Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
File: CIAqhiH4eCf9WXI85my1nDj5HyE.mft (raw, json)
Hash identifier: 4f2wTCsqOUsNhiLimA/Mt23/EPlpe5wDVcLXZJbc4H0=
Subject key identifier: D0:3B:97:A5:86:6A:51:D4:A6:2B:A4:06:3E:AA:AE:C8:BB:02:AC:77
Authority key identifier: 08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
Certificate issuer: /CN=08802a8621f87827fd59723ce66cb59c38f91f21
Certificate serial: 019FAA88CA420ACE2BC2362F722C2E4227D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
Manifest number: 0D2B
Signing time: Tue 28 Jul 2026 21:01:58 +0000
Manifest this update: Tue 28 Jul 2026 21:01:58 +0000
Manifest next update: Wed 29 Jul 2026 21:01:58 +0000
Files and hashes: 1: CIAqhiH4eCf9WXI85my1nDj5HyE.crl (hash: dywbmOSZhETlM/CaWdPhBv4BP88QKfBHgF87EpNyfvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:ca:42:0a:ce:2b:c2:36:2f:72:2c:2e:42:27:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08802a8621f87827fd59723ce66cb59c38f91f21
Validity
Not Before: Jul 28 21:01:58 2026 GMT
Not After : Jul 29 21:01:58 2026 GMT
Subject: CN=d03b97a5866a51d4a62ba4063eaaaec8bb02ac77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:17:9d:44:d1:15:c3:5b:b7:3e:68:0a:d8:
11:48:ec:77:8b:fa:95:32:de:0c:c1:84:df:9a:13:
ad:42:5b:b8:4f:c6:47:d8:9e:f1:4b:e4:2a:15:12:
4b:06:8f:94:70:db:e0:6f:be:1a:0b:ba:0f:2f:70:
5b:38:d2:30:cf:d2:d6:8a:d2:15:8a:6e:4b:34:46:
f1:d9:a3:02:9f:cf:97:c0:3e:9c:40:b0:7f:2b:b7:
08:d1:b5:09:79:70:fa:34:8b:bf:f7:34:be:70:cb:
67:02:52:57:e4:b2:62:2d:6d:17:e5:af:dd:f4:7e:
9d:d1:b9:67:4f:60:a4:04:96:5b:93:04:41:10:9e:
50:7f:2f:e7:2f:ae:d3:73:73:d0:26:60:8b:91:00:
50:eb:84:e3:c0:f4:d2:4f:3e:b4:f8:19:7c:48:31:
b9:b5:96:6e:88:a5:4f:f4:e7:db:67:94:d6:a9:c7:
5c:22:31:12:83:e1:55:e0:2c:cf:74:cf:ec:a8:9f:
f5:86:65:27:96:8e:aa:96:b7:e1:27:6c:e3:e8:06:
9a:d6:31:7d:50:fc:99:6a:08:9a:21:35:b6:8e:20:
15:bb:92:98:46:35:02:7d:f1:f8:0d:52:85:3d:6d:
19:9c:b6:da:5b:40:f4:4b:4d:55:4c:49:23:b5:72:
9e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3B:97:A5:86:6A:51:D4:A6:2B:A4:06:3E:AA:AE:C8:BB:02:AC:77
X509v3 Authority Key Identifier:
keyid:08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e0:42:bd:98:00:a9:ff:e2:98:f9:cd:2c:59:51:45:28:92:
5a:3f:20:92:e7:c5:45:ad:5f:56:28:d9:15:37:d3:a1:a6:c4:
99:84:4e:fa:9f:62:18:ef:ac:7d:0a:7f:e1:a2:97:9f:90:b7:
5b:7d:7f:b4:9f:87:cc:f5:9b:39:87:d7:b5:e6:b2:f4:9c:cb:
38:4c:f5:88:aa:57:4c:ed:2a:20:53:b6:9d:3b:4b:19:6b:f7:
2d:74:6f:4c:78:54:1c:2d:22:c2:e7:cd:61:4d:e1:94:ad:d2:
e4:c8:b5:f3:97:b6:e6:6f:ad:bd:f2:db:f3:92:81:9e:ca:2f:
29:42:cd:d4:7b:8c:8e:5b:d1:55:c6:78:15:cc:0e:a7:a6:49:
a9:49:b1:91:31:43:d6:02:05:f6:a4:29:de:82:8c:ae:b3:94:
8f:13:a0:12:02:83:f7:8b:b8:bd:97:37:0d:f0:af:45:cd:f6:
69:bb:49:d4:58:da:b5:76:b6:c5:e1:84:55:8a:c0:be:32:67:
78:7c:17:c9:5a:c2:2b:1d:f7:4b:17:5d:b1:64:61:7c:cc:37:
c0:de:e2:69:6b:84:26:d0:f1:09:23:19:49:bc:3e:39:a6:97:
0d:b7:30:ac:59:96:e4:46:73:3b:9b:82:a4:7e:65:7f:61:9a:
51:a6:4c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:58:10 2026 by rpki-client