Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
File: CI4DIScTMq_HfkyFefDlVZzAnFA.mft (raw, json)
Hash identifier: 3Jw6TMxbZ9Miuc4Wb2LmUcXQq1T7Y91eNVs+Ye5J33Y=
Subject key identifier: 2E:9F:EE:E8:C4:56:03:8C:4B:E8:3D:75:AC:CE:BB:5C:45:C6:18:80
Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50
Certificate serial: 019D9998ED0E989F635739D7F2A416077817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
Manifest number: 1589
Signing time: Fri 17 Apr 2026 04:00:29 +0000
Manifest this update: Fri 17 Apr 2026 04:00:29 +0000
Manifest next update: Sat 18 Apr 2026 04:00:29 +0000
Files and hashes: 1: CI4DIScTMq_HfkyFefDlVZzAnFA.crl (hash: yf5xQMWm+nfDHtT2svCuQ45LGXJs1kPrw5XTXH3J2Sk=)
2: KtMqQnXaTgjktxdZ9isOcMNd_ow.roa (hash: EvEd1Dr3LRZFLdIp6Wy0JVab3CsirxaKCwus40x7MwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:ed:0e:98:9f:63:57:39:d7:f2:a4:16:07:78:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50
Validity
Not Before: Apr 17 04:00:29 2026 GMT
Not After : Apr 18 04:00:29 2026 GMT
Subject: CN=2e9feee8c456038c4be83d75accebb5c45c61880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d9:a7:b1:92:c5:6f:e3:c7:52:2e:c6:60:f1:
f2:75:fd:d8:8a:fe:09:dd:18:e4:6c:c5:3f:5a:7a:
7f:73:c8:6a:fc:6e:d0:f2:07:f9:31:5b:fe:12:a9:
11:45:fc:50:14:07:d5:fa:42:0a:07:00:3d:0a:b9:
ff:aa:c8:2b:a8:2b:e3:4c:a0:3e:e2:92:19:4e:c8:
86:a0:c9:e3:6c:a8:0c:04:3d:89:d9:6b:d2:ec:a0:
9c:15:7d:19:26:ba:7a:ab:9d:79:7e:8f:69:b9:94:
10:24:09:9f:2f:2f:54:1a:99:dc:02:05:4c:1f:69:
14:f7:52:54:1e:c4:78:b9:92:dc:6f:4d:88:6a:85:
c9:44:fe:2b:51:4c:1b:b3:6a:8f:99:05:2c:cf:51:
66:10:4a:bb:48:22:65:c2:37:83:7a:cf:9a:32:e1:
16:28:b5:76:bf:73:c9:17:59:f9:a1:ec:35:e2:d1:
ea:ad:81:c4:61:cd:2b:d2:d5:70:69:78:fd:f4:48:
0e:2c:13:71:e9:f4:fa:95:99:27:5c:4f:30:c0:5c:
fc:66:70:bc:e5:9e:b5:c8:ae:b0:9e:90:5b:67:97:
72:16:cf:d1:97:5e:57:28:96:c0:8f:67:c8:f0:64:
d5:be:6c:51:5a:f6:f0:8c:c8:57:1f:ad:1a:1e:b4:
13:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9F:EE:E8:C4:56:03:8C:4B:E8:3D:75:AC:CE:BB:5C:45:C6:18:80
X509v3 Authority Key Identifier:
keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:28:f1:a3:dc:ab:13:69:3f:4b:3b:30:2c:20:a2:2d:22:1d:
1f:28:0b:80:bf:71:14:c0:67:36:0e:65:4c:13:d7:9d:0e:03:
0d:16:52:19:63:f0:cb:dc:f3:03:07:c5:fa:d9:ce:6c:e7:54:
eb:b1:64:a1:6a:da:8e:66:c9:12:65:2c:89:b7:f0:a3:33:5a:
7b:01:21:eb:8f:ae:2e:17:07:4b:50:10:de:42:92:bd:9b:33:
a0:52:ef:6c:e7:e8:dc:20:a4:19:fd:09:c7:2c:1b:bd:d5:a7:
78:55:83:b6:d6:1b:5e:ea:dd:78:57:b9:1a:ef:3f:4a:2a:b5:
de:f2:bc:d4:45:07:7c:d5:16:1f:fc:f4:7a:b8:37:d3:f5:98:
fa:e8:03:98:46:d3:8d:c9:dc:5a:3b:87:4d:8c:20:a9:3c:ca:
f6:9c:47:73:5a:d5:39:e0:7e:31:66:90:f5:c7:f9:ec:10:12:
64:ae:bd:b6:a1:fb:f9:79:12:c4:50:54:23:b3:59:88:7b:f6:
ac:58:32:0f:18:a9:ec:38:79:05:fd:1e:2f:c5:12:11:cd:b5:
63:c2:01:36:3d:ba:04:f6:24:d3:43:7e:b2:ae:31:8d:06:f6:
69:df:c6:78:fe:eb:19:9a:df:b0:8f:01:f4:ed:f2:eb:cb:a5:
44:d8:c0:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmO0OmJ9jVznX8qQWB3gXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OGUwMzIxMjcxMzMyYWZjNzdlNGM4NTc5ZjBlNTU1OWNj
MDljNTAwHhcNMjYwNDE3MDQwMDI5WhcNMjYwNDE4MDQwMDI5WjAzMTEwLwYDVQQD
EygyZTlmZWVlOGM0NTYwMzhjNGJlODNkNzVhY2NlYmI1YzQ1YzYxODgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9mnsZLFb+PHUi7GYPHydf3Yiv4J
3RjkbMU/Wnp/c8hq/G7Q8gf5MVv+EqkRRfxQFAfV+kIKBwA9Crn/qsgrqCvjTKA+
4pIZTsiGoMnjbKgMBD2J2WvS7KCcFX0ZJrp6q515fo9puZQQJAmfLy9UGpncAgVM
H2kU91JUHsR4uZLcb02IaoXJRP4rUUwbs2qPmQUsz1FmEEq7SCJlwjeDes+aMuEW
KLV2v3PJF1n5oew14tHqrYHEYc0r0tVwaXj99EgOLBNx6fT6lZknXE8wwFz8ZnC8
5Z61yK6wnpBbZ5dyFs/Rl15XKJbAj2fI8GTVvmxRWvbwjMhXH60aHrQTdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6f7ujEVgOMS+g9dazOu1xFxhiAMB8GA1UdIwQY
MBaAFAiOAyEnEzKvx35MhXnw5VWcwJxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hMmE1MmMtMTM2YS00M2E4LTk2N2Mt
ZjZkOTY2Y2E0ZjA3LzEvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9hMmE1MmMtMTM2YS00M2E4LTk2N2MtZjZkOTY2Y2E0ZjA3
LzEvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSjxo9yr
E2k/SzswLCCiLSIdHygLgL9xFMBnNg5lTBPXnQ4DDRZSGWPwy9zzAwfF+tnObOdU
67FkoWrajmbJEmUsibfwozNaewEh64+uLhcHS1AQ3kKSvZszoFLvbOfo3CCkGf0J
xywbvdWneFWDttYbXurdeFe5Gu8/Siq13vK81EUHfNUWH/z0erg30/WY+ugDmEbT
jcncWjuHTYwgqTzK9pxHc1rVOeB+MWaQ9cf57BASZK69tqH7+XkSxFBUI7NZiHv2
rFgyDxip7Dh5Bf0eL8USEc21Y8IBNj26BPYk00N+sq4xjQb2ad/GeP7rGZrfsI8B
9O3y68ulRNjASw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:56:02 2026 by rpki-client