Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
File: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft (raw, json)
Hash identifier: mTEUGLlWHC7LqFJVWJgY6QypXknL80cCTm5vf+8HexY=
Subject key identifier: 0C:70:E5:0E:87:F5:B7:D6:43:04:A5:6F:14:93:2E:5B:AC:41:D6:FC
Authority key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
Certificate issuer: /CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Certificate serial: 01A0D872CF22C25819C4CB980AF058DD386A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
Manifest number: 17A9
Signing time: Fri 25 Sep 2026 12:03:17 +0000
Manifest this update: Fri 25 Sep 2026 12:03:17 +0000
Manifest next update: Sat 26 Sep 2026 12:03:17 +0000
Files and hashes: 1: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl (hash: 7NC/jvJQSx/w1ZAhkSZW04yzkTyLj3kkezweNUD9M30=)
2: n7VFRuXxwgQnbFBuSUUBxwFhG6c.roa (hash: 6D6FdS3Q7oE33CoT/nZTuBGeDlU4d2ghqGCtrD1KUXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:cf:22:c2:58:19:c4:cb:98:0a:f0:58:dd:38:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Validity
Not Before: Sep 25 12:03:17 2026 GMT
Not After : Sep 26 12:03:17 2026 GMT
Subject: CN=0c70e50e87f5b7d64304a56f14932e5bac41d6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:cd:39:d2:3b:cc:e8:e1:43:81:d3:65:5e:
a7:96:1d:0c:76:7c:81:ff:24:7e:58:6d:7c:ab:55:
3d:d5:7a:ee:51:a3:2a:a7:ad:ae:b4:78:f9:f3:46:
18:fc:23:1d:6b:9a:6a:59:f3:61:50:1a:5a:20:79:
68:7a:46:68:f9:cb:e0:02:92:93:27:9c:96:ad:99:
73:5a:d4:d8:35:c7:c2:63:69:6a:8e:33:01:a3:6a:
6f:87:f1:e2:78:26:4c:d6:67:fc:5a:c7:e3:ed:f4:
e5:cf:ec:f9:e6:8a:74:ec:89:61:93:a9:a4:25:d7:
d5:8e:4d:8e:66:ce:9b:4c:ce:74:34:9f:8c:a3:11:
a0:8c:05:6a:6d:e5:e5:07:02:d3:68:b7:07:28:d2:
00:6f:cd:cc:17:c2:d1:63:c1:60:94:23:98:9c:74:
48:3a:d1:b7:26:61:14:07:fe:06:d5:ce:53:8c:ed:
11:51:4e:99:93:e9:42:0f:82:96:cd:62:e6:0b:e3:
6d:ac:24:62:3c:6d:2c:6d:cc:4f:f6:91:0c:5f:b4:
9e:56:34:bf:d4:8f:30:44:21:b7:05:56:5b:ff:09:
dd:49:6b:7b:78:dd:3a:fb:52:29:bb:58:ec:73:c1:
6c:d8:fd:45:1c:39:71:3f:e6:3b:d3:ec:85:90:64:
0b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:70:E5:0E:87:F5:B7:D6:43:04:A5:6F:14:93:2E:5B:AC:41:D6:FC
X509v3 Authority Key Identifier:
keyid:0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e7:93:c6:32:c3:2a:b3:92:78:97:43:48:34:ca:19:2b:15:
1d:40:0a:fb:6b:bf:0e:d1:a1:ab:73:9c:79:68:29:ce:d0:c8:
96:a0:d3:20:ff:ac:61:10:1c:cc:11:db:ed:9a:98:d6:71:9b:
fc:d9:58:05:79:45:b9:62:57:47:fa:8f:1a:f0:a6:58:22:99:
d1:28:b0:af:36:4a:84:26:5d:37:bb:e3:78:0e:28:9a:d1:ba:
87:a0:23:44:b2:27:03:63:aa:32:d4:d8:65:9f:c7:61:e0:a3:
0f:a4:cd:90:60:89:a7:fd:de:a0:8f:a8:89:e4:db:3b:85:43:
44:cd:31:f8:26:32:4d:56:9f:52:9b:5c:41:cd:67:c6:d4:d8:
fa:87:b0:f3:e2:a3:30:3b:10:54:6d:f8:f9:ae:85:ce:88:89:
fc:cf:b9:ac:b1:cb:44:1a:bf:89:08:80:00:13:7b:f9:f6:8f:
b8:44:97:54:a5:7d:42:6a:7e:e2:0f:59:bd:5c:63:1d:b5:5e:
2a:27:a3:a0:eb:50:bd:4d:cf:f3:0f:3d:de:ac:2c:47:ab:fa:
c7:1f:30:c6:ef:c6:b2:4e:82:d9:7a:81:f9:54:2a:21:74:35:
b8:e8:a7:d1:66:e2:8c:b8:28:49:02:19:64:d4:12:67:35:ab:
83:cd:53:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYcs8iwlgZxMuYCvBY3ThqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMmQ3MWMwZDE0NWVmMjc4MDQ3MTA5MjdiOTQzYzY3ZTUw
YWU3YWIwHhcNMjYwOTI1MTIwMzE3WhcNMjYwOTI2MTIwMzE3WjAzMTEwLwYDVQQD
EygwYzcwZTUwZTg3ZjViN2Q2NDMwNGE1NmYxNDkzMmU1YmFjNDFkNmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxLNOdI7zOjhQ4HTZV6nlh0MdnyB
/yR+WG18q1U91XruUaMqp62utHj580YY/CMda5pqWfNhUBpaIHloekZo+cvgApKT
J5yWrZlzWtTYNcfCY2lqjjMBo2pvh/HieCZM1mf8Wsfj7fTlz+z55op07Ilhk6mk
JdfVjk2OZs6bTM50NJ+MoxGgjAVqbeXlBwLTaLcHKNIAb83MF8LRY8FglCOYnHRI
OtG3JmEUB/4G1c5TjO0RUU6Zk+lCD4KWzWLmC+NtrCRiPG0sbcxP9pEMX7SeVjS/
1I8wRCG3BVZb/wndSWt7eN06+1Ipu1jsc8Fs2P1FHDlxP+Y70+yFkGQLWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxw5Q6H9bfWQwSlbxSTLlusQdb8MB8GA1UdIwQY
MBaAFAotccDRRe8ngEcQknuUPGflCuerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2kxeHdORkY3eWVBUnhDU2U1UThaLVVLNTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjkxMGYtZGNjMS00MWRiLTk2Y2Qt
MDkyZTg5ZDU5ZmE4LzEvQ2kxeHdORkY3eWVBUnhDU2U1UThaLVVLNTZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yYjkxMGYtZGNjMS00MWRiLTk2Y2QtMDkyZTg5ZDU5ZmE4
LzEvQ2kxeHdORkY3eWVBUnhDU2U1UThaLVVLNTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOeTxjLD
KrOSeJdDSDTKGSsVHUAK+2u/DtGhq3OceWgpztDIlqDTIP+sYRAczBHb7ZqY1nGb
/NlYBXlFuWJXR/qPGvCmWCKZ0SiwrzZKhCZdN7vjeA4omtG6h6AjRLInA2OqMtTY
ZZ/HYeCjD6TNkGCJp/3eoI+oieTbO4VDRM0x+CYyTVafUptcQc1nxtTY+oew8+Kj
MDsQVG34+a6FzoiJ/M+5rLHLRBq/iQiAABN7+faPuESXVKV9Qmp+4g9ZvVxjHbVe
KiejoOtQvU3P8w893qwsR6v6xx8wxu/Gsk6C2XqB+VQqIXQ1uOin0WbijLgoSQIZ
ZNQSZzWrg81TJA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:15:23 2026 by rpki-client