Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
File: ci8LM2ULfWSYufWKrFopfpJhSCI.mft (raw, json)
Hash identifier: x9R/UiiMKU1HxXH1ubBrW+fEJHY4DqXACkoe8TEj7I4=
Subject key identifier: FB:8E:80:FF:77:8A:65:32:02:51:BE:78:A3:40:D6:FA:5B:EF:AB:54
Authority key identifier: 72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
Certificate issuer: /CN=722f0b33650b7d6498b9f58aac5a297e92614822
Certificate serial: 019D27DF952C670C6D9B0F10F74E8B6A486A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
Manifest number: 0C1A
Signing time: Thu 26 Mar 2026 02:00:57 +0000
Manifest this update: Thu 26 Mar 2026 02:00:57 +0000
Manifest next update: Fri 27 Mar 2026 02:00:57 +0000
Files and hashes: 1: KdbDrACu7SHeiWA-TJ0Gd5nmSmM.roa (hash: kgfS9/IVC7NXMOo6Zbhxeb9stsHC0de13w/KTw9Txuc=)
2: ci8LM2ULfWSYufWKrFopfpJhSCI.crl (hash: JUof6Zf2EjBRKaPidEDQZ9MKlTDQ2LIwjtyOSQ7dXX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:95:2c:67:0c:6d:9b:0f:10:f7:4e:8b:6a:48:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722f0b33650b7d6498b9f58aac5a297e92614822
Validity
Not Before: Mar 26 02:00:57 2026 GMT
Not After : Mar 27 02:00:57 2026 GMT
Subject: CN=fb8e80ff778a65320251be78a340d6fa5befab54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:33:71:b1:5f:98:a6:46:14:ea:e5:86:5d:5a:
b7:54:cc:1e:ff:fd:49:b8:c6:38:c9:90:2a:0a:54:
4e:51:5f:e3:ae:7e:41:39:53:70:59:e9:51:3d:c7:
5f:e7:a3:dc:90:9c:d7:c2:e1:1b:1e:a0:b5:c7:94:
d5:a4:0f:58:78:30:2d:55:0e:04:23:db:e3:8f:e5:
6b:14:17:e3:f5:a9:c7:27:28:29:09:57:92:53:4a:
6e:a3:e9:fe:45:7b:25:56:cd:32:3f:8b:13:da:67:
7e:29:a3:0c:ae:bc:d2:8c:b9:d6:38:c8:00:1f:3f:
60:22:ac:ca:55:d8:b5:f9:c3:9e:56:91:6b:58:d0:
c5:ad:d1:a8:54:fc:02:8c:4d:9f:2d:93:1b:3a:d5:
dd:de:da:dc:a0:ec:5a:e6:69:a0:8d:12:a5:31:30:
7b:ba:22:4b:b2:d0:66:94:50:72:f0:d2:a9:68:46:
6b:79:59:3b:e6:c8:46:95:b8:90:86:1e:8d:07:b0:
fd:79:82:9f:0f:50:fe:85:57:0a:5a:82:80:96:12:
d4:35:0d:05:8c:61:5a:dc:96:c9:87:83:80:22:36:
d0:8a:d6:62:3c:c8:de:27:71:2c:b9:ff:45:8a:cd:
1e:57:12:22:6a:18:d2:8f:d2:26:52:e8:20:73:4e:
22:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8E:80:FF:77:8A:65:32:02:51:BE:78:A3:40:D6:FA:5B:EF:AB:54
X509v3 Authority Key Identifier:
keyid:72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:3f:ea:be:cd:c6:c8:34:8b:0b:c1:44:ec:f2:f6:8d:f1:5b:
92:0e:dc:f5:af:a8:32:71:77:04:fb:70:98:1f:fe:c1:3e:d8:
49:c4:5d:86:04:ea:f1:bc:18:f3:77:c1:d9:2e:a7:93:3f:84:
d1:c9:04:33:b8:6f:d4:47:c9:c7:d9:6c:da:5f:9d:7f:79:f2:
a2:32:2b:bf:79:05:a2:c2:83:b9:58:7f:78:c5:fe:f7:28:85:
d7:ce:be:ba:2d:35:de:50:a1:77:e7:7a:f7:24:52:ae:50:90:
a9:91:95:be:d5:85:3c:97:80:f8:58:a6:ee:8a:96:d4:c7:e5:
1c:4e:6f:01:fe:23:19:56:39:2a:ac:d9:d0:fd:9f:44:ed:51:
74:6d:e0:16:1b:47:d5:63:df:da:41:a4:25:a8:c8:df:27:56:
7e:c6:1e:1f:a9:09:3e:5a:b8:79:88:ad:fb:88:e3:14:14:db:
7e:63:85:1e:5c:f4:b4:20:d4:d9:97:9a:43:13:a5:2d:80:0c:
6c:5b:a3:bf:23:3c:fb:74:d9:c9:ef:25:da:52:ac:58:23:77:
ea:33:af:7c:6f:70:78:7b:e6:0e:41:a4:1a:a5:6c:6b:dd:11:
31:1b:9e:ef:b9:a5:f2:a8:2a:28:af:2d:ed:35:93:3f:bf:41:
50:2e:02:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:21 2026 by rpki-client