Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
File: CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json)
Hash identifier: m1sH60l4bT+FZBgAJ1OrwKYetI7nvDTCgGOi9on6qIc=
Subject key identifier: 1D:45:C7:AB:0B:A4:0A:2C:34:2B:C7:31:6D:52:76:C8:A4:DE:8F:BD
Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
Certificate issuer: /CN=08819c27a5be3d2db222b05637447ed6e8324873
Certificate serial: 019CAAC6463C04D6306EE57DA13A59103E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
Manifest number: 1587
Signing time: Sun 01 Mar 2026 19:00:46 +0000
Manifest this update: Sun 01 Mar 2026 19:00:46 +0000
Manifest next update: Mon 02 Mar 2026 19:00:46 +0000
Files and hashes: 1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: kllXPlTOz3CI7UNeWZ29Kybp6wR1aZ+u06xBlKNQp0g=)
2: IQDg8XUunRwYK-C6GvbnJQ7EHM0.roa (hash: DFgB9yi6JU5q5PfQOPOS6steUe02MkhWX55KVlM+wDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:46:3c:04:d6:30:6e:e5:7d:a1:3a:59:10:3e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873
Validity
Not Before: Mar 1 19:00:46 2026 GMT
Not After : Mar 2 19:00:46 2026 GMT
Subject: CN=1d45c7ab0ba40a2c342bc7316d5276c8a4de8fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a3:fd:44:d8:09:c3:87:0b:66:fb:ff:f2:96:
27:5c:f8:19:b9:f1:6d:af:f5:00:0e:4e:e0:a6:7d:
d9:c0:09:d9:c7:2d:87:9e:b6:6f:ff:89:f2:ad:ec:
cb:d7:12:b8:ed:3c:02:70:4f:4d:ce:07:99:c4:2b:
31:aa:23:1c:c1:4e:d6:77:80:4a:55:87:f8:19:5b:
e8:e2:06:bf:61:f8:a8:d4:c5:03:83:03:96:1e:51:
6c:a6:51:6b:0b:2b:7a:e8:97:6d:ef:e0:96:c8:ca:
0d:d4:6a:3e:d7:af:ec:c5:62:d6:ea:61:8f:33:86:
51:ad:c9:94:e5:56:ac:8b:fb:a4:71:9d:92:f6:dd:
ca:99:6f:42:dc:c2:62:b1:33:9d:6d:b2:fe:ea:29:
67:d3:d3:9d:9c:01:0e:d8:af:da:42:7d:b6:3b:b8:
e9:a8:d5:a0:cb:e6:b9:3c:ad:67:8c:b5:cc:b2:7d:
89:c3:2d:8d:53:a7:0c:42:21:8b:40:c3:ce:b9:0a:
a5:ba:a9:c8:fd:34:09:5a:9a:d3:2d:74:d1:ab:fd:
2a:dc:fd:8f:1e:5f:cd:54:b5:35:98:59:8b:bc:a3:
50:45:4b:36:b0:cf:78:e9:82:59:99:d6:83:05:c5:
bc:39:19:28:94:38:07:1e:09:30:43:0f:de:c3:ed:
0a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:45:C7:AB:0B:A4:0A:2C:34:2B:C7:31:6D:52:76:C8:A4:DE:8F:BD
X509v3 Authority Key Identifier:
keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8b:57:d1:9b:0c:2c:d5:a5:24:ab:81:e6:7c:78:2b:4c:83:
78:a6:11:9d:a6:75:38:81:e5:17:4f:41:b8:38:19:eb:0a:df:
dc:9e:0d:c6:bd:c7:ca:be:01:62:da:dc:79:b9:97:d2:05:1a:
54:ff:2c:e1:ac:fe:e3:74:7a:7a:b3:1e:bb:fa:19:52:4e:71:
3e:86:fd:a4:7d:16:63:17:fe:ed:b6:f4:c7:75:be:23:64:c6:
9a:08:8b:82:d5:d4:f4:f0:34:82:d8:db:ee:a5:b4:d8:90:7f:
10:ad:74:2c:a8:69:dc:9e:81:f7:75:e7:b9:c8:1b:6d:79:5f:
fa:a6:87:71:85:ce:d9:16:51:6b:e8:6a:4d:0d:23:ff:f5:be:
a3:a0:90:e3:1f:03:51:05:73:03:3a:7c:b5:6a:ce:06:d1:ba:
f0:19:b0:36:67:0c:aa:fc:e0:b3:1c:ee:ae:0a:43:19:90:50:
1a:5a:ac:c2:03:2b:6e:04:43:2e:1a:91:84:be:f8:f7:18:9e:
6f:60:5c:88:ea:41:95:7c:0d:ae:c3:ea:92:43:ed:01:d8:be:
a5:94:f6:5c:60:1e:9c:28:6d:76:b1:32:88:e6:bb:4e:05:c9:
70:fb:ec:ac:bd:40:a3:48:75:21:24:09:51:3d:4f:fe:e5:81:
6f:6b:d8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:09 2026 by rpki-client