Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
File: CI4DIScTMq_HfkyFefDlVZzAnFA.mft (raw, json)
Hash identifier: TAU0h/syqBDwCIfL+Z8nag8JJvhM4Sp40D2yYmHa4DU=
Subject key identifier: A7:16:6C:9B:A9:B9:7D:84:19:A2:97:CB:6A:AC:87:C6:D5:02:54:94
Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50
Certificate serial: 019EBF2370823D4A5B82E4FC339E397C1D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
Manifest number: 1621
Signing time: Sat 13 Jun 2026 04:00:31 +0000
Manifest this update: Sat 13 Jun 2026 04:00:31 +0000
Manifest next update: Sun 14 Jun 2026 04:00:31 +0000
Files and hashes: 1: CI4DIScTMq_HfkyFefDlVZzAnFA.crl (hash: 7yAWJj1xnoQrxskOOGyWRA980Lppg1BSiGFMMLiSaCw=)
2: KtMqQnXaTgjktxdZ9isOcMNd_ow.roa (hash: EvEd1Dr3LRZFLdIp6Wy0JVab3CsirxaKCwus40x7MwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:70:82:3d:4a:5b:82:e4:fc:33:9e:39:7c:1d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50
Validity
Not Before: Jun 13 04:00:31 2026 GMT
Not After : Jun 14 04:00:31 2026 GMT
Subject: CN=a7166c9ba9b97d8419a297cb6aac87c6d5025494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:02:a8:f2:b3:86:24:91:b6:ac:35:38:4c:b6:
95:ca:78:d8:a0:24:f3:ff:e3:a8:06:78:42:86:74:
22:7f:25:42:21:53:8e:36:c6:72:13:75:e3:de:c3:
a4:8b:0e:cc:af:12:a9:b6:93:d5:96:0c:58:13:73:
28:ca:a9:ce:a6:e3:27:df:9e:82:4a:c1:af:06:a8:
c9:58:0a:3a:9d:f5:c1:8a:77:6a:ac:cb:da:80:c0:
bb:ab:f2:b2:76:f5:69:77:e6:35:63:2f:d4:97:d7:
6a:16:f3:6f:bf:44:c6:af:a3:67:29:7b:96:3f:ed:
01:7e:63:bf:8e:82:47:71:c2:b4:b1:33:a8:30:0a:
1e:0b:69:8a:2c:58:c5:34:dc:0e:60:0d:b6:50:ab:
ec:21:ef:f0:f3:49:71:25:9d:49:d3:53:a1:b3:b1:
de:26:7e:6f:c7:5e:15:b9:92:78:a4:5f:6e:86:36:
00:fb:09:3b:bd:c8:99:fc:6f:c8:78:b7:03:9e:77:
0c:e1:f0:0d:43:d6:3c:f6:20:e2:39:37:6e:62:8e:
ae:7b:58:93:cd:f5:2b:7b:17:ea:a6:60:94:57:c0:
56:79:26:c1:ec:f6:31:c3:bc:d9:98:31:a1:2f:6e:
f9:1b:d8:85:6e:ea:c3:10:8d:99:aa:67:78:35:6b:
ad:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:16:6C:9B:A9:B9:7D:84:19:A2:97:CB:6A:AC:87:C6:D5:02:54:94
X509v3 Authority Key Identifier:
keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ee:20:65:f2:06:d3:bb:1c:21:5d:53:be:82:a9:fc:ca:1c:
c9:6c:ef:e4:8d:81:79:11:1f:dd:f6:c0:73:36:4a:3a:a6:2f:
91:64:90:f5:9c:d6:e1:29:8f:f6:75:13:22:05:31:65:ae:46:
58:8b:a4:01:9c:72:05:f7:ea:ee:54:8f:19:75:0b:f6:04:a2:
e9:80:d3:18:23:22:ca:5c:72:98:b5:3a:18:52:37:8f:48:41:
50:f6:ca:79:82:8f:2d:b6:62:e0:ba:5a:62:e0:ee:fe:83:11:
fb:7f:d4:92:d3:d7:c7:1e:fc:05:26:b0:24:84:92:21:0a:2b:
f1:49:cb:fb:3d:cb:0a:37:5d:37:05:7c:8b:8e:20:a2:1a:a7:
2a:ce:79:96:6f:78:fb:d7:7e:e3:1a:df:db:09:9a:e1:85:88:
24:61:15:c5:31:cd:21:4b:ab:61:ae:49:5d:cb:ef:22:39:80:
3d:f7:9f:3b:a5:69:78:26:ef:39:17:e9:9e:8c:43:68:b0:5e:
8b:c8:ba:10:a4:da:42:ca:66:22:3c:9a:5d:c2:18:26:44:da:
d3:92:00:d1:27:13:41:08:1c:87:e2:4d:34:9e:8c:ec:08:53:
ef:7c:01:3b:db:1f:b2:67:64:b4:20:4a:85:e5:60:8b:7b:c8:
8b:cb:59:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:52:50 2026 by rpki-client