Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
File: ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft (raw, json)
Hash identifier: lu9kqYOJpZcgY6F8DsNbXukQIJarNQVCizq0hEXdWVU=
Subject key identifier: 99:2D:57:87:6F:B2:B9:17:3F:64:91:F9:23:0C:47:F6:31:51:3A:A3
Authority key identifier: 72:20:2E:64:5F:72:CD:70:AA:81:43:B7:3B:CC:0D:DD:93:BF:E9:1A
Certificate issuer: /CN=72202e645f72cd70aa8143b73bcc0ddd93bfe91a
Certificate serial: 019D98F4A89F1764FF53809AFAF104A91F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
Manifest number: 0610
Signing time: Fri 17 Apr 2026 01:01:03 +0000
Manifest this update: Fri 17 Apr 2026 01:01:03 +0000
Manifest next update: Sat 18 Apr 2026 01:01:03 +0000
Files and hashes: 1: ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl (hash: qLoyL7DHWzRxSK0NJphV5I3JMM/N3JdY/gPjVFjO+Ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:a8:9f:17:64:ff:53:80:9a:fa:f1:04:a9:1f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72202e645f72cd70aa8143b73bcc0ddd93bfe91a
Validity
Not Before: Apr 17 01:01:03 2026 GMT
Not After : Apr 18 01:01:03 2026 GMT
Subject: CN=992d57876fb2b9173f6491f9230c47f631513aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c8:b3:e5:e5:a4:12:a1:a2:fc:f2:8a:59:91:
d4:d3:d0:5f:70:d6:91:a9:d4:b9:3c:e5:e7:8d:ed:
67:d4:d7:0f:a0:fe:a4:f4:e8:67:00:74:2e:d9:70:
7c:a0:be:8a:7e:ad:f1:31:f1:5d:65:ad:ed:e4:91:
c3:0e:a0:2b:0f:19:3e:89:45:71:90:b4:69:6a:54:
68:da:b5:32:00:17:ce:a0:00:97:9c:73:d1:b0:91:
55:41:e7:53:b6:11:ec:fc:03:82:e6:a5:b5:6c:33:
4b:e1:66:73:8b:f6:3f:4f:3e:33:53:cd:d0:91:1f:
08:21:fc:1f:86:27:e6:f9:bc:9f:9e:c4:7d:23:6a:
db:3a:a9:62:c4:a3:85:c4:20:ec:22:75:ac:8e:03:
a2:8c:bf:6a:ff:40:81:d9:a0:4d:d8:ab:9f:04:de:
d9:5d:64:72:b2:64:3d:cd:a7:51:ba:59:fb:ed:08:
93:d8:b8:4c:1a:4b:ed:6f:92:bf:68:f2:ee:1b:66:
52:de:3c:47:56:b8:fc:ab:57:c1:28:a0:12:84:21:
dd:a4:5f:bf:af:d3:dd:da:31:80:73:cd:0e:55:e5:
f9:fb:9c:a1:04:44:34:98:7b:11:6e:fa:98:36:3a:
75:d1:97:2c:ee:50:78:d7:3b:9b:09:8c:43:fb:fc:
e4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2D:57:87:6F:B2:B9:17:3F:64:91:F9:23:0C:47:F6:31:51:3A:A3
X509v3 Authority Key Identifier:
keyid:72:20:2E:64:5F:72:CD:70:AA:81:43:B7:3B:CC:0D:DD:93:BF:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:96:ca:c4:e1:db:a2:8c:1e:dc:a4:ae:71:ef:20:5a:07:da:
f1:f8:e4:e7:91:7f:e8:4e:db:ec:b5:ae:88:92:a0:fe:e7:c4:
b1:22:1e:08:da:bf:b3:4c:df:92:54:8a:f1:54:5c:55:42:af:
23:45:e1:83:0a:ea:65:53:06:1c:cf:e5:64:ee:ca:4b:03:cc:
fe:95:e1:8a:78:6e:2c:94:a5:2f:3c:a9:ba:de:62:16:bb:6d:
0e:44:61:05:d5:b7:3d:9e:b3:20:40:56:20:4e:7a:3a:cc:e0:
3f:d9:a3:01:bb:13:f0:9c:b1:05:7b:7e:13:91:70:3a:9e:f1:
24:96:51:1d:a4:dd:58:04:ee:f2:30:dd:af:ce:58:f3:2c:0e:
a6:d4:18:3a:ee:68:34:78:35:1f:53:15:82:76:c0:df:44:8c:
fc:c0:ca:1f:df:4e:89:3a:41:4f:5f:75:4e:cc:d5:e0:15:20:
a2:54:ec:d5:8c:5a:3a:79:38:c9:03:63:88:07:11:5d:ca:5c:
08:2c:f9:8c:45:61:62:9a:e5:65:13:ad:f1:40:70:a9:17:4f:
e6:6f:5b:0b:52:1e:26:55:9f:ca:f5:f1:53:be:f2:d3:a8:7d:
98:6c:b4:9d:a0:13:49:bc:a4:42:2e:86:61:4e:64:f6:24:e5:
dc:a8:53:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:30:12 2026 by rpki-client