Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
File: ci8LM2ULfWSYufWKrFopfpJhSCI.mft (raw, json)
Hash identifier: KKaPvZUdRDnaSD7OCsM/VFULXhVa/RanxP1n38BkhD0=
Subject key identifier: 08:68:7E:B0:6A:D0:05:4E:1E:B1:71:57:0D:28:D7:22:58:23:AF:67
Authority key identifier: 72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
Certificate issuer: /CN=722f0b33650b7d6498b9f58aac5a297e92614822
Certificate serial: 019D97E27A30CE39414563E17268005BB1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
Manifest number: 0C54
Signing time: Thu 16 Apr 2026 20:01:35 +0000
Manifest this update: Thu 16 Apr 2026 20:01:35 +0000
Manifest next update: Fri 17 Apr 2026 20:01:35 +0000
Files and hashes: 1: KdbDrACu7SHeiWA-TJ0Gd5nmSmM.roa (hash: kgfS9/IVC7NXMOo6Zbhxeb9stsHC0de13w/KTw9Txuc=)
2: ci8LM2ULfWSYufWKrFopfpJhSCI.crl (hash: JJ0RSUpTXlErrX+ygkin/Cas3Z+vBbhaX6mwok0uRjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:7a:30:ce:39:41:45:63:e1:72:68:00:5b:b1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722f0b33650b7d6498b9f58aac5a297e92614822
Validity
Not Before: Apr 16 20:01:35 2026 GMT
Not After : Apr 17 20:01:35 2026 GMT
Subject: CN=08687eb06ad0054e1eb171570d28d7225823af67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:11:9a:44:6d:7f:22:f8:06:fb:c3:36:c2:
70:ea:a8:40:b7:40:b2:25:09:77:d7:62:0e:13:a0:
72:2c:0b:1f:2a:e3:05:f1:ea:6d:02:4b:e8:6b:c3:
d8:25:56:cf:be:45:5d:16:0d:85:73:5f:06:d3:6f:
db:88:29:cf:7a:3a:f8:6e:e8:d6:14:6e:86:73:00:
e4:5e:83:c7:01:54:0b:66:d8:bb:86:85:5e:c3:03:
24:97:ca:d8:90:ce:a3:33:83:3c:5b:20:92:8a:92:
00:4e:24:ba:19:30:37:0e:75:f2:a7:77:02:f5:cb:
dc:95:9d:4d:a8:fa:a7:6c:ae:3c:43:16:e5:97:22:
c8:62:01:f0:d2:df:43:1f:f2:1c:6d:4e:6b:78:0d:
0c:a6:15:16:c4:d9:c4:41:a6:94:f3:19:3c:1d:32:
d4:e4:45:ba:71:6d:f8:2d:3d:37:99:5e:a0:65:dd:
61:40:e7:6e:af:9f:23:c4:61:c9:d0:0a:20:09:a2:
f8:76:f9:b0:10:71:8d:9d:7a:60:55:ad:13:56:cb:
5c:f3:50:7f:44:e9:71:ac:a9:a3:cf:76:4e:af:84:
02:53:d8:67:57:29:0a:ce:13:05:a7:a1:96:c8:7a:
37:5b:f5:e4:06:62:f8:7f:d4:9f:f7:00:4c:19:8b:
6b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:68:7E:B0:6A:D0:05:4E:1E:B1:71:57:0D:28:D7:22:58:23:AF:67
X509v3 Authority Key Identifier:
keyid:72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:34:5d:88:c5:88:22:df:00:77:f5:6d:37:c4:b6:aa:d7:bb:
d6:32:f9:73:b5:6d:c2:4d:97:3a:92:8d:24:ce:ca:64:bf:25:
fd:00:63:08:1d:77:4d:2d:88:f1:38:cc:99:05:5b:22:d1:c3:
db:a7:3a:22:93:05:9b:0a:af:84:0d:cb:fb:6e:2d:91:fe:8e:
f1:03:15:e4:63:89:44:7e:74:62:4f:4b:78:e3:d0:db:dd:39:
1c:81:8c:3f:8c:04:eb:12:e9:aa:fe:ab:59:18:6a:58:09:1d:
f7:42:41:04:7c:77:5c:68:9d:be:f9:d0:8e:64:0a:94:5d:9a:
dd:3a:ed:ef:aa:4a:5a:18:25:3f:90:f8:c7:4f:1f:7c:6d:ef:
c7:59:12:cb:a6:fc:a2:58:cb:3d:53:13:32:ec:7d:8f:8b:86:
b3:bd:5b:3c:d1:32:4d:15:e5:6d:ce:34:4c:97:5b:2c:11:87:
eb:46:2b:48:74:6c:42:fc:54:37:11:31:5e:c3:44:7d:f1:97:
f1:08:37:f8:bb:09:0f:5f:db:86:90:9e:14:55:c2:05:c3:4b:
24:c2:a8:76:a7:b9:fe:6c:c9:21:7c:82:d5:59:1b:04:ef:f8:
2a:44:3d:8d:bf:50:2c:c7:62:a7:1f:64:1d:7b:62:1d:d7:1d:
df:91:92:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:10:02 2026 by rpki-client