Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
File: CgIUob8dOv0t1msjqZcxBrXTFso.mft (raw, json)
Hash identifier: JJ2nzrgFaaMQ5Od+xM4lSltAs/MbmfwcgfqksC3yw8Y=
Subject key identifier: 81:B2:6F:84:A6:F9:6B:32:05:19:A8:2D:8E:3D:05:36:28:96:75:AB
Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
Certificate issuer: /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Certificate serial: 019D9B196DD34DE66FCB4D182BFDD0165AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
Manifest number: 13A4
Signing time: Fri 17 Apr 2026 11:00:28 +0000
Manifest this update: Fri 17 Apr 2026 11:00:28 +0000
Manifest next update: Sat 18 Apr 2026 11:00:28 +0000
Files and hashes: 1: CgIUob8dOv0t1msjqZcxBrXTFso.crl (hash: p0OaOVHdJM2QNQXuH0s+1gbrTx0rm1XUrfqC08Hbg8c=)
2: Kr82PzCvD4Fk7jNwoZ0-iCZtxTE.roa (hash: XM1J6jO/D+cqiYMXDlDXyv/SlFsPZ20nk+XVsCUihVk=)
3: cENwAzhw60-ikgeBP0Wk-X-TPRQ.roa (hash: WKFy5CgMQiAy0y2WtEt+U7yH6EI/ABaKojXrx+8izJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:6d:d3:4d:e6:6f:cb:4d:18:2b:fd:d0:16:5a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Validity
Not Before: Apr 17 11:00:28 2026 GMT
Not After : Apr 18 11:00:28 2026 GMT
Subject: CN=81b26f84a6f96b320519a82d8e3d0536289675ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f7:aa:91:cb:0b:b5:61:bc:ab:c3:e6:cb:57:
f4:ea:b6:a5:7c:dc:58:7a:f5:49:99:ea:df:13:b3:
b3:c6:42:d6:3b:81:44:55:53:d4:8a:b0:7e:28:09:
1d:a9:dd:ff:38:be:e9:7e:d1:bf:c3:26:8a:5e:07:
a8:8f:57:f6:f1:a5:c3:be:0f:e5:be:0b:46:df:e4:
47:f2:6a:ff:35:ab:d7:2d:14:5b:47:fc:94:4e:e3:
3b:8b:0c:f4:42:3d:ee:39:31:c4:ca:8c:3a:92:1f:
91:75:70:80:c0:44:3b:33:d3:94:bc:23:ca:8f:69:
20:a6:c8:61:74:49:55:a2:fc:0f:80:7d:7d:ee:5a:
48:dd:53:2b:03:36:96:39:04:66:f9:6e:a8:c2:68:
9c:06:9a:0d:f3:7a:e2:69:c6:19:8f:af:e2:14:d6:
48:08:22:e6:c5:8f:48:8a:bf:8c:ba:42:57:74:9b:
02:ed:7d:19:f6:b2:89:7c:97:73:21:0e:64:e4:eb:
90:e0:53:e2:7e:ed:55:d1:57:75:e3:2d:1b:f8:8b:
b5:e9:ec:d5:d8:84:25:0d:30:17:5a:61:39:9e:b3:
36:1f:66:8f:91:c0:19:9c:27:52:ad:c7:d0:24:8c:
eb:1e:a6:fe:18:fe:43:9d:33:dc:dd:89:25:9d:f0:
09:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B2:6F:84:A6:F9:6B:32:05:19:A8:2D:8E:3D:05:36:28:96:75:AB
X509v3 Authority Key Identifier:
keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e8:24:8d:c2:b6:1c:5c:2f:1d:6c:72:31:0f:a0:3a:f4:1c:
dd:69:05:09:55:0b:04:12:9a:21:f0:78:01:3f:66:1d:50:f8:
fa:ec:a7:fd:57:99:ef:83:ac:42:c4:ca:b3:31:cf:e2:28:bb:
e5:17:af:5d:22:a4:3d:4f:90:3a:ef:2c:4e:71:1a:a8:2d:92:
af:d1:e4:45:3d:e4:61:d0:28:93:9c:46:b9:e7:11:81:6a:1c:
21:df:27:2d:dc:2d:bf:99:5e:87:7f:75:6b:c6:30:cf:b4:c3:
bf:44:51:6d:af:bd:20:df:a2:50:d7:52:6f:8a:d4:3c:3f:77:
17:62:3a:97:0d:f4:50:e8:ba:be:22:ea:da:ad:7d:36:f4:8c:
7b:de:67:7a:fc:26:02:92:85:5a:7d:5f:aa:75:38:1e:c7:8a:
68:00:fd:26:35:ae:83:a3:67:a1:81:a0:2e:23:84:44:26:6d:
d9:9c:75:20:cd:dc:ea:db:05:cf:85:43:61:fc:ad:b4:41:e5:
bc:7e:53:01:58:07:70:01:b7:3b:f7:50:4f:35:05:b3:b5:04:
b2:7c:88:8e:3a:b8:fa:01:52:8a:28:31:c1:45:7d:54:1f:97:
cd:32:3e:7c:b7:1e:eb:1e:d3:bb:55:15:3d:6e:c6:da:20:df:
6e:ec:5c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:16 2026 by rpki-client