Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
File: CI4DIScTMq_HfkyFefDlVZzAnFA.mft (raw, json)
Hash identifier: A+jG7dsCI9OsTnL9oNlbKO/cZPA+6agJsdH5D9W8hws=
Subject key identifier: 59:46:D6:12:2E:84:43:B5:D2:E9:0B:83:8D:CF:64:32:BF:CD:92:C8
Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50
Certificate serial: 01A0C4B2F094CA1D09F2675FB629C248377D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
Manifest number: 172D
Signing time: Mon 21 Sep 2026 16:00:56 +0000
Manifest this update: Mon 21 Sep 2026 16:00:56 +0000
Manifest next update: Tue 22 Sep 2026 16:00:56 +0000
Files and hashes: 1: CI4DIScTMq_HfkyFefDlVZzAnFA.crl (hash: ZHnlud4HyFU2jNKKv51a/KwGb5QL7+HoXj2Yuq9r/CI=)
2: KtMqQnXaTgjktxdZ9isOcMNd_ow.roa (hash: EvEd1Dr3LRZFLdIp6Wy0JVab3CsirxaKCwus40x7MwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:f0:94:ca:1d:09:f2:67:5f:b6:29:c2:48:37:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50
Validity
Not Before: Sep 21 16:00:56 2026 GMT
Not After : Sep 22 16:00:56 2026 GMT
Subject: CN=5946d6122e8443b5d2e90b838dcf6432bfcd92c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a9:05:ef:d3:ba:ae:5d:bb:fe:0d:0f:ea:7a:
07:be:66:48:a1:64:47:a3:28:db:68:28:8b:52:e4:
0a:a5:3e:6d:a0:39:fe:64:52:33:7f:84:a9:dc:f8:
ec:2b:75:b6:f2:b5:38:5a:d9:e7:7b:05:da:8b:9e:
f5:ee:54:4c:b5:ad:71:7c:11:05:73:c6:6d:00:16:
cb:58:c3:10:0a:06:59:15:ae:85:36:85:fc:72:a7:
3f:70:7e:a0:b2:42:2c:04:96:b8:16:a1:6b:57:c7:
1d:89:ef:a4:9d:9f:15:19:30:92:fa:52:e9:df:9e:
da:40:fe:06:db:ad:f4:00:bf:a2:f2:60:da:3a:22:
5e:ed:ff:5d:22:9b:1f:7d:ed:1c:5f:3a:91:d3:d0:
d2:7f:97:d4:ea:8e:9f:49:4b:d8:bd:f7:50:83:05:
55:58:a9:09:00:1e:1a:fd:1e:02:36:8f:db:30:58:
93:15:da:a2:a5:9b:cd:21:4c:64:56:0b:4c:80:29:
48:9b:68:b4:67:48:0f:66:a1:1f:d0:ca:55:28:71:
a8:8a:e2:00:52:d8:00:5c:c9:82:93:ca:52:4a:c2:
29:5f:74:1d:d2:63:5b:65:db:a5:4d:8e:09:c8:b5:
f6:2d:b8:49:04:4b:3f:53:5a:b5:b7:35:1b:57:e9:
fb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:46:D6:12:2E:84:43:B5:D2:E9:0B:83:8D:CF:64:32:BF:CD:92:C8
X509v3 Authority Key Identifier:
keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d9:ac:cb:d0:e8:18:79:87:13:b5:f6:df:4e:7b:18:f1:b7:
f2:5c:2a:f2:e2:2d:71:35:17:61:3a:e7:dc:8c:36:04:da:2b:
23:d2:55:b4:89:71:0b:7f:6a:e9:3f:4a:16:26:c9:24:8b:be:
7e:14:d5:9a:08:92:7e:52:f9:0a:d6:e5:cf:fa:63:e5:c7:4a:
c8:c5:6b:ea:df:c8:e5:3d:0c:c2:ab:1b:5f:02:0f:5c:60:48:
05:be:47:74:80:b1:c2:e5:5e:a6:61:d5:75:09:bc:d1:aa:6e:
74:91:4d:cf:49:56:86:05:b6:46:df:b5:8a:1a:ac:62:4c:11:
3d:65:42:17:df:f1:89:70:f6:89:d2:68:35:02:f8:6b:ce:91:
a6:59:b7:f3:cb:a8:c9:ad:1e:71:b6:ea:e0:24:9a:c0:c4:82:
7a:ba:6b:fe:e7:c6:25:54:13:8b:da:c2:49:13:ce:5b:ca:7e:
db:b0:3b:bd:b8:57:95:d0:90:13:97:80:9e:11:00:a4:19:b9:
c9:73:c3:8c:78:db:5f:17:78:4b:8d:56:15:f7:9d:f7:03:16:
0a:23:45:25:d4:b4:cc:73:78:b2:ea:8f:a2:48:08:85:6e:df:
8d:cf:3c:55:90:dd:18:3e:27:84:3b:c7:0e:25:56:9d:cf:0b:
2e:2b:2f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:11:51 2026 by rpki-client