Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
File: CI4DIScTMq_HfkyFefDlVZzAnFA.mft (raw, json)
Hash identifier: A4mNiy0KGP0GM5E2+3OYy5UXwP2+OWVYeV0uBWYQDJA=
Subject key identifier: 79:F2:03:F9:1E:47:55:07:F2:E4:64:8E:CA:B7:77:4C:28:12:FE:E7
Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50
Certificate serial: 019CAC1027E66BA49E44B12735C671AFAFFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
Manifest number: 150E
Signing time: Mon 02 Mar 2026 01:01:05 +0000
Manifest this update: Mon 02 Mar 2026 01:01:05 +0000
Manifest next update: Tue 03 Mar 2026 01:01:05 +0000
Files and hashes: 1: CI4DIScTMq_HfkyFefDlVZzAnFA.crl (hash: AdLcbLhDnonWT6u4iG999CQ/7k+7i2+WK1gayb73UrI=)
2: KtMqQnXaTgjktxdZ9isOcMNd_ow.roa (hash: EvEd1Dr3LRZFLdIp6Wy0JVab3CsirxaKCwus40x7MwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:27:e6:6b:a4:9e:44:b1:27:35:c6:71:af:af:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50
Validity
Not Before: Mar 2 01:01:05 2026 GMT
Not After : Mar 3 01:01:05 2026 GMT
Subject: CN=79f203f91e475507f2e4648ecab7774c2812fee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:8f:38:36:58:64:1d:35:ef:b0:fa:0f:56:
50:a3:14:48:c4:60:e4:97:a9:1a:8f:7a:e0:5a:ef:
bd:17:ad:bc:b1:79:fb:5f:22:54:0c:a8:df:92:ca:
93:44:98:d7:a8:81:49:42:bb:72:89:8a:cd:c9:d5:
d6:03:c7:a3:bb:a7:5a:ae:88:e9:97:b6:92:09:8e:
8c:3d:76:33:bb:66:59:ed:30:d3:31:6e:ef:a2:92:
28:88:5f:32:2e:79:45:6a:ee:b0:fb:1c:29:4a:35:
ba:38:0a:de:86:87:61:c5:95:55:b9:74:20:fc:ce:
86:ee:5f:f5:7b:14:74:38:33:ae:70:aa:cd:a3:04:
16:96:10:f0:08:32:4a:99:5b:ae:1c:5c:bb:2f:c5:
27:eb:ed:23:3c:0f:13:76:07:fc:82:e4:8f:d4:c1:
02:15:70:fc:fb:c9:fe:00:22:db:0f:0b:80:e7:36:
e7:4f:c2:ed:e3:e2:9c:9e:3e:bb:a8:67:06:5e:c0:
ae:0a:06:ed:b9:06:cd:74:0e:1a:54:2f:54:8c:74:
98:ef:77:33:6b:99:a8:20:d6:50:f8:f7:a9:92:63:
6b:f5:7e:7a:a7:85:80:ad:ab:a1:cc:10:f7:a4:e3:
15:ab:21:a1:26:67:c4:d9:9a:f1:bd:0f:bc:f0:ba:
6f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F2:03:F9:1E:47:55:07:F2:E4:64:8E:CA:B7:77:4C:28:12:FE:E7
X509v3 Authority Key Identifier:
keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:dc:5f:e5:3c:5d:ce:15:46:6e:fc:2e:76:6a:3a:14:0b:f0:
46:c0:e3:1c:16:0f:d7:17:96:e6:6b:91:03:3a:63:c1:dc:e9:
f2:bb:93:50:24:b6:8a:b3:1f:2e:15:cc:ad:f7:a1:bd:44:b0:
b8:3f:24:fe:c0:a3:81:70:92:c6:4d:18:b3:fb:2f:d5:9d:86:
13:f6:ea:97:0a:71:30:42:d5:70:fb:f3:b8:1e:3b:b2:c0:7b:
cf:59:ee:61:8c:1c:6d:dd:ab:53:ff:57:4f:f4:0f:dc:38:e8:
37:3a:f6:a3:42:4e:75:53:2f:22:10:d6:ce:2b:44:8c:3c:66:
a3:ed:84:ac:2b:4c:0f:7c:d6:4f:48:15:39:21:c2:1c:81:87:
b6:f5:05:1d:40:50:b8:2c:d7:fc:da:f5:a3:13:c9:6d:21:0a:
3c:94:14:38:ce:ff:e2:d3:92:44:cd:1a:f5:b3:3a:94:72:cb:
97:76:65:7e:71:16:1d:44:94:78:77:99:30:3c:0e:16:2a:98:
f6:b9:88:6b:7d:25:47:e0:ca:a6:18:13:32:54:b9:d5:1d:a5:
21:56:de:09:41:0e:34:6c:d8:76:a7:e5:f7:6f:9e:e2:dd:8c:
c3:93:28:58:8e:61:23:9c:97:00:9f:0c:89:67:3c:01:d7:a7:
a4:80:47:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:33 2026 by rpki-client