Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
File: CiebQDjgAue9ZOUHbRo56-lvI8Q.mft (raw, json)
Hash identifier: iVW0z0j3QGkHK+Pn5btiWbguxg7Nil2d4Bb+TX7hJ0k=
Subject key identifier: 16:88:3D:BB:D5:82:EB:91:84:B0:58:04:CC:60:41:58:8D:3C:31:45
Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
Certificate issuer: /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Certificate serial: 019D28BBAF1705A218C7B81E98C0793B71F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
Manifest number: 0936
Signing time: Thu 26 Mar 2026 06:01:21 +0000
Manifest this update: Thu 26 Mar 2026 06:01:21 +0000
Manifest next update: Fri 27 Mar 2026 06:01:21 +0000
Files and hashes: 1: CiebQDjgAue9ZOUHbRo56-lvI8Q.crl (hash: kvJuBkaL3XRwnIzsPlYYzT3GhDl4tfUKOyIf/GWwrLg=)
2: INTBCoLNdz7dS74vmemjPaj4YZM.roa (hash: T73/8m3M1Tbn+oTqJQV/X3k5SIAZKJ+xpZ9QZlSwB80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:af:17:05:a2:18:c7:b8:1e:98:c0:79:3b:71:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Validity
Not Before: Mar 26 06:01:21 2026 GMT
Not After : Mar 27 06:01:21 2026 GMT
Subject: CN=16883dbbd582eb9184b05804cc6041588d3c3145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:41:5e:30:91:fc:8b:02:5c:0c:b9:bd:99:
51:cc:c2:f8:ea:e2:82:d0:c3:05:ce:f2:2d:d5:06:
f1:f0:cc:21:db:79:50:2d:bc:6f:fb:b9:9c:8c:3d:
60:3b:3d:b2:04:df:27:ce:0c:92:8c:76:c7:af:99:
31:23:99:9b:fd:05:d0:94:c6:8c:af:e8:77:38:6f:
f1:8b:a8:21:1f:89:3e:82:6a:40:3d:7c:e8:9f:73:
51:4a:15:62:0a:17:d1:e3:80:7c:b3:2c:47:f2:c7:
af:26:b6:3f:8d:1b:c2:0a:91:5b:2d:88:04:1d:1d:
ea:3d:c9:6a:9f:b1:d4:6b:ba:05:63:4c:a7:16:35:
60:f4:f3:10:a6:24:e6:19:ae:30:db:11:b1:bb:e1:
e2:0e:b4:0b:22:13:78:64:e9:75:5c:29:fe:48:46:
a1:3a:ef:00:08:eb:ff:e6:e0:bf:ee:14:56:6d:b8:
cd:cc:6e:b7:2c:ac:72:6c:a1:04:12:26:51:b2:25:
45:78:1e:8d:34:c6:51:97:ce:20:84:6d:20:01:b1:
b1:d7:cf:09:06:6c:f5:2c:cc:c5:60:19:0d:ad:7f:
75:06:59:de:78:e7:6d:70:1f:f6:e8:ae:2d:79:f5:
af:35:8a:72:75:97:8c:e2:2a:aa:14:fd:71:ed:f3:
4a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:88:3D:BB:D5:82:EB:91:84:B0:58:04:CC:60:41:58:8D:3C:31:45
X509v3 Authority Key Identifier:
keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:68:16:e9:53:5d:f6:2c:a6:4f:d3:a2:c4:df:49:83:aa:d0:
f1:08:27:7e:ba:78:1a:03:8f:75:2f:87:7e:64:f5:0c:a0:06:
b5:e4:1b:f8:74:ef:0a:4f:f6:47:9c:45:73:a0:4a:7d:bf:67:
1c:85:45:3c:d8:18:c4:8a:a5:cb:79:1c:a9:fd:7e:7a:e3:24:
d2:46:f0:a6:17:1d:68:5c:e4:8e:26:75:6b:df:d4:a1:ba:7a:
db:7c:dc:ae:e4:9e:62:76:ab:46:64:aa:3f:55:b9:41:4a:2b:
21:9a:f0:1c:a4:a7:8f:ec:78:a1:df:ce:dd:89:ba:45:e0:db:
0c:85:94:c1:4a:cd:da:db:29:60:00:aa:57:3d:0e:7a:a9:b5:
71:e8:89:8a:fe:6b:36:95:2f:e5:43:e5:17:86:83:12:7a:bc:
cb:5a:09:cc:9b:16:2d:b9:38:8f:a0:00:b7:ca:d0:27:73:dd:
bb:3c:13:ff:