Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
File: CiINqbbilYVbYn_qYQ4cthZGiUs.mft (raw, json)
Hash identifier: jqE+RnQrFeez2JfnmYtyCLkiK1p+D1R6zkbiOJtw7Ec=
Subject key identifier: 7E:34:66:51:7B:2B:2C:3F:66:E1:F6:47:04:C0:78:98:AB:DB:56:87
Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Certificate issuer: /CN=0a220da9b6e295855b627fea610e1cb61646894b
Certificate serial: 01A0D8DEE61E145485F3B57F929AD212BCED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
Manifest number: 15F0
Signing time: Fri 25 Sep 2026 14:01:21 +0000
Manifest this update: Fri 25 Sep 2026 14:01:21 +0000
Manifest next update: Sat 26 Sep 2026 14:01:21 +0000
Files and hashes: 1: CiINqbbilYVbYn_qYQ4cthZGiUs.crl (hash: 0PelKjVWfX5N0YYblYfYuHTpFYZQ3qpvvtRFfQqE5Rc=)
2: rXLqqCZ5hf5h4ak7-J87ANzm0Nk.roa (hash: mVE+xG0sJPMu7e4f75e+8AtJaA+JDEMEjzG8yFMRLQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:e6:1e:14:54:85:f3:b5:7f:92:9a:d2:12:bc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b
Validity
Not Before: Sep 25 14:01:21 2026 GMT
Not After : Sep 26 14:01:21 2026 GMT
Subject: CN=7e3466517b2b2c3f66e1f64704c07898abdb5687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:84:3a:07:1b:1d:cf:b7:2c:b5:fa:57:91:
b9:6a:c8:97:3d:e7:be:69:2d:5e:43:af:84:e9:57:
e2:8b:34:33:4b:af:1d:31:94:fc:de:8d:4a:0c:8f:
b4:f2:b2:7f:25:84:19:cc:97:ac:9d:07:2e:e9:bf:
0e:06:d4:99:86:92:26:7e:83:07:87:ce:2c:0d:2a:
db:32:ff:99:53:93:dc:4d:56:fc:3f:02:a5:ae:d8:
52:70:0c:c0:57:8f:59:2a:6c:03:a5:e8:c0:aa:2b:
fd:41:8a:f1:a4:c3:2a:51:f9:63:ad:06:8c:0c:13:
3b:a1:c0:eb:b7:af:a2:35:d0:fd:05:2a:de:25:77:
ec:38:b1:c0:b6:2a:d9:8e:50:12:13:65:2f:27:40:
a7:fa:54:29:76:52:fe:30:75:e8:05:cd:2d:3a:a6:
af:f2:67:bf:82:78:e5:97:bd:78:45:a7:7a:6f:53:
3e:ab:ba:ee:31:a5:ea:2f:25:2b:d1:e0:fa:bc:34:
79:15:b7:bf:4a:42:c7:4c:7a:b7:73:b8:b8:44:c4:
2c:9b:83:d0:00:f4:de:e4:c4:ac:57:ee:6f:ee:ce:
16:56:04:b0:ef:7b:1d:32:22:05:fb:a0:2b:c0:e2:
9b:48:4e:85:39:90:fe:0d:69:3b:50:58:6b:dd:cf:
21:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:34:66:51:7B:2B:2C:3F:66:E1:F6:47:04:C0:78:98:AB:DB:56:87
X509v3 Authority Key Identifier:
keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:63:f6:45:ca:0a:c8:5a:c6:8b:e5:8e:47:78:4c:a7:70:d1:
