Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft
File: _CIELXaLE__agpyz8dfSzz--ihU.mft (raw, json)
Hash identifier: ZOAFRUbEEzJ3Bif4AjyoSE/w2hv7mK5ysnCfpKg48lQ=
Subject key identifier: 98:EC:7C:98:B7:54:B6:34:DB:0B:0F:A7:9E:BD:90:24:E6:B8:7C:A0
Authority key identifier: FC:22:04:2D:76:8B:13:FF:DA:82:9C:B3:F1:D7:D2:CF:3F:BE:8A:15
Certificate issuer: /CN=fc22042d768b13ffda829cb3f1d7d2cf3fbe8a15
Certificate serial: 019CABD8F35EC01F73AA3BC78FAD020CF2B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CIELXaLE__agpyz8dfSzz--ihU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft
Manifest number: 0110
Signing time: Mon 02 Mar 2026 00:00:47 +0000
Manifest this update: Mon 02 Mar 2026 00:00:47 +0000
Manifest next update: Tue 03 Mar 2026 00:00:47 +0000
Files and hashes: 1: 4A6CcXXrSbIURymlP_OiEuUadzE.roa (hash: XB/aS0f5fLagh24RTymZ9tRIq1RWpYe8OmUQeqUA544=)
2: _CIELXaLE__agpyz8dfSzz--ihU.crl (hash: C+ku3vK/qglKqFjsWHgXAviohdtVphnlLs2o3u+NPTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CIELXaLE__agpyz8dfSzz--ihU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:f3:5e:c0:1f:73:aa:3b:c7:8f:ad:02:0c:f2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc22042d768b13ffda829cb3f1d7d2cf3fbe8a15
Validity
Not Before: Mar 2 00:00:47 2026 GMT
Not After : Mar 3 00:00:47 2026 GMT
Subject: CN=98ec7c98b754b634db0b0fa79ebd9024e6b87ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1d:ee:85:f7:22:67:7a:3f:45:e1:29:ce:42:
7c:92:bc:83:ac:43:27:3b:d0:ad:b0:c0:b5:af:52:
34:c1:27:5d:37:03:cc:e8:43:fe:ee:8d:78:82:c9:
37:9a:22:62:01:1a:58:64:ec:4e:70:5a:fa:3b:61:
6f:8c:b8:5b:87:77:a9:18:63:ff:ea:a9:51:2e:3e:
90:e9:b1:b3:bf:b9:11:fd:91:7f:69:4b:02:55:d6:
9c:70:d7:06:21:ea:e1:3e:31:48:65:b2:75:db:4e:
f1:67:36:36:b0:15:c5:18:c6:a2:f8:49:fa:00:e8:
5a:e4:ee:28:b0:61:07:b4:0b:df:98:c2:70:ab:88:
ba:4e:92:6f:62:ff:01:f3:5c:67:22:49:5a:d5:98:
74:b0:a9:3d:97:8b:20:81:f9:3e:7c:ec:7f:41:10:
b6:12:63:a5:1f:cd:1b:99:ba:56:7f:1e:6e:df:f1:
1c:d6:07:5c:3c:73:15:6e:a6:ef:70:11:30:da:30:
ce:09:8f:8b:67:de:75:28:eb:34:ac:ac:2f:e1:0e:
7d:4e:38:74:ea:d8:64:77:40:11:2e:13:75:c1:27:
ed:5c:56:67:73:89:bb:cf:fe:4d:be:6a:8d:af:35:
fa:6b:35:01:52:0a:04:d5:c2:38:f6:da:9e:22:84:
c3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EC:7C:98:B7:54:B6:34:DB:0B:0F:A7:9E:BD:90:24:E6:B8:7C:A0
X509v3 Authority Key Identifier:
keyid:FC:22:04:2D:76:8B:13:FF:DA:82:9C:B3:F1:D7:D2:CF:3F:BE:8A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CIELXaLE__agpyz8dfSzz--ihU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6c:8e:21:c1:28:ed:88:ed:4a:e4:d9:3b:9b:fe:7f:6f:26:
2b:00:32:ba:18:6e:06:08:f1:af:0d:ec:fc:f6:bd:80:af:67:
99:ac:8a:dd:b1:6f:b3:84:2b:45:64:45:47:14:0f:36:bd:32:
57:75:2e:9d:d5:08:61:e3:00:ad:b7:2d:bf:88:c7:4c:9e:15:
85:04:86:84:5c:f1:f7:93:67:d1:e4:4a:aa:77:ef:c1:56:02:
ed:83:74:e1:5c:17:89:09:43:ac:11:1c:67:e0:fd:e5:8e:bc:
64:e5:3d:c6:30:b5:42:b1:fe:c1:98:73:03:75:bb:f8:36:73:
ed:ff:fc:b0:31:b6:e8:17:26:0a:4e:43:c1:0f:c5:c8:b2:f8:
c4:0d:e4:e1:d5:6b:45:f6:27:ee:a8:32:87:14:f6:0b:7e:11:
ab:16:e8:f6:b6:9e:fb:8f:84:87:4c:67:39:97:52:8c:96:59:
8b:1b:34:8e:23:82:68:34:e5:14:f1:8b:e0:8c:49:f7:f9:7a:
8c:79:b6:72:24:f4:c0:7b:ea:2c:36:82:cd:3c:32:c0:18:77:
8a:de:1a:bd:14:be:51:42:c9:08:7b:67:99:96:22:10:8c:ed:
cf:49:26:16:16:54:ff:53:d1:f1:17:be:0b:79:81:f8:41:93:
d4:65:8a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:58:10 2026 by rpki-client