Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
File: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft (raw, json)
Hash identifier: qMxmzL9PJnyWbZW32LS21KXcJbsd/D9VMTVWq7D6PAU=
Subject key identifier: 2F:A1:89:FE:39:8C:CA:DB:58:DE:8B:76:79:87:2A:D3:B9:F9:A3:C9
Authority key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
Certificate issuer: /CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Certificate serial: 019D9A070AE966A3886D4E97D24EE837D0B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
Manifest number: 15FB
Signing time: Fri 17 Apr 2026 06:00:45 +0000
Manifest this update: Fri 17 Apr 2026 06:00:45 +0000
Manifest next update: Sat 18 Apr 2026 06:00:45 +0000
Files and hashes: 1: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl (hash: trYorOWbnZcDanHMgeqaJuJf228a3WiCf9Y7L8/Skbo=)
2: n7VFRuXxwgQnbFBuSUUBxwFhG6c.roa (hash: 6D6FdS3Q7oE33CoT/nZTuBGeDlU4d2ghqGCtrD1KUXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:0a:e9:66:a3:88:6d:4e:97:d2:4e:e8:37:d0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Validity
Not Before: Apr 17 06:00:45 2026 GMT
Not After : Apr 18 06:00:45 2026 GMT
Subject: CN=2fa189fe398ccadb58de8b7679872ad3b9f9a3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:68:43:49:70:a7:15:2b:6d:f8:83:7e:36:03:
cb:88:81:21:3b:ab:d3:02:5c:02:13:9a:15:6b:b9:
46:36:72:db:15:af:61:21:aa:51:3a:c9:49:64:85:
ea:f9:9a:54:cd:6b:40:5c:ea:74:e1:a1:7c:b8:0d:
6b:81:f8:46:7b:1b:2f:fe:77:c2:7f:e8:5a:28:4d:
55:01:e5:db:63:fc:0a:2a:b0:21:77:5e:6c:aa:39:
7d:ce:32:a2:5a:3d:f8:32:34:b0:30:a1:92:ca:8d:
32:15:59:d2:77:62:39:7a:e6:78:b6:34:8a:dd:05:
51:85:26:12:48:26:5d:f2:df:45:84:1d:65:a0:db:
43:24:9f:69:74:d4:d5:cc:a6:15:5c:c5:38:28:81:
dd:fe:ae:23:9d:7e:49:d0:71:b8:2c:07:94:1b:92:
6e:c0:6e:ea:12:61:38:c9:f7:1a:fe:97:24:a7:ee:
31:e5:2e:36:bd:a4:f2:a4:37:26:f9:ca:aa:05:7a:
97:3f:ea:5e:35:d2:84:b7:7c:1c:c7:f7:c5:42:8e:
41:b4:bf:45:87:0b:9f:cd:ff:0c:3a:46:d2:a8:82:
3d:03:68:2d:67:35:6f:ab:a0:6b:c0:5f:ab:59:25:
14:8e:a6:7f:a7:9a:7c:b1:72:1d:7c:0b:a4:48:8e:
fa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A1:89:FE:39:8C:CA:DB:58:DE:8B:76:79:87:2A:D3:B9:F9:A3:C9
X509v3 Authority Key Identifier:
keyid:0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1c:11:a3:a5:6c:1c:ea:d6:a3:26:c7:06:00:a7:f4:a5:c6:
b4:4a:50:22:f0:b4:3d:f3:e5:90:e3:c1:bd:b3:d8:01:43:ee:
fb:6e:4e:57:35:13:d9:b1:9b:ad:88:1d:6e:9d:cd:a9:31:fa:
d8:e3:d7:b7:46:c2:49:a1:32:1e:3d:98:2a:fd:de:22:4a:e8:
82:b7:7a:65:40:e5:68:06:e9:35:43:32:01:1a:f7:11:40:5d:
5b:76:0c:1d:dc:fc:74:6b:93:aa:04:48:b2:39:ab:bb:18:80:
a4:50:2b:23:77:df:d2:75:e8:5d:35:a7:e4:80:2d:c2:87:c2:
ad:47:60:1f:31:16:e7:f0:55:59:5f:39:64:56:0a:01:95:6c:
0a:d6:8d:bc:8d:ba:06:b8:12:29:be:89:dd:e6:4c:97:60:f4:
09:3d:87:aa:4d:43:17:dc:2b:37:be:77:65:71:b3:03:30:5c:
cc:a3:34:b3:81:16:86:45:b2:b0:dc:69:d1:d8:89:38:a7:3e:
d3:5b:b9:5c:ec:24:f2:ca:56:a1:50:7b:da:93:98:3c:aa:53:
15:61:bd:23:8d:b8:f4:89:b5:b4:60:91:e9:ed:04:48:44:68:
b9:e8:c5:df:0c:be:54:f0:13:21:73:39:d5:18:27:b7:9d:40:
1d:85:0d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:23 2026 by rpki-client