Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
File: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft (raw, json)
Hash identifier: 1hcR7adPuMgGKXH4sMnFoTejiqNVwCPRk+MuSajtkb8=
Subject key identifier: 27:8D:8A:52:FE:0A:6E:BD:1C:8B:56:09:C9:AB:17:4C:32:F7:B2:25
Authority key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
Certificate issuer: /CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Certificate serial: 019FA93DBF17EB53FB5E1B70C7CFB73C8560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
Manifest number: 170C
Signing time: Tue 28 Jul 2026 15:00:23 +0000
Manifest this update: Tue 28 Jul 2026 15:00:23 +0000
Manifest next update: Wed 29 Jul 2026 15:00:23 +0000
Files and hashes: 1: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl (hash: 9uCMiW394Jkg0Cd/VIHaMt1LWeK/9zsyPKrAPsPo8cU=)
2: n7VFRuXxwgQnbFBuSUUBxwFhG6c.roa (hash: 6D6FdS3Q7oE33CoT/nZTuBGeDlU4d2ghqGCtrD1KUXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:bf:17:eb:53:fb:5e:1b:70:c7:cf:b7:3c:85:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Validity
Not Before: Jul 28 15:00:23 2026 GMT
Not After : Jul 29 15:00:23 2026 GMT
Subject: CN=278d8a52fe0a6ebd1c8b5609c9ab174c32f7b225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5f:d5:ac:fa:e1:fb:33:1b:24:fd:35:ce:21:
f7:cd:aa:b6:4c:d0:09:0f:8c:31:25:f7:cb:58:42:
85:e4:a1:38:69:a3:d6:76:4e:f2:7c:41:da:ab:e6:
c9:c6:5a:4f:13:32:34:d6:29:69:8b:18:f1:4d:a5:
f4:a2:47:f3:4d:75:62:86:65:d1:84:a3:ff:c3:ea:
06:5e:06:9e:e3:9e:ec:59:58:e0:50:a7:29:79:1c:
cf:dd:b7:9e:16:09:3d:e4:f1:34:c7:0a:6c:b1:a6:
28:67:e7:78:1b:20:e4:56:7d:aa:c6:57:e0:ee:d8:
59:3c:f5:3c:7d:a1:58:89:ab:57:b8:30:2d:f2:96:
ea:4e:2e:0c:43:63:9d:5e:b8:fe:f2:ea:45:22:ca:
9d:56:b0:96:b5:a2:04:dd:7e:e4:4e:a6:22:2f:c6:
09:71:0e:bd:01:14:0a:c3:4a:61:6b:74:0d:83:0e:
4c:05:e3:36:52:83:ca:e2:18:c4:ce:90:2a:fc:93:
1f:49:1e:f2:c6:b8:d7:44:fe:35:a9:03:04:d6:9f:
73:4d:fa:48:14:18:a0:70:6f:21:04:e6:3c:fe:56:
9d:e8:d1:b2:1e:87:64:c1:b8:42:fa:4c:68:34:88:
16:ed:a1:df:73:44:3c:31:b5:07:66:55:8a:33:78:
56:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8D:8A:52:FE:0A:6E:BD:1C:8B:56:09:C9:AB:17:4C:32:F7:B2:25
X509v3 Authority Key Identifier:
keyid:0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7b:19:af:7a:e7:08:b7:a8:b7:70:78:bf:ae:8c:f3:fe:45:
0c:22:ba:c6:5a:db:bc:3f:ca:95:c6:13:14:9f:25:4c:99:4f:
11:07:01:3e:59:8f:1b:a7:c0:cb:28:c6:79:5b:b4:6f:9b:bc:
50:6d:8c:f3:65:33:4a:57:c0:da:5e:68:f3:22:96:cc:3c:3e:
72:65:f6:a0:b4:fb:8a:70:a7:d6:c0:cb:e4:94:02:00:08:88:
f0:2d:99:9a:1a:2e:61:d6:32:b6:1c:7e:54:6b:68:98:15:33:
a6:83:57:02:96:32:0f:02:3c:10:5d:0d:7c:84:c9:44:86:a3:
f4:0e:57:45:b5:e7:8b:47:8f:38:68:83:9c:49:03:ef:b5:54:
ff:a6:7d:77:f0:49:8a:07:f6:38:5f:85:4a:8c:ae:f9:58:37:
c1:6a:2d:40:a7:dc:2f:d3:e4:7a:39:ed:1f:17:7f:d8:3f:93:
de:d1:70:01:e0:12:2f:56:46:fd:41:1b:02:d2:cc:6b:17:0c:
32:f5:3a:9f:c2:15:cf:94:3e:30:0c:10:99:ad:22:37:2d:32:
6c:43:1a:63:a8:49:c9:bd:b2:c6:0c:5a:57:cc:47:18:40:cc:
72:9b:97:d6:b4:d3:4f:d8:15:9a:4e:f3:4f:69:cf:e2:8d:01:
b6:83:ab:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:32 2026 by rpki-client