
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
File: CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json)
Hash identifier: hiCjTdrY/lOHvvQ9o8kTkmiV3GbIyKzJ/A3Lyymq2JY=
Subject key identifier: 51:BB:FA:08:8D:5B:13:B5:2D:5F:A5:3A:8E:6B:A3:3E:31:B3:82:DD
Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
Certificate issuer: /CN=08819c27a5be3d2db222b05637447ed6e8324873
Certificate serial: 019FA974C65076722EACE391F4AA302CD44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
Manifest number: 1714
Signing time: Tue 28 Jul 2026 16:00:30 +0000
Manifest this update: Tue 28 Jul 2026 16:00:30 +0000
Manifest next update: Wed 29 Jul 2026 16:00:30 +0000
Files and hashes: 1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: qr9esbd5SqHtCkyb2kemTp14Wi65DjhdQKbE+uCwB9o=)
2: IQDg8XUunRwYK-C6GvbnJQ7EHM0.roa (hash: DFgB9yi6JU5q5PfQOPOS6steUe02MkhWX55KVlM+wDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:c6:50:76:72:2e:ac:e3:91:f4:aa:30:2c:d4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873
Validity
Not Before: Jul 28 16:00:30 2026 GMT
Not After : Jul 29 16:00:30 2026 GMT
Subject: CN=51bbfa088d5b13b52d5fa53a8e6ba33e31b382dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:d9:c5:b3:d5:b4:c0:07:62:94:34:42:c1:
9d:06:d0:d0:7b:03:ce:ab:b2:59:a7:26:5c:31:60:
3e:f2:96:5a:80:f6:dc:63:e7:bc:fc:f3:b5:06:92:
e4:75:40:48:3d:08:82:1f:50:6f:e9:ff:7a:c0:09:
fe:d9:5d:69:66:77:e4:02:26:cc:83:f0:9e:d4:db:
18:45:9c:f3:f2:61:cb:90:5b:9a:4f:bf:33:33:72:
92:dc:20:90:32:4a:78:cc:01:f4:65:7e:8b:9c:68:
22:aa:f6:c9:93:73:8d:fc:34:02:5a:c5:15:07:dd:
e7:ee:0e:65:c4:54:28:9e:4c:c2:17:eb:e8:57:12:
26:fa:4e:fd:82:3a:6a:4b:73:2b:e5:c0:ef:c8:72:
65:54:f4:9f:c9:29:e3:8b:94:43:52:27:45:48:c1:
2b:79:3b:84:df:4f:8f:60:f5:53:24:e8:01:3f:44:
c3:2e:ac:3b:a0:f1:6f:38:cd:01:56:1d:7c:3a:73:
f7:92:c1:36:7d:a3:38:4d:d0:1e:ab:0a:5d:fe:98:
7d:a6:7f:35:4f:14:37:21:87:79:df:30:21:89:a3:
bb:ad:55:48:5b:49:05:26:a1:99:26:51:ee:7b:2b:
16:3b:b5:62:a0:7a:cc:30:7a:54:88:59:34:d3:2e:
b9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BB:FA:08:8D:5B:13:B5:2D:5F:A5:3A:8E:6B:A3:3E:31:B3:82:DD
X509v3 Authority Key Identifier:
keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:45:3b:be:3f:92:82:f6:23:15:6b:80:2e:76:34:37:11:fa:
59:3e:ad:b6:41:75:ab:c1:43:11:e2:e5:e8:20:d4:c7:61:34:
08:56:16:98:c3:69:19:6e:a6:76:22:68:3f:37:09:20:b1:1b:
ea:1c:98:73:91:60:88:ef:ba:13:56:fa:91:20:7e:1c:3d:da:
af:f3:6b:62:eb:83:9b:e9:9c:df:47:f9:e6:fc:e6:e7:0f:7c:
69:94:4c:ec:64:2b:b3:4f:9f:30:1d:91:fc:57:1c:5c:2a:a1:
3f:ef:5d:ab:df:ff:d9:d5:da:6f:14:e6:65:f9:b5:bf:a2:7e:
54:57:8b:db:a3:5a:8e:86:8a:a6:52:f7:31:ea:3d:ca:9c:9a:
dc:9e:c4:8f:82:8c:cc:e3:d8:d2:9c:c1:7f:11:d0:58:97:69:
2b:c9:a0:cc:29:69:50:ae:d9:2d:bc:77:74:37:7b:c9:c8:69:
9f:93:d1:10:f2:99:1a:16:c8:0e:21:9b:36:0d:cf:8e:17:25:
a1:3b:2f:99:eb:72:e9:08:cd:2d:94:b1:75:a9:18:97:82:2d:
eb:8d:21:50:38:18:69:a4:83:bd:9c:09:53:cf:be:cb:d9:07:
a4:48:fd:13:6c:c1:6d:e7:93:b9:74:30:20:09:92:8b:4a:ba:
1c:7d:a4:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdMZQdnIurOOR9KowLNRNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODE5YzI3YTViZTNkMmRiMjIyYjA1NjM3NDQ3ZWQ2ZTgz
MjQ4NzMwHhcNMjYwNzI4MTYwMDMwWhcNMjYwNzI5MTYwMDMwWjAzMTEwLwYDVQQD
Eyg1MWJiZmEwODhkNWIxM2I1MmQ1ZmE1M2E4ZTZiYTMzZTMxYjM4MmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLfZxbPVtMAHYpQ0QsGdBtDQewPO
q7JZpyZcMWA+8pZagPbcY+e8/PO1BpLkdUBIPQiCH1Bv6f96wAn+2V1pZnfkAibM
g/Ce1NsYRZzz8mHLkFuaT78zM3KS3CCQMkp4zAH0ZX6LnGgiqvbJk3ON/DQCWsUV
B93n7g5lxFQonkzCF+voVxIm+k79gjpqS3Mr5cDvyHJlVPSfySnji5RDUidFSMEr
eTuE30+PYPVTJOgBP0TDLqw7oPFvOM0BVh18OnP3ksE2faM4TdAeqwpd/ph9pn81
TxQ3IYd53zAhiaO7rVVIW0kFJqGZJlHueysWO7VioHrMMHpUiFk00y65bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFG7+giNWxO1LV+lOo5roz4xs4LdMB8GA1UdIwQY
MBaAFAiBnCelvj0tsiKwVjdEftboMkhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMt
MWNhZjA2MTEzNzRkLzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMtMWNhZjA2MTEzNzRk
LzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUU7vj+S
gvYjFWuALnY0NxH6WT6ttkF1q8FDEeLl6CDUx2E0CFYWmMNpGW6mdiJoPzcJILEb
6hyYc5FgiO+6E1b6kSB+HD3ar/NrYuuDm+mc30f55vzm5w98aZRM7GQrs0+fMB2R
/FccXCqhP+9dq9//2dXabxTmZfm1v6J+VFeL26NajoaKplL3Meo9ypya3J7Ej4KM
zOPY0pzBfxHQWJdpK8mgzClpUK7ZLbx3dDd7ychpn5PREPKZGhbIDiGbNg3Pjhcl
oTsvmety6QjNLZSxdakYl4It640hUDgYaaSDvZwJU8++y9kHpEj9E2zBbeeTuXQw
IAmSi0q6HH2k/g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:32:38 2026 by rpki-client