Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
File: CiINqbbilYVbYn_qYQ4cthZGiUs.mft (raw, json)
Hash identifier: y+tehBPUJ7frRvPzdKMNokfTBP4IZSa3Sk+1FAv4ddo=
Subject key identifier: A8:51:59:BE:27:66:83:6C:73:42:3A:17:51:45:CA:70:03:4F:1A:3F
Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Certificate issuer: /CN=0a220da9b6e295855b627fea610e1cb61646894b
Certificate serial: 019D2A72CCF5A0317CE67BA9B47BC98641CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
Manifest number: 1408
Signing time: Thu 26 Mar 2026 14:00:59 +0000
Manifest this update: Thu 26 Mar 2026 14:00:59 +0000
Manifest next update: Fri 27 Mar 2026 14:00:59 +0000
Files and hashes: 1: CiINqbbilYVbYn_qYQ4cthZGiUs.crl (hash: eDsqewjjNsdSz539Cfl5rbmK4heji25mn3OhbjR721M=)
2: rXLqqCZ5hf5h4ak7-J87ANzm0Nk.roa (hash: mVE+xG0sJPMu7e4f75e+8AtJaA+JDEMEjzG8yFMRLQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:cc:f5:a0:31:7c:e6:7b:a9:b4:7b:c9:86:41:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b
Validity
Not Before: Mar 26 14:00:59 2026 GMT
Not After : Mar 27 14:00:59 2026 GMT
Subject: CN=a85159be2766836c73423a175145ca70034f1a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fa:9c:0a:28:9a:3b:aa:ec:cf:6a:fe:7f:af:
36:68:5c:cd:2f:31:21:78:e9:b2:cb:34:ab:c9:56:
7a:a2:24:b4:20:8a:8b:61:7c:ba:37:92:2f:d3:70:
fb:aa:d0:84:a8:7a:66:9e:2d:bc:5a:06:32:84:66:
72:a2:bc:40:61:44:27:d0:8c:8c:60:a5:87:42:50:
1d:e7:43:33:a6:3f:03:d7:58:b7:63:a7:b4:ae:e9:
26:96:12:0d:c1:94:89:97:7f:0e:26:5f:3c:05:84:
88:03:88:9c:00:5e:43:03:8c:31:50:74:8c:42:67:
70:9e:99:4e:57:30:66:63:ea:82:13:c8:96:dc:47:
1f:a4:8f:da:67:17:82:b3:7c:fc:01:b1:ee:47:76:
39:5c:4b:e9:00:25:38:73:c8:79:a2:9f:9f:42:0a:
90:eb:68:4c:cc:fd:90:c6:eb:b4:d2:fe:bb:58:a2:
ae:f7:f4:07:0b:b4:f7:9c:1e:49:77:f4:6e:1a:8a:
53:c5:30:f9:43:f9:ce:7a:f1:0f:d7:de:47:ce:17:
ec:97:41:ed:94:ff:2f:c4:bc:95:3d:cd:42:a3:43:
2b:16:ed:b6:cc:dd:72:77:98:d6:ad:59:99:a7:1a:
b0:02:8f:9e:25:3d:49:21:23:7f:43:52:2b:a1:d7:
00:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:51:59:BE:27:66:83:6C:73:42:3A:17:51:45:CA:70:03:4F:1A:3F
X509v3 Authority Key Identifier:
keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:8a:97:db:5f:52:db:bc:ac:c9:c0:1e:2d:af:29:cc:4e:19:
96:8b:c0:fd:7d:b1:33:24:f8:40:0c:4e:c4:ed:b2:ac:c1:bb:
a9:ac:ae:0b:91:cb:18:05:f5:a8:0b:31:96:d0:fb:1a:3c:5a:
3e:c3:50:d0:39:80:be:88:4a:72:be:82:ec:c8:0a:17:85:18:
ef:4b:ee:d5:3f:f4:b9:6b:15:52:e1:40:e2:05:dc:2b:42:a3:
80:57:5f:19:a6:79:0e:6a:a6:22:05:4c:c9:8f:95:cb:30:86:
85:d7:cc:af:77:b8:57:6d:14:62:59:05:72:35:51:2f:a2:db:
e7:b5:ab:05:aa:87:3d:71:82:2e:f0:5f:5e:03:38:5e:20:d9:
59:06:5e:20:d7:ab:05:d7:ce:d2:8a:29:b3:36:ca:45:db:2d:
21:cf:a8:49:74:57:b9:95:1c:57:6c:c6:b8:ff:6d:28:9a:da:
1a:08:42:67:09:bc:72:cd:62:1a:4c:d2:2c:c6:d1:d9:62:e8:
39:5f:77:44:cf:ec:14:3f:f2:7b:91:f9:32:1d:d2:1f:31:0f:
e3:6d:09:f0:ca:23:8c:16:0a:01:db:d1:2d:55:8d:19:35:c5:
17:88:d0:c1:fc:d1:7c:df:f8:05:38:e4:71:7b:8a:f8:0d:d6:
23:2e:dd:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcsz1oDF85nuptHvJhkHKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMjIwZGE5YjZlMjk1ODU1YjYyN2ZlYTYxMGUxY2I2MTY0
Njg5NGIwHhcNMjYwMzI2MTQwMDU5WhcNMjYwMzI3MTQwMDU5WjAzMTEwLwYDVQQD
EyhhODUxNTliZTI3NjY4MzZjNzM0MjNhMTc1MTQ1Y2E3MDAzNGYxYTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/qcCiiaO6rsz2r+f682aFzNLzEh
eOmyyzSryVZ6oiS0IIqLYXy6N5Iv03D7qtCEqHpmni28WgYyhGZyorxAYUQn0IyM
YKWHQlAd50Mzpj8D11i3Y6e0rukmlhINwZSJl38OJl88BYSIA4icAF5DA4wxUHSM
QmdwnplOVzBmY+qCE8iW3EcfpI/aZxeCs3z8AbHuR3Y5XEvpACU4c8h5op+fQgqQ
62hMzP2Qxuu00v67WKKu9/QHC7T3nB5Jd/RuGopTxTD5Q/nOevEP195Hzhfsl0Ht
lP8vxLyVPc1Co0MrFu22zN1yd5jWrVmZpxqwAo+eJT1JISN/Q1IrodcAxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhRWb4nZoNsc0I6F1FFynADTxo/MB8GA1UdIwQY
MBaAFAoiDam24pWFW2J/6mEOHLYWRolLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85ODE4MzktOWRmYS00MmQzLWFjYjEt
NjIxODgyOGVkODk2LzEvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85ODE4MzktOWRmYS00MmQzLWFjYjEtNjIxODgyOGVkODk2
LzEvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIqX219S
27ysycAeLa8pzE4ZlovA/X2xMyT4QAxOxO2yrMG7qayuC5HLGAX1qAsxltD7Gjxa
PsNQ0DmAvohKcr6C7MgKF4UY70vu1T/0uWsVUuFA4gXcK0KjgFdfGaZ5DmqmIgVM
yY+VyzCGhdfMr3e4V20UYlkFcjVRL6Lb57WrBaqHPXGCLvBfXgM4XiDZWQZeINer
BdfO0oopszbKRdstIc+oSXRXuZUcV2zGuP9tKJraGghCZwm8cs1iGkzSLMbR2WLo
OV93RM/sFD/ye5H5Mh3SHzEP420J8MojjBYKAdvRLVWNGTXFF4jQwfzRfN/4BTjk
cXuK+A3WIy7dug==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:20:54 2026 by rpki-client