Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
File: CIAqhiH4eCf9WXI85my1nDj5HyE.mft (raw, json)
Hash identifier: TA10m1JTpTTvyi3bXtjWiQfVVVb6uR8SVhqHv/pHs3w=
Subject key identifier: E8:E6:DF:F9:C5:C4:5B:87:C2:E1:18:5C:B8:46:50:3B:EC:D1:FE:20
Authority key identifier: 08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
Certificate issuer: /CN=08802a8621f87827fd59723ce66cb59c38f91f21
Certificate serial: 01A0DD9761A3024BEEA005629298F40F0793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
Manifest number: 0DCA
Signing time: Sat 26 Sep 2026 12:01:20 +0000
Manifest this update: Sat 26 Sep 2026 12:01:20 +0000
Manifest next update: Sun 27 Sep 2026 12:01:20 +0000
Files and hashes: 1: CIAqhiH4eCf9WXI85my1nDj5HyE.crl (hash: /zgoN2IT98rTMCz2xuVvJrnhh1I233aXaUcP9OqTa0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:61:a3:02:4b:ee:a0:05:62:92:98:f4:0f:07:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08802a8621f87827fd59723ce66cb59c38f91f21
Validity
Not Before: Sep 26 12:01:20 2026 GMT
Not After : Sep 27 12:01:20 2026 GMT
Subject: CN=e8e6dff9c5c45b87c2e1185cb846503becd1fe20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:01:98:bd:e8:b1:22:43:41:c1:9f:1b:a8:
93:22:5f:47:b8:6c:c3:a9:3b:f1:47:e3:f3:cf:90:
dc:9f:09:1b:7e:67:db:43:5c:96:f8:1f:dd:20:ac:
d2:e0:7f:6e:18:ba:fd:db:5a:e2:b2:7e:6f:26:3b:
4a:8e:43:9b:4d:2f:d3:80:9e:4e:2a:17:79:0a:f6:
ad:93:cf:9d:d5:fd:cd:a5:94:f6:2c:55:97:2a:71:
ee:94:e1:01:cd:ac:25:35:4f:c0:db:72:7e:0c:e4:
67:63:39:db:c9:ae:e2:df:13:80:c4:8e:b8:1d:de:
ab:e1:59:57:46:aa:29:47:32:17:8c:5e:f8:ab:25:
7b:40:7b:78:bf:1e:64:8b:55:41:33:bf:0c:81:80:
43:4a:b6:ec:84:b3:88:00:a4:38:65:76:8b:7c:b9:
7f:0d:f3:48:e8:42:3a:89:dc:e5:24:89:ca:31:30:
c0:66:04:59:36:fa:ea:1d:d5:3c:fd:da:81:d3:d5:
50:f3:01:26:e2:d9:93:f6:61:a4:ad:8f:64:07:3f:
55:91:9a:dc:ed:3a:1e:e2:1e:dd:97:28:39:7f:03:
12:cc:4e:e9:8c:9f:a3:54:d6:17:a8:f7:d1:95:96:
07:81:e6:47:10:17:1d:65:5f:b6:19:34:fb:59:44:
bd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E6:DF:F9:C5:C4:5B:87:C2:E1:18:5C:B8:46:50:3B:EC:D1:FE:20
X509v3 Authority Key Identifier:
keyid:08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f9:88:6f:ba:cf:05:bf:fb:17:22:b2:0f:9e:ef:d8:41:b0:
52:db:87:b0:09:67:42:95:a5:4f:20:2a:9e:0c:e7:29:2f:4f:
c2:f4:0f:1c:59:e0:9c:16:37:ac:52:47:a7:c4:c3:01:20:2b:
