Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
File: cIYS6HA6ZgiJyg9FfPG02KDVO00.mft (raw, json)
Hash identifier: KPrksmzVLTj/wT3oLWXp/fGLL9FDoKURfwHNpySwVeo=
Subject key identifier: 8A:4D:BD:87:25:97:32:28:56:D3:92:4B:77:EF:BB:1C:8C:63:76:E9
Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Certificate serial: 019D2816EE64964ADFCED835DBC5587A5C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
Manifest number: 0F2B
Signing time: Thu 26 Mar 2026 03:01:24 +0000
Manifest this update: Thu 26 Mar 2026 03:01:24 +0000
Manifest next update: Fri 27 Mar 2026 03:01:24 +0000
Files and hashes: 1: cIYS6HA6ZgiJyg9FfPG02KDVO00.crl (hash: 2dm2r3XGgO/PhT2bvQVXDf0zg7kK3Bm0zs5MICYGrm8=)
2: k_Yqfb61yxFVsUAlfMaFEyavSv4.roa (hash: zO6a703k+u6Hm7KUfbGiT3ypzSzlcRhCCpgBjvvWhs4=)
3: muW9cBNMeWZbUzZWm3451nPmZy8.roa (hash: Une3GtFaZuE/Q/AgcVr8m9ytRRPpxQYRTGkYYful7io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ee:64:96:4a:df:ce:d8:35:db:c5:58:7a:5c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Validity
Not Before: Mar 26 03:01:24 2026 GMT
Not After : Mar 27 03:01:24 2026 GMT
Subject: CN=8a4dbd872597322856d3924b77efbb1c8c6376e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:65:71:95:38:be:6c:1a:4c:3f:d2:98:1c:
9b:e6:0e:37:d8:25:f7:be:c5:f4:0b:7a:73:22:86:
48:10:a0:ab:31:f8:ce:4a:52:7e:50:21:66:1d:02:
00:fd:e6:e0:47:bb:66:e7:cc:22:90:43:09:a6:e9:
d1:f5:b6:70:8d:36:8c:54:4e:dd:50:a5:15:6c:8a:
f9:47:8e:7b:ab:6e:c8:82:5b:3c:47:22:b0:d3:a4:
03:fe:62:86:eb:34:ad:ad:8f:0e:f5:c9:f0:51:27:
f8:32:b0:79:de:26:a1:d8:85:0f:af:87:c4:cd:c9:
d5:bd:3b:7d:0d:75:9b:7c:24:08:ca:0b:a1:b6:62:
62:fe:ab:18:44:2b:18:94:d7:ee:41:a2:d5:d7:3e:
11:75:50:95:84:8d:42:c2:1d:f7:2d:09:d0:1a:a3:
c0:d7:ed:30:53:ee:7f:c0:66:8d:25:21:ff:d0:99:
fd:c6:58:c5:79:79:bd:9b:35:d5:ad:cb:d5:e6:aa:
14:62:35:65:db:ea:2b:a5:32:03:e2:ca:4d:c8:60:
e9:62:8b:3f:2d:5a:1a:2f:43:e9:bc:8c:13:27:91:
6f:a8:ca:ae:72:46:1c:8d:ca:f6:6d:f2:a2:3d:50:
5a:a1:97:d9:44:f8:f2:82:02:51:3f:e6:2e:af:60:
f1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4D:BD:87:25:97:32:28:56:D3:92:4B:77:EF:BB:1C:8C:63:76:E9
X509v3 Authority Key Identifier:
keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:97:72:6e:b6:47:b6:b3:b6:41:ca:72:bd:1d:ac:de:59:51:
31:94:9b:8c:89:78:41:b1:93:e8:bf:c1:19:1e:3d:97:b8:d8:
89:cb:17:d0:98:50:a6:da:5a:21:b1:43:7b:95:37:8d:1e:1e:
50:91:c5:85:26:93:52:ea:b1:ab:11:11:59:9a:8f:33:cd:9d:
20:59:7e:18:4e:80:c5:dd:a3:01:64:9a:e1:87:3c:b4:e9:7e:
2b:8a:c9:88:db:54:04:d9:0c:74:2f:13:22:f7:82:4d:8e:9b:
62:e6:0e:bc:b8:0f:53:f6:e3:bb:a6:2e:d0:51:ae:ee:0b:cb:
0b:7f:4e:d7:f0:85:27:50:99:f2:9f:a1:de:7f:f8:d9:3e:1b:
2e:c3:f4:8f:8f:ab:7e:b4:14:50:cd:83:7b:d1:3c:0d:45:cc:
3e:71:ed:89:de:f5:25:55:4f:77:cb:8d:8c:8e:23:3b:db:85:
b2:87:d8:ef:46:7c:34:e4:a4:f7:91:64:1f:a8:41:80:15:a3:
e6:f4:a8:87:82:c6:41:5a:dc:26:b8:5b:8d:1a:ed:11:66:11:
b1:7a:61:a8:1d:0f:5d:81:24:28:7c:d2:96:fa:44:2f:9e:0a:
14:1e:53:6c:51:96:91:05:60:87:d8:55:00:e7:36:b3:74:c8:
b0:d2:e0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:39 2026 by rpki-client