Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
File: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft (raw, json)
Hash identifier: hd6FPO95Lu1eoGBBAN6fjy0T3cSvmCYkiDmNvWHESBU=
Subject key identifier: D7:43:67:8F:EA:4B:F1:06:3F:44:C9:7E:00:2F:65:E9:4D:0E:4B:F1
Authority key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
Certificate issuer: /CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Certificate serial: 019EBDA350F460975BF7486D256B625E0441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
Manifest number: 1692
Signing time: Fri 12 Jun 2026 21:00:57 +0000
Manifest this update: Fri 12 Jun 2026 21:00:57 +0000
Manifest next update: Sat 13 Jun 2026 21:00:57 +0000
Files and hashes: 1: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl (hash: n09X1nSPMfgKugpoaFL0b4IeZyjnfLAaYzc05B3SXAM=)
2: n7VFRuXxwgQnbFBuSUUBxwFhG6c.roa (hash: 6D6FdS3Q7oE33CoT/nZTuBGeDlU4d2ghqGCtrD1KUXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a3:50:f4:60:97:5b:f7:48:6d:25:6b:62:5e:04:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Validity
Not Before: Jun 12 21:00:57 2026 GMT
Not After : Jun 13 21:00:57 2026 GMT
Subject: CN=d743678fea4bf1063f44c97e002f65e94d0e4bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:3a:8f:ac:97:c2:e9:2c:3a:b4:3e:18:39:dc:
00:12:fc:d9:25:ff:ec:ea:bb:ea:c2:b0:fe:0b:50:
8a:0d:72:93:a9:a5:b6:df:0d:79:1b:77:bd:6a:bc:
13:f5:31:23:58:ae:38:06:b3:32:29:13:72:f6:75:
c4:8a:27:bf:a0:3a:5c:0c:2a:f0:50:46:97:4d:97:
b6:99:fd:73:b7:c1:2d:e1:12:98:45:44:2d:c2:a7:
5a:62:ff:82:fb:35:5e:b1:07:e4:a4:21:29:22:e8:
2f:9c:bf:e2:a5:89:56:e5:5a:e6:7e:af:6b:0f:f6:
42:49:4b:8c:fb:97:64:93:79:3c:83:bd:71:b6:5c:
80:7a:5b:5f:8b:04:1a:3d:a2:2b:05:34:aa:f9:6d:
2e:3c:c7:70:c4:e7:ae:71:15:c1:7d:1a:f7:e8:9e:
37:84:0a:92:5e:cf:f4:9d:41:5d:36:56:b8:64:bf:
ed:56:93:3b:25:77:a5:63:43:51:44:c4:e2:3e:77:
66:c0:68:48:ef:54:17:6c:43:c9:80:09:7d:7a:8c:
22:7d:7e:cb:d5:12:12:26:f2:a0:c6:4f:92:62:c2:
88:03:e4:67:b7:ad:98:1c:e9:57:59:e2:db:bc:bb:
2d:88:a2:e7:a8:06:e2:c0:c1:07:54:1c:a5:46:26:
f4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:43:67:8F:EA:4B:F1:06:3F:44:C9:7E:00:2F:65:E9:4D:0E:4B:F1
X509v3 Authority Key Identifier:
keyid:0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e5:8d:02:d8:b8:14:c6:fc:f8:b6:80:71:27:a9:f0:79:5e:
a4:ca:45:9b:de:4a:7d:34:66:5e:b9:8e:5c:48:52:53:85:b9:
1c:f4:cc:14:90:de:50:c8:c5:db:b5:85:4f:ad:a1:58:f4:a0:
f6:6f:c3:dd:82:04:22:3b:7d:e7:cb:e0:47:7d:96:db:0c:60:
d8:14:7a:70:62:d8:f8:49:33:ba:7e:84:84:70:b3:ed:12:b0:
2d:79:54:14:11:ce:3e:98:8d:98:97:ec:8a:61:39:87:03:3c:
42:f0:8d:9c:8a:04:dd:66:9a:1b:8a:dc:71:53:3d:40:a9:13:
7e:b5:82:d0:73:6e:30:b3:7c:19:75:01:6d:3a:f9:25:3d:f6:
b9:4c:65:58:6a:ab:e3:d9:b4:80:2d:55:65:45:72:55:36:ae:
25:9b:b7:af:a2:3c:68:14:c5:86:45:ab:0c:a9:3e:59:da:a2:
a2:49:c8:be:df:cd:8b:bd:63:6e:6d:28:50:0e:05:83:dc:d7:
ed:9c:26:69:be:9f:eb:0a:2b:3c:d2:01:14:83:73:1d:28:03:
14:17:c9:39:79:5f:94:a7:c0:e7:32:e2:66:0a:38:13:37:38:
f4:0b:0e:9a:5c:5d:77:d4:a7:91:e5:5e:cb:2d:e4:d9:84:25:
a5:6c:77:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:17:04 2026 by rpki-client