30:83:50:d2:88:1f:b5:b6:b4:1d:89:7f:94:19:86:76:aa:08:
06:af:de:7f:30:86:5b:c3:43:b7:35:a5:d3:c2:f9:ea:01:05:
6f:94:30:87:8a:cb:60:d4:ea:5b:ae:78:20:a5:4e:c2:f7:5b:
b9:db:4e:41:88:57:30:40:9b:75:f9:5e:0b:ae:98:fc:dd:04:
63:2f:43:03:f7:96:2b:ee:26:7f:35:99:28:12:22:d2:73:c6:
ec:00:3f:47:77:8b:73:ca:6d:cd:1e:26:a7:0e:86:e3:df:6e:
6b:b5:20:4d:e5:de:83:19:2e:cc:c4:98:ef:9d:34:8c:f9:41:
21:73:0d:58:d5:5a:72:82:6a:f9:da:7d:4e:b4:0b:f3:32:17:
44:60:de:e0:f5:1b:a7:f4:41:f9:1f:e6:37:d8:10:fc:e5:9a:
fc:84:3c:99:29:39:08:d2:b2:3b:bb:d6:2c:aa:ad:1f:02:41:
77:96:90:6c:f6:1c:88:27:c8:61:df:47:ed:9d:7b:df:34:1f:
a5:96:46:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdl2GjAkvuoAVikpj0DweTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODAyYTg2MjFmODc4MjdmZDU5NzIzY2U2NmNiNTljMzhm
OTFmMjEwHhcNMjYwOTI2MTIwMTIwWhcNMjYwOTI3MTIwMTIwWjAzMTEwLwYDVQQD
EyhlOGU2ZGZmOWM1YzQ1Yjg3YzJlMTE4NWNiODQ2NTAzYmVjZDFmZTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjUBmL3osSJDQcGfG6iTIl9HuGzD
qTvxR+Pzz5DcnwkbfmfbQ1yW+B/dIKzS4H9uGLr921risn5vJjtKjkObTS/TgJ5O
Khd5Cvatk8+d1f3NpZT2LFWXKnHulOEBzawlNU/A23J+DORnYznbya7i3xOAxI64
Hd6r4VlXRqopRzIXjF74qyV7QHt4vx5ki1VBM78MgYBDSrbshLOIAKQ4ZXaLfLl/
DfNI6EI6idzlJInKMTDAZgRZNvrqHdU8/dqB09VQ8wEm4tmT9mGkrY9kBz9VkZrc
7Toe4h7dlyg5fwMSzE7pjJ+jVNYXqPfRlZYHgeZHEBcdZV+2GTT7WUS9ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjm3/nFxFuHwuEYXLhGUDvs0f4gMB8GA1UdIwQY
MBaAFAiAKoYh+Hgn/VlyPOZstZw4+R8hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lBcWhpSDRlQ2Y5V1hJODVteTFuRGo1SHlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82YmMwZjEtZDFlYS00OTAwLTk4Y2Et
ZjE2Zjk5NGVjZjQzLzEvQ0lBcWhpSDRlQ2Y5V1hJODVteTFuRGo1SHlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82YmMwZjEtZDFlYS00OTAwLTk4Y2EtZjE2Zjk5NGVjZjQz
LzEvQ0lBcWhpSDRlQ2Y5V1hJODVteTFuRGo1SHlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjfmIb7rP
Bb/7FyKyD57v2EGwUtuHsAlnQpWlTyAqngznKS9PwvQPHFngnBY3rFJHp8TDASAr
MINQ0ogftba0HYl/lBmGdqoIBq/efzCGW8NDtzWl08L56gEFb5Qwh4rLYNTqW654
IKVOwvdbudtOQYhXMECbdfleC66Y/N0EYy9DA/eWK+4mfzWZKBIi0nPG7AA/R3eL
c8ptzR4mpw6G499ua7UgTeXegxkuzMSY7500jPlBIXMNWNVacoJq+dp9TrQL8zIX
RGDe4PUbp/RB+R/mN9gQ/OWa/IQ8mSk5CNKyO7vWLKqtHwJBd5aQbPYciCfIYd9H
7Z173zQfpZZGjA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:58:39 2026 by rpki-client