Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
File: ci8LM2ULfWSYufWKrFopfpJhSCI.mft (raw, json)
Hash identifier: ggdLqCW13vQiT77y+s4MpMB5vOPHRfmAwqpaSx2XuVE=
Subject key identifier: A3:3A:F2:8C:0B:28:1D:30:17:B3:39:97:43:9C:D4:22:3B:1B:18:92
Authority key identifier: 72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
Certificate issuer: /CN=722f0b33650b7d6498b9f58aac5a297e92614822
Certificate serial: 019CAA5849AA2F0CA10B9B83242439792486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
Manifest number: 0BD9
Signing time: Sun 01 Mar 2026 17:00:38 +0000
Manifest this update: Sun 01 Mar 2026 17:00:38 +0000
Manifest next update: Mon 02 Mar 2026 17:00:38 +0000
Files and hashes: 1: KdbDrACu7SHeiWA-TJ0Gd5nmSmM.roa (hash: kgfS9/IVC7NXMOo6Zbhxeb9stsHC0de13w/KTw9Txuc=)
2: ci8LM2ULfWSYufWKrFopfpJhSCI.crl (hash: XcjI0qJ8KiI1qZpxOaPkC4ip4fJJD/oTJmb7hJTrLGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:49:aa:2f:0c:a1:0b:9b:83:24:24:39:79:24:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722f0b33650b7d6498b9f58aac5a297e92614822
Validity
Not Before: Mar 1 17:00:38 2026 GMT
Not After : Mar 2 17:00:38 2026 GMT
Subject: CN=a33af28c0b281d3017b33997439cd4223b1b1892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:23:66:ef:38:75:24:8f:5b:d1:d3:7a:db:
ed:c6:33:45:98:b3:cb:8e:cc:ed:8a:f7:d2:ab:bc:
bc:63:82:21:05:ea:b0:a0:3e:34:32:f6:46:5d:a2:
73:f3:9e:02:25:e2:c7:7f:b9:9a:1e:8c:87:42:e1:
d7:a2:14:1b:9e:fe:d7:87:d0:6c:08:ee:d6:f3:7f:
29:e0:8e:f6:38:49:b7:d6:df:0f:fb:83:e6:70:9a:
da:01:bd:75:7d:e4:a7:b9:12:4e:67:50:c2:0d:24:
20:5f:cd:3b:cd:d2:45:af:c8:2c:cf:d6:29:76:ba:
f2:01:9b:ee:5f:a0:01:33:97:29:77:fd:00:f5:69:
6a:8c:1a:c1:ca:21:40:60:c0:86:bf:a0:a8:4a:15:
f8:9b:ac:48:c5:84:84:20:90:19:9a:a5:57:0c:21:
7c:66:e0:f9:99:61:e1:6c:92:48:3c:be:25:98:33:
b6:ca:51:74:4f:b5:46:48:52:5d:36:81:05:c9:8e:
92:7c:97:e2:fa:e0:c7:c4:fe:02:28:28:a3:29:41:
c2:00:c8:fa:0c:b2:f1:9a:33:02:e6:b3:4f:31:8c:
4e:8c:5b:9f:ac:45:8a:d7:a0:06:7e:49:74:3a:67:
5e:74:fe:40:37:d5:97:b1:0e:10:2f:34:33:29:cf:
1c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3A:F2:8C:0B:28:1D:30:17:B3:39:97:43:9C:D4:22:3B:1B:18:92
X509v3 Authority Key Identifier:
keyid:72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6b:b3:22:6e:e8:76:70:1c:f1:c3:d9:87:ef:d9:5e:d9:54:
ff:45:9b:58:bf:64:3e:35:86:31:07:87:3f:7c:e8:72:14:c7:
f5:0d:1d:d8:67:fb:7f:42:43:e3:79:6b:29:43:cd:c7:67:8f:
78:cf:a2:4e:bd:86:11:d5:9e:e8:73:b5:26:87:ab:1c:63:d8:
1c:75:a8:01:32:61:27:61:24:05:75:75:ef:31:1e:f9:da:e3:
cd:56:52:c2:50:9e:a4:3c:1a:be:a6:2c:45:0b:1f:78:90:83:
7f:61:e2:58:1e:dc:be:3f:5f:0e:60:11:aa:c2:24:b3:1e:ab:
c9:33:92:f3:a3:ed:50:12:ee:08:4f:73:c0:ee:7a:46:25:f2:
2a:48:2e:46:55:79:7b:94:99:84:2d:41:20:2f:07:ee:b5:9f:
23:c7:aa:47:80:22:c1:e6:48:cf:78:f6:2c:ac:54:d1:5a:5e:
85:e8:7f:24:fa:01:aa:c8:ea:b7:3f:94:66:9e:f9:18:ae:3a:
13:ab:26:a5:5a:2b:c0:a5:81:68:d7:80:da:6d:2d:70:5b:0d:
a5:87:96:9a:4e:f0:3f:19:fe:99:11:6f:36:7d:bf:5c:b6:4c:
ea:26:f5:e8:dd:a0:66:09:b2:54:f8:72:62:5e:02:42:ac:cc:
e1:e6:6e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:04:06 2026 by rpki-client