57:75:f9:4e:db:12:ad:70:ce:27:c1:a7:aa:9f:65:23:3b:09:
1b:b7:93:1e:74:29:a5:30:2f:c1:da:0a:2b:e8:cd:ca:f8:c8:
a4:1f:a3:e1:d3:3b:1a:3f:e7:f7:cb:c6:11:5f:50:4e:78:6b:
0b:5a:59:48:11:7f:de:84:ef:b8:13:c9:f1:01:fe:fb:5e:7f:
d8:52:05:4a:87:9f:bc:04:da:30:88:5e:d6:f5:76:b2:fd:0b:
86:47:6e:9c:4b:5d:a6:54:1d:81:fa:fc:40:82:95:4f:18:f0:
d9:71:10:0d:25:0e:c0:ec:bd:28:ca:4a:89:37:11:9a:6a:fd:
c7:e6:42:28:25:52:c3:c3:e8:ad:3c:de:c6:21:f2:9f:34:05:
28:7e:a7:fc:3b:a5:63:e7:72:ef:12:c5:8c:02:09:98:96:3c:
b5:ef:b5:43:99:97:d5:54:29:d7:3e:b4:8e:20:64:9a:f6:fc:
2e:f8:79:c0:09:3e:8e:9c:99:c6:91:92:d6:2d:79:d0:d7:f7:
d1:bf:58:e4:dc:f9:8e:1a:fa:f8:cb:9b:c1:e5:33:04:13:ad:
33:97:1d:c0:76:fd:9f:59:f5:4c:f3:4d:0e:8d:ac:c0:cd:8e:
68:b6:80:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDY3uYeFFSF87V/kprSErztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMjIwZGE5YjZlMjk1ODU1YjYyN2ZlYTYxMGUxY2I2MTY0
Njg5NGIwHhcNMjYwOTI1MTQwMTIxWhcNMjYwOTI2MTQwMTIxWjAzMTEwLwYDVQQD
Eyg3ZTM0NjY1MTdiMmIyYzNmNjZlMWY2NDcwNGMwNzg5OGFiZGI1Njg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxOEOgcbHc+3LLX6V5G5asiXPee+
aS1eQ6+E6VfiizQzS68dMZT83o1KDI+08rJ/JYQZzJesnQcu6b8OBtSZhpImfoMH
h84sDSrbMv+ZU5PcTVb8PwKlrthScAzAV49ZKmwDpejAqiv9QYrxpMMqUfljrQaM
DBM7ocDrt6+iNdD9BSreJXfsOLHAtirZjlASE2UvJ0Cn+lQpdlL+MHXoBc0tOqav
8me/gnjll714Rad6b1M+q7ruMaXqLyUr0eD6vDR5Fbe/SkLHTHq3c7i4RMQsm4PQ
APTe5MSsV+5v7s4WVgSw73sdMiIF+6ArwOKbSE6FOZD+DWk7UFhr3c8hIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH40ZlF7Kyw/ZuH2RwTAeJir21aHMB8GA1UdIwQY
MBaAFAoiDam24pWFW2J/6mEOHLYWRolLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85ODE4MzktOWRmYS00MmQzLWFjYjEt
NjIxODgyOGVkODk2LzEvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85ODE4MzktOWRmYS00MmQzLWFjYjEtNjIxODgyOGVkODk2
LzEvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2P2RcoK
yFrGi+WOR3hMp3DRV3X5TtsSrXDOJ8Gnqp9lIzsJG7eTHnQppTAvwdoKK+jNyvjI
pB+j4dM7Gj/n98vGEV9QTnhrC1pZSBF/3oTvuBPJ8QH++15/2FIFSoefvATaMIhe
1vV2sv0LhkdunEtdplQdgfr8QIKVTxjw2XEQDSUOwOy9KMpKiTcRmmr9x+ZCKCVS
w8PorTzexiHynzQFKH6n/DulY+dy7xLFjAIJmJY8te+1Q5mX1VQp1z60jiBkmvb8
Lvh5wAk+jpyZxpGS1i150Nf30b9Y5Nz5jhr6+MubweUzBBOtM5cdwHb9n1n1TPNN
Do2swM2OaLaAIQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:51:30 2026 by rpki-client