Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
File: CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json)
Hash identifier: D5R16bEAYHDmvk6ENL1f5NNv6dbcObDy1+doGDdm/98=
Subject key identifier: E2:E5:0F:BD:B7:53:12:3B:10:35:07:4A:6B:13:49:1A:17:0C:C2:1E
Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
Certificate issuer: /CN=08819c27a5be3d2db222b05637447ed6e8324873
Certificate serial: 019DA3E5E450A724AE8B159B48B55BD585D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
Manifest number: 1608
Signing time: Sun 19 Apr 2026 04:00:45 +0000
Manifest this update: Sun 19 Apr 2026 04:00:45 +0000
Manifest next update: Mon 20 Apr 2026 04:00:45 +0000
Files and hashes: 1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: NLXLexmMb65etlcRrOgSxHiVD2zBCN4xo8Z15t+eTiI=)
2: IQDg8XUunRwYK-C6GvbnJQ7EHM0.roa (hash: DFgB9yi6JU5q5PfQOPOS6steUe02MkhWX55KVlM+wDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e5:e4:50:a7:24:ae:8b:15:9b:48:b5:5b:d5:85:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873
Validity
Not Before: Apr 19 04:00:45 2026 GMT
Not After : Apr 20 04:00:45 2026 GMT
Subject: CN=e2e50fbdb753123b1035074a6b13491a170cc21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fc:fd:4d:66:9b:35:ca:0b:52:68:a2:39:b5:
de:95:f9:9c:32:e3:01:c1:c7:6b:92:0a:0f:5e:da:
1f:3b:ea:1a:52:89:67:55:a8:5b:7b:ea:5d:e7:ed:
df:fe:66:29:a0:6d:91:f4:76:1a:8c:80:39:7b:f1:
c1:63:81:8d:e9:b8:b3:1d:30:0c:56:b5:ef:a6:fe:
7f:a2:17:3b:20:d4:43:79:81:b0:42:bd:81:bd:d7:
e9:89:42:32:bd:25:fe:b6:6e:a9:56:46:99:c1:0e:
34:39:f3:7c:3e:57:07:26:87:bb:d5:cc:fe:fc:04:
7f:d5:c4:19:a0:5d:a8:0c:38:7b:92:14:65:01:33:
95:cc:78:19:1a:13:0e:c7:0e:94:cb:20:07:19:91:
e3:83:01:3c:67:fa:e8:4e:bb:78:74:2e:c2:dc:fa:
16:35:0e:54:94:bc:72:e6:52:ba:41:fc:52:77:53:
77:66:30:eb:ab:cc:28:6f:7e:71:32:43:df:66:ba:
09:ff:a1:fa:38:a0:75:dd:5c:4c:62:80:3b:49:dc:
18:56:e0:60:97:26:70:f9:63:f8:df:2e:d6:0c:20:
1f:5b:0d:34:fb:ff:45:69:df:94:db:35:71:fe:36:
51:bb:cc:51:8f:1a:b2:e3:56:d8:97:04:c8:38:84:
1d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E5:0F:BD:B7:53:12:3B:10:35:07:4A:6B:13:49:1A:17:0C:C2:1E
X509v3 Authority Key Identifier:
keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3f:b1:61:37:b1:da:91:af:68:93:5e:7f:e7:11:3e:96:09:
25:21:4c:55:e3:88:4a:08:83:7f:01:d2:b3:35:8f:d7:7f:b4:
82:6a:73:05:4e:50:7a:74:46:26:93:c1:33:5d:5a:e5:ff:64:
ca:ed:e4:c0:df:c6:a4:04:1a:c9:04:90:b5:0e:1f:07:ee:26:
1d:36:45:69:b3:38:8b:4e:4a:0a:2b:35:cd:e7:85:d4:33:42:
07:a5:40:74:c4:b6:64:dd:6c:37:18:70:86:6f:02:0f:9b:13:
e7:ea:bf:2d:1e:8c:1b:17:8c:61:3c:a0:54:98:ac:ea:1a:f0:
a8:7e:4b:3d:ff:ee:d7:a8:a4:b1:f1:8b:77:e9:44:dc:b5:6b:
02:30:7f:7d:6e:49:c3:2e:bb:a0:78:b6:99:d1:15:70:51:99:
22:b1:b3:87:e0:01:f5:8c:60:8d:e9:59:50:ee:72:c9:b6:5b:
bf:d8:45:c4:08:4e:b0:ae:5b:b0:19:4a:f6:ee:f7:9e:92:a3:
a3:0c:f2:9a:34:10:54:31:40:ef:ae:01:ea:77:d0:01:86:13:
5d:94:90:e3:fd:39:79:19:05:8c:7e:c5:a3:7f:aa:fa:c7:05:
1b:2c:4d:a5:a1:66:b1:08:6f:1c:bd:57:ef:b7:68:7b:a8:0d:
69:2c:df:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:30:09 2026 by rpki-client