Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
File: CiebQDjgAue9ZOUHbRo56-lvI8Q.mft (raw, json)
Hash identifier: xE92ZyL8QrkvLh4JjwYTLnOBlv1bN/6VLJ/jedoss8I=
Subject key identifier: 33:BC:8E:5A:59:C1:40:2F:3E:24:09:4D:E1:BC:4D:BB:7F:0F:2B:51
Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
Certificate issuer: /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Certificate serial: 019FA7F4F3B2CA2A80940DAC138C278E89C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
Manifest number: 0A81
Signing time: Tue 28 Jul 2026 09:01:15 +0000
Manifest this update: Tue 28 Jul 2026 09:01:15 +0000
Manifest next update: Wed 29 Jul 2026 09:01:15 +0000
Files and hashes: 1: CiebQDjgAue9ZOUHbRo56-lvI8Q.crl (hash: 7aseHB5gLxpe4ii9ZeyycDMmguRZjhjHWdha8Je/BVM=)
2: INTBCoLNdz7dS74vmemjPaj4YZM.roa (hash: T73/8m3M1Tbn+oTqJQV/X3k5SIAZKJ+xpZ9QZlSwB80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:f3:b2:ca:2a:80:94:0d:ac:13:8c:27:8e:89:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Validity
Not Before: Jul 28 09:01:15 2026 GMT
Not After : Jul 29 09:01:15 2026 GMT
Subject: CN=33bc8e5a59c1402f3e24094de1bc4dbb7f0f2b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ff:62:57:f9:c8:08:45:ca:81:b9:39:ea:7e:
39:81:11:86:a3:11:c5:d5:97:e3:20:d3:92:c9:4a:
fc:38:36:41:47:68:dd:cb:97:92:f1:84:a4:a7:3c:
82:58:5c:fe:2b:cb:42:b4:5b:89:f7:c7:11:fe:4a:
f1:4c:d2:f5:ce:aa:cf:16:b5:cf:af:0c:4e:05:4f:
a7:d4:72:c1:19:42:25:47:aa:16:0b:b5:2f:46:84:
c9:db:76:c1:0e:e8:ae:bf:9c:3c:74:28:96:85:7a:
44:4e:7f:a0:44:f2:d7:64:bf:de:d4:d4:87:f4:9f:
bb:fb:d1:be:73:5d:6b:bd:cc:97:c7:72:cc:cb:25:
f9:b3:92:35:e3:b9:a1:22:f7:3b:1d:d0:f6:0e:88:
be:c6:20:6f:6b:18:03:5e:c3:88:dc:6b:6a:14:2c:
b7:37:d4:dd:a2:22:73:ad:8f:63:c3:69:0f:99:38:
2f:9b:b1:69:9f:2f:f0:e9:0b:4b:07:4b:4e:cb:1b:
3e:b7:a9:1c:7f:cd:da:a6:ab:bd:5c:16:9d:e1:ae:
29:17:d0:92:bc:ee:88:8a:7d:50:2b:78:ed:98:ea:
cc:68:0e:11:85:c1:41:27:31:d5:3f:8c:5d:fc:7b:
be:5c:0c:9b:49:53:06:d5:04:ff:26:0d:b6:68:4e:
13:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BC:8E:5A:59:C1:40:2F:3E:24:09:4D:E1:BC:4D:BB:7F:0F:2B:51
X509v3 Authority Key Identifier:
keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:25:41:2e:cb:40:48:29:30:e2:db:63:f5:fb:2f:7b:d4:cc:
31:12:86:bc:c9:7d:4e:19:99:b7:00:8b:4d:8c:5a:b5:07:97:
7a:cd:01:1d:c7:54:ae:69:12:85:67:e8:7b:28:c9:99:57:17:
21:6f:8e:0c:70:b6:03:38:52:91:50:62:6d:fc:00:f1:30:88:
c0:73:e0:5b:d6:3e:19:5a:dd:de:5e:8f:b8:df:34:ee:1e:b6:
3e:24:fa:5a:fd:63:ff:64:f7:b2:db:f7:fb:2f:44:bc:8d:ce:
b8:c7:4b:dd:bb:16:b2:e2:37:d0:17:d8:01:bb:1a:6b:b4:52:
ec:ea:bc:18:ae:23:31:45:dc:cd:9f:e8:03:1a:70:6d:f4:a6:
81:17:1f:31:f5:d0:12:0c:0e:ff:ed:32:e9:18:ae:ce:ac:c2:
cf:86:47:04:4a:81:65:a7:81:a4:a7:68:7b:69:55:05:81:06:
92:0c:3f:9d:9f:90:5a:37:a8:fd:f9:6f:e7:f3:5d:d4:0a:cd:
c8:af:dd:b9:3e:06:68:a1:3e:f7:e9:08:19:58:60:d0:3d:57:
2e:09:69:b5:c6:fe:fb:64:a8:64:6e:3d:c8:88:7b:ec:de:1b:
54:de:ad:95:b3:e6:2c:4b:2b:f2:8b:ab:f8:c7:d4:a0:cd:1e:
ac:8b:83:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:06 2026 by rpki-client