Certificate serial: 01A0C5208FD1F3DA042D4BE1EC330CD31432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
Manifest number: 179F
Signing time: Mon 21 Sep 2026 18:00:40 +0000
Manifest this update: Mon 21 Sep 2026 18:00:40 +0000
Manifest next update: Tue 22 Sep 2026 18:00:40 +0000
Files and hashes: 1: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl (hash: rAIMHb8eif09iBCSsSouIcTC+QoZCdugzWEH4kgTnho=)
2: n7VFRuXxwgQnbFBuSUUBxwFhG6c.roa (hash: 6D6FdS3Q7oE33CoT/nZTuBGeDlU4d2ghqGCtrD1KUXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:20:8f:d1:f3:da:04:2d:4b:e1:ec:33:0c:d3:14:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Validity
Not Before: Sep 21 18:00:40 2026 GMT
Not After : Sep 22 18:00:40 2026 GMT
Subject: CN=bcaff7da2cb137423b66eb0cd51f974c704ffca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:1c:5f:87:83:37:eb:0a:c1:e5:f5:8a:b3:
76:7e:0d:88:52:07:f1:53:47:bb:bc:66:65:90:8f:
e0:a5:22:72:3f:e2:52:c3:23:2b:cc:09:91:1f:5d:
67:6a:87:d2:07:d5:20:41:0c:13:84:5d:58:9f:8a:
01:28:33:c9:8b:37:19:04:8d:e2:3a:08:d8:4d:9b:
01:35:c5:67:67:9f:fd:a2:e1:4f:61:d8:ea:8d:1f:
e8:73:06:5a:92:59:20:b9:11:d0:d3:af:ce:6b:87:
59:ef:cf:64:a1:b0:4e:f3:e0:61:a2:82:17:cd:d3:
29:e7:dc:cf:dc:0f:6e:18:8a:1c:4a:f3:76:d7:87:
89:e5:1e:50:b8:a1:58:86:e4:00:97:fb:32:b5:1b:
2d:4e:72:da:98:df:3a:5b:91:f2:4e:71:5d:8e:87:
b6:29:f5:f1:cc:42:16:3d:2d:25:99:67:d0:c4:d8:
c4:b5:e2:ab:a9:3b:e1:5a:1a:d4:2c:d2:8b:19:76:
7d:2f:fe:71:a7:fc:e2:65:ed:67:26:c8:d0:26:9d:
3e:ca:5a:3f:8d:da:a0:71:5b:6b:05:81:17:be:de:
28:07:f3:50:ca:da:2c:c0:17:d2:f3:31:82:88:f8:
c8:ee:e3:17:bb:c9:68:b6:fb:38:eb:ab:88:d1:5c:
32:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AF:F7:DA:2C:B1:37:42:3B:66:EB:0C:D5:1F:97:4C:70:4F:FC:A6
X509v3 Authority Key Identifier:
keyid:0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c5:d4:0f:8b:e6:11:aa:b0:38:0b:12:f5:9a:1c:ff:41:7c:
9d:9f:f5:6b:44:72:af:5d:a0:9a:b8:bf:bc:31:a2:7f:54:6e:
78:e6:71:a2:68:5f:7e:30:39:f3:00:a1:b2:fc:24:0d:9d:2a:
fa:5d:a6:62:a9:a5:b0:ed:1c:a4:f3:5d:d3:12:0e:7f:90:6f:
c0:5a:7d:62:34:27:2c:1b:76:fb:10:25:28:11:ef:e9:be:95:
36:d4:15:ec:41:a1:12:25:db:61:61:93:e3:0b:e2:d8:94:08:
42:a9:6e:e4:fc:43:fe:3b:31:ae:25:8f:67:a7:83:63:a1:15:
71:a6:55:f6:a3:3f:b0:4f:12:78:e2:fb:c3:f2:8a:b0:54:26:
11:3f:97:59:18:8a:69:50:82:83:ed:40:cf:12:fb:31:78:9c:
7a:9c:42:c0:d8:b5:b1:33:24:05:6f:3a:28:20:83:8b:31:ce:
0c:cc:81:f3:58:dd:25:bf:c0:d2:06:0c:5e:80:2c:e7:45:49:
3f:bc:95:0d:84:8b:16:cd:cd:c7:dd:25:22:c5:e7:d9:23:f9:
86:8e:c7:27:b3:31:1f:e7:de:93:e9:05:0d:00:87:47:68:a1:
ce:2f:7c:fe:91:5a:8a:4a:67:ba:a4:63:29:70:e6:29:47:e8:
85:9f:b6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:50:23 2026 by rpki-client