Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
File: CiebQDjgAue9ZOUHbRo56-lvI8Q.mft (raw, json)
Hash identifier: rqlviAhgd/XAOeed2ofQg5oHbfNnm84jgMznHd0W0Ts=
Subject key identifier: AF:D0:42:24:75:2E:16:13:95:5D:26:D1:1C:D0:3B:13:17:EC:D2:6A
Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
Certificate issuer: /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Certificate serial: 019CAD2277E158191778B379C9BBFB03E287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
Manifest number: 08F6
Signing time: Mon 02 Mar 2026 06:00:43 +0000
Manifest this update: Mon 02 Mar 2026 06:00:43 +0000
Manifest next update: Tue 03 Mar 2026 06:00:43 +0000
Files and hashes: 1: CiebQDjgAue9ZOUHbRo56-lvI8Q.crl (hash: o8WYy084CWsGUPXtUYiimZXa7E9jX264LM3beHZJ73g=)
2: INTBCoLNdz7dS74vmemjPaj4YZM.roa (hash: T73/8m3M1Tbn+oTqJQV/X3k5SIAZKJ+xpZ9QZlSwB80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:77:e1:58:19:17:78:b3:79:c9:bb:fb:03:e2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Validity
Not Before: Mar 2 06:00:43 2026 GMT
Not After : Mar 3 06:00:43 2026 GMT
Subject: CN=afd04224752e1613955d26d11cd03b1317ecd26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:a8:d6:b6:65:38:fe:33:a6:91:50:30:92:
ec:37:21:5a:91:93:25:ab:44:98:49:c9:c3:d4:bf:
e1:e2:ae:87:1c:ed:23:fc:75:f1:bb:4b:6f:40:ae:
4a:de:93:15:96:29:6c:46:48:5c:99:cf:a9:ea:1f:
5c:f7:b6:9a:3c:88:58:f2:63:04:91:4c:df:03:90:
d7:70:f6:93:95:4e:91:56:17:8d:52:30:4c:97:76:
cb:fb:f1:bb:f2:47:75:ac:aa:16:ae:54:61:8f:00:
b1:47:8d:ac:b8:04:b4:b4:c7:c9:22:46:2e:07:a6:
5e:c8:21:a8:78:62:a7:3a:1f:a8:02:1a:05:30:db:
50:0b:81:9c:8d:b3:89:67:aa:47:2b:6f:a8:d3:5a:
70:cc:e4:68:64:c2:51:52:0d:e5:57:36:d8:5f:dc:
e8:ac:76:16:6f:75:4f:08:63:ec:60:8b:18:b6:f6:
cf:bf:e5:8e:ce:f8:9e:02:0c:d3:01:2d:da:97:8e:
a6:de:2e:83:94:4f:1c:5f:1d:43:27:21:8d:5d:4f:
af:7a:33:78:c9:22:95:f9:05:5b:1e:e5:b3:02:e6:
dc:c8:31:df:01:86:a7:a0:a7:ff:14:c7:af:ee:5f:
e4:a8:10:5f:85:26:24:8c:82:3b:85:72:cc:94:d9:
69:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D0:42:24:75:2E:16:13:95:5D:26:D1:1C:D0:3B:13:17:EC:D2:6A
X509v3 Authority Key Identifier:
keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:04:7c:7f:eb:77:cc:70:db:38:d4:e6:5d:10:b7:f9:98:07:
82:77:57:b2:f0:43:a6:35:63:e1:5e:94:83:c2:fb:06:4f:01:
5a:bc:b9:d4:9d:fa:62:43:90:d1:53:f7:19:12:5f:b1:51:63:
af:5f:de:2a:8e:20:5e:09:8c:80:49:e5:e5:5f:42:b9:95:bb:
b7:6b:52:2c:4c:4f:61:ba:37:bf:bf:4c:40:ef:c2:11:f6:ab:
1a:5c:07:08:bf:ec:cc:94:ca:f9:38:fa:a0:75:ad:b1:7b:05:
56:23:c1:7c:9c:e5:04:f5:28:91:36:ed:08:42:97:5a:e3:1c:
de:d8:47:6b:0a:7d:1f:ed:b3:23:d3:b6:a2:29:7a:ca:a6:3e:
26:c7:c6:d9:6e:85:b8:af:05:d8:a4:84:01:4d:26:8e:a6:f8:
00:bb:9f:35:ee:f9:0d:4e:21:0f:68:55:86:f6:36:ae:b9:eb:
9b:ff:d0:4f:28:0a:ce:1b:ca:a0:06:78:4b:3c:ee:7d:f6:45:
88:54:3c:f2:5f:7f:f3:d6:d2:01:be:f0:4c:85:e6:5f:27:f9:
d3:e6:27:cc:92:e3:8c:ea:ab:af:bd:2f:46:46:2c:dd:77:a0:
e6:1c:e9:b4:e4:e0:5a:85:fc:0e:4f:86:ef:c5:9a:b9:10:77:
58:aa:91:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:31 2026 by rpki-client