Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
File: CiINqbbilYVbYn_qYQ4cthZGiUs.mft (raw, json)
Hash identifier: CB9vAN/HjjicOPUi70HW+Xk1NK2qiQKpPMSM4Lq9UR0=
Subject key identifier: 40:75:39:25:6A:49:19:86:B6:5E:9E:14:B9:2D:CA:1F:61:62:8A:1D
Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Certificate issuer: /CN=0a220da9b6e295855b627fea610e1cb61646894b
Certificate serial: 019F927F7BAF5392F8C2A275062B9B8F53FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
Manifest number: 1547
Signing time: Fri 24 Jul 2026 05:00:55 +0000
Manifest this update: Fri 24 Jul 2026 05:00:55 +0000
Manifest next update: Sat 25 Jul 2026 05:00:55 +0000
Files and hashes: 1: CiINqbbilYVbYn_qYQ4cthZGiUs.crl (hash: kHNy7OnIKUNFpBFSlkBUdmaRFfCJ3aeJ7IUCdZHTYKo=)
2: rXLqqCZ5hf5h4ak7-J87ANzm0Nk.roa (hash: mVE+xG0sJPMu7e4f75e+8AtJaA+JDEMEjzG8yFMRLQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:7b:af:53:92:f8:c2:a2:75:06:2b:9b:8f:53:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b
Validity
Not Before: Jul 24 05:00:55 2026 GMT
Not After : Jul 25 05:00:55 2026 GMT
Subject: CN=407539256a491986b65e9e14b92dca1f61628a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e3:b4:10:43:b2:6f:25:4c:bb:42:8b:46:8f:
ce:db:82:02:53:06:ff:d9:5b:01:f4:b3:4d:b1:62:
64:58:43:9d:1d:45:58:07:75:06:29:18:a8:42:7e:
51:7d:b3:85:45:b2:16:74:2f:e0:80:87:e3:77:11:
69:5d:5f:7f:8d:20:be:2d:7c:6a:6c:a3:09:16:a1:
d6:b1:ac:f5:16:45:37:7c:30:e7:81:17:4a:67:10:
23:3d:d6:65:91:e1:55:ce:5c:77:b3:40:a7:02:25:
51:5a:28:da:dd:dd:03:c9:2f:c0:44:f0:58:7d:db:
df:7b:8e:be:80:5b:4b:b8:f9:4a:a3:eb:b3:c3:96:
bd:ac:5f:6e:7e:8e:96:cc:31:8f:7c:61:f8:fb:83:
48:02:47:54:4f:02:ea:a0:55:bf:2e:34:b1:eb:06:
c0:10:a6:a1:f2:01:a0:56:17:52:c3:a9:0d:23:06:
dd:f6:e8:5d:f4:94:da:43:90:65:a9:88:21:22:bd:
54:4a:3d:f8:3e:1b:3f:0a:3e:e1:27:0f:60:cb:6f:
b8:32:27:1b:a6:25:bf:a0:2e:ae:ec:3e:37:0b:e0:
dd:29:a7:46:4a:07:cb:f7:7b:8c:0f:56:29:a7:2e:
4c:f1:09:6a:24:27:b7:34:26:ea:c2:8c:02:6a:2c:
1e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:75:39:25:6A:49:19:86:B6:5E:9E:14:B9:2D:CA:1F:61:62:8A:1D
X509v3 Authority Key Identifier:
keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c4:a6:41:ea:f2:72:48:8c:f0:ac:01:61:be:6a:13:1c:61:
e8:c9:ac:4a:8f:c8:71:52:2b:e7:8f:80:d0:65:53:c4:77:54:
a5:47:de:a2:39:44:87:27:de:11:88:01:a4:91:04:7f:a0:43:
7c:8d:f1:cd:80:47:b4:d0:f1:ec:dc:96:c4:06:6a:93:76:7c:
67:f8:2a:a5:69:53:36:5f:6f:b4:75:5e:5b:bf:e7:ca:61:72:
88:72:9c:78:9f:a8:41:30:a6:6e:69:a5:8f:db:f9:21:ab:96:
eb:51:4b:a1:6f:b6:45:6c:f0:c7:58:50:19:02:cb:48:99:4f:
19:62:23:5f:fe:6a:01:d7:f2:38:ef:5e:3b:d3:b2:02:fc:b8:
ed:29:c9:87:00:2d:65:01:95:17:3d:58:1b:ff:cd:5a:76:c3:
fa:ce:f1:4d:af:66:3e:c1:c8:59:d2:39:11:7e:c8:cf:cd:f0:
2d:a4:d4:ec:0e:0c:7b:4d:98:b8:96:fe:29:6d:b1:59:cd:63:
c2:bd:18:86:15:dc:69:dd:41:72:cb:ef:3a:f7:80:78:3c:90:
63:82:bf:4a:74:2d:38:d5:67:dc:76:55:16:61:f7:f2:b1:4d:
0f:75:e9:24:99:74:04:d8:13:5c:a9:56:97:50:89:21:aa:d2:
57:30:1a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:16:08 2026 by rpki-client