Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
File: CI4DIScTMq_HfkyFefDlVZzAnFA.mft (raw, json)
Hash identifier: mad0q/9IT5g7xlFpozqUtIj43nL/w5GBp1eKmJi5Qtk=
Subject key identifier: 32:BB:94:94:EB:A3:54:20:B3:4F:2D:30:69:E3:AB:3F:75:43:AC:7B
Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50
Certificate serial: 019FAABE6082DC2DAA30CA6E1CD1AEACEEEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
Manifest number: 169B
Signing time: Tue 28 Jul 2026 22:00:30 +0000
Manifest this update: Tue 28 Jul 2026 22:00:30 +0000
Manifest next update: Wed 29 Jul 2026 22:00:30 +0000
Files and hashes: 1: CI4DIScTMq_HfkyFefDlVZzAnFA.crl (hash: DIUWOViaH91kVHz5sKGgTxsjSQXGxTq+Xi5oZ5br4K8=)
2: KtMqQnXaTgjktxdZ9isOcMNd_ow.roa (hash: EvEd1Dr3LRZFLdIp6Wy0JVab3CsirxaKCwus40x7MwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:60:82:dc:2d:aa:30:ca:6e:1c:d1:ae:ac:ee:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50
Validity
Not Before: Jul 28 22:00:30 2026 GMT
Not After : Jul 29 22:00:30 2026 GMT
Subject: CN=32bb9494eba35420b34f2d3069e3ab3f7543ac7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bd:59:34:ed:99:9c:c5:56:e0:9b:33:81:33:
97:7a:f4:ea:d7:ed:19:65:03:fa:11:11:2d:d5:5a:
c1:ac:1a:84:d6:ec:7a:95:fa:dc:72:14:9c:a5:0c:
0d:bd:79:78:e0:90:b2:ff:1e:77:e5:a2:76:31:b4:
60:fa:06:89:b7:76:24:f1:ee:12:df:a3:95:0f:7c:
09:bb:6c:ed:a5:82:a6:0c:2d:2a:50:be:dd:89:3b:
f6:ab:da:59:b0:d1:6d:73:20:32:00:aa:92:c0:5c:
25:86:e7:f5:92:0a:64:d5:fb:a1:56:f1:a1:2e:03:
cd:77:3e:c2:b4:b8:10:15:b2:eb:72:eb:15:2f:8a:
62:85:10:0b:56:35:65:f8:ca:61:ab:3c:a3:9c:7b:
2e:4a:bb:86:ee:0d:f8:54:cd:d2:d8:6e:73:38:ec:
eb:13:b9:28:72:4e:e5:f9:d7:0e:64:c7:73:b8:55:
08:3e:1d:f1:83:0d:5b:64:2b:e8:4d:42:80:8f:b1:
ca:e1:9f:d8:36:35:46:a5:ea:0e:a4:91:3c:15:19:
06:f6:65:bb:1d:e7:13:6a:f4:0d:33:bb:24:17:3b:
90:4a:aa:fc:3a:02:ab:e3:55:ea:aa:a8:74:0d:8b:
19:cf:2b:d3:7b:88:52:51:1c:b7:67:3b:6c:c5:d1:
46:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BB:94:94:EB:A3:54:20:B3:4F:2D:30:69:E3:AB:3F:75:43:AC:7B
X509v3 Authority Key Identifier:
keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e0:d3:95:bd:04:8a:fa:79:33:7e:30:fb:65:f7:ed:7b:70:
be:19:d2:96:51:84:c6:fd:b8:f2:00:e0:f2:ca:e0:63:bb:15:
ea:9a:02:e1:64:09:2d:4c:25:f8:f3:fb:45:7c:fa:e1:94:78:
94:78:cf:d4:72:e2:3d:04:5b:54:56:2f:a9:a3:b6:cb:39:bc:
13:c2:46:1d:19:0d:2c:28:f1:28:0b:7b:f5:b6:99:16:59:65:
4d:4d:73:00:fd:54:e8:98:76:5a:45:0d:56:f8:9b:cc:d2:82:
77:81:6b:08:f1:c6:51:10:7d:98:b0:d8:92:4f:bf:6d:ae:ca:
97:86:f0:7f:1a:6b:e6:86:c6:e7:e5:b2:e0:f2:6a:b8:c4:5f:
3c:de:87:79:81:4f:e2:77:d9:1b:e8:e2:7f:9f:8c:44:a9:6b:
84:ed:28:55:41:8e:43:07:83:4a:7f:a2:42:8e:97:45:43:e2:
b8:9a:a3:18:7c:63:be:75:00:06:f7:07:79:c7:73:49:d0:34:
ad:16:2b:31:00:99:ae:20:1c:ab:cf:74:48:8a:22:c6:4a:d9:
db:de:d2:2a:16:0d:d6:76:d4:d8:a6:c3:d4:99:6c:b3:71:cb:
cd:52:82:16:9d:89:ee:65:60:66:86:df:3f:5b:65:44:72:fa:
9e:85:2a:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvmCC3C2qMMpuHNGurO7qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OGUwMzIxMjcxMzMyYWZjNzdlNGM4NTc5ZjBlNTU1OWNj
MDljNTAwHhcNMjYwNzI4MjIwMDMwWhcNMjYwNzI5MjIwMDMwWjAzMTEwLwYDVQQD
EygzMmJiOTQ5NGViYTM1NDIwYjM0ZjJkMzA2OWUzYWIzZjc1NDNhYzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL1ZNO2ZnMVW4JszgTOXevTq1+0Z
ZQP6EREt1VrBrBqE1ux6lfrcchScpQwNvXl44JCy/x535aJ2MbRg+gaJt3Yk8e4S
36OVD3wJu2ztpYKmDC0qUL7diTv2q9pZsNFtcyAyAKqSwFwlhuf1kgpk1fuhVvGh
LgPNdz7CtLgQFbLrcusVL4pihRALVjVl+MphqzyjnHsuSruG7g34VM3S2G5zOOzr
E7kock7l+dcOZMdzuFUIPh3xgw1bZCvoTUKAj7HK4Z/YNjVGpeoOpJE8FRkG9mW7
HecTavQNM7skFzuQSqr8OgKr41Xqqqh0DYsZzyvTe4hSURy3ZztsxdFGawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDK7lJTro1Qgs08tMGnjqz91Q6x7MB8GA1UdIwQY
MBaAFAiOAyEnEzKvx35MhXnw5VWcwJxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hMmE1MmMtMTM2YS00M2E4LTk2N2Mt
ZjZkOTY2Y2E0ZjA3LzEvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9hMmE1MmMtMTM2YS00M2E4LTk2N2MtZjZkOTY2Y2E0ZjA3
LzEvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVeDTlb0E
ivp5M34w+2X37XtwvhnSllGExv248gDg8srgY7sV6poC4WQJLUwl+PP7RXz64ZR4
lHjP1HLiPQRbVFYvqaO2yzm8E8JGHRkNLCjxKAt79baZFlllTU1zAP1U6Jh2WkUN
VvibzNKCd4FrCPHGURB9mLDYkk+/ba7Kl4bwfxpr5obG5+Wy4PJquMRfPN6HeYFP
4nfZG+jif5+MRKlrhO0oVUGOQweDSn+iQo6XRUPiuJqjGHxjvnUABvcHecdzSdA0
rRYrMQCZriAcq890SIoixkrZ297SKhYN1nbU2KbD1Jlss3HLzVKCFp2J7mVgZobf
P1tlRHL6noUqJQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:54:33 2026 by rpki-client