Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
File: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft (raw, json)
Hash identifier: F/4JVMHddwIkoFb7wo6rr5gB6PFLZVJY6txrYWWvBu8=
Subject key identifier: BE:01:08:02:1D:6E:80:98:DF:51:54:DD:1F:92:91:DE:D3:D5:BE:96
Authority key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
Certificate issuer: /CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Certificate serial: 019D2BF330F5A775C32AD8E3D1FD9757482A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
Manifest number: 15C2
Signing time: Thu 26 Mar 2026 21:00:51 +0000
Manifest this update: Thu 26 Mar 2026 21:00:51 +0000
Manifest next update: Fri 27 Mar 2026 21:00:51 +0000
Files and hashes: 1: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl (hash: c14AJ6uWlxE0gt0udlhdlrQDLRwWxl9+4g6Wl1K+wh8=)
2: n7VFRuXxwgQnbFBuSUUBxwFhG6c.roa (hash: 6D6FdS3Q7oE33CoT/nZTuBGeDlU4d2ghqGCtrD1KUXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f3:30:f5:a7:75:c3:2a:d8:e3:d1:fd:97:57:48:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Validity
Not Before: Mar 26 21:00:51 2026 GMT
Not After : Mar 27 21:00:51 2026 GMT
Subject: CN=be0108021d6e8098df5154dd1f9291ded3d5be96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:59:f2:f8:61:50:c8:d5:13:af:af:8b:fb:44:
ae:e9:44:55:83:43:2b:4e:ec:6a:2d:94:d2:b6:3d:
73:83:be:b4:ea:50:56:ea:26:1b:cc:3c:79:09:eb:
f1:59:1f:ab:66:e9:9d:fd:80:f3:f3:43:19:ab:62:
98:13:cb:08:89:a1:b7:28:f6:23:ce:c5:68:e8:23:
dd:c6:d2:26:47:b7:d0:83:46:22:d3:ff:c8:9e:ef:
ed:2c:8f:27:40:58:42:b9:73:db:2e:15:cf:e5:69:
5a:78:9b:80:0e:1a:af:18:76:1c:5a:50:c2:87:63:
c7:11:10:97:0e:b0:6b:fb:80:7a:35:e7:59:5c:30:
ab:a7:ad:06:c2:3f:96:63:ec:f3:0a:51:ce:e5:27:
b5:96:c2:37:cc:8d:6b:fc:8c:26:ae:92:e3:78:1d:
7f:b1:2f:de:f7:4b:ca:b4:b8:69:1b:a8:d2:8d:21:
56:d1:8a:b7:7a:c7:13:f4:2f:b1:1a:39:e2:98:87:
da:26:70:7e:f2:e4:e1:50:8b:7f:60:5b:a6:cc:04:
25:c0:1f:15:ef:6e:cd:72:70:5b:ad:9c:2b:5b:b0:
c1:c5:c3:3e:16:15:4c:36:3b:75:aa:f5:be:13:8e:
94:13:c9:38:af:57:9c:67:bb:16:c1:35:d9:8e:3a:
ce:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:01:08:02:1D:6E:80:98:DF:51:54:DD:1F:92:91:DE:D3:D5:BE:96
X509v3 Authority Key Identifier:
keyid:0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c0:42:5d:61:64:bd:66:ba:5b:fa:59:04:4e:5a:d6:4a:ab:
1b:0b:9f:4c:8b:f9:a0:0a:6f:4f:a8:91:06:e6:2b:b1:40:9b:
28:31:cf:a6:ab:41:83:0c:22:ca:74:fd:1a:47:73:bf:32:d7:
ae:9c:b0:f8:1d:e8:4e:f0:de:f6:87:0d:46:62:9f:42:e2:0b:
e0:4a:cf:15:85:b5:2e:17:2d:89:ca:d7:9c:97:76:e3:69:32:
72:51:ca:59:3c:8d:1c:84:4f:6c:19:c4:0a:3b:08:28:fe:d1:
42:0e:b6:42:06:b7:8b:29:49:09:2d:9c:b3:ce:88:65:77:6d:
11:9d:fd:2c:a4:30:67:2d:3b:0c:ca:47:78:6c:71:1a:c0:76:
ba:0d:de:d3:be:85:5d:75:f1:3f:da:d7:4a:6d:8f:2a:ac:7d:
4f:03:c9:3f:5a:b9:29:c4:6f:ae:8c:ae:4e:ba:e7:c8:1f:4b:
bb:05:63:b6:78:20:9e:6d:ac:4d:15:49:f6:c5:7d:0b:50:ca:
64:4d:52:4d:df:a8:a2:a8:a6:7c:8f:2f:f4:f9:87:9b:67:29:
1c:12:47:0c:82:2d:2c:ef:e9:8b:4f:61:68:2a:90:c9:72:83:
ae:3d:19:13:dc:25:2c:6e:1a:8a:9b:d7:92:f2:01:b1:a9:96:
d1:9a:7e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:20:36 2026 by rpki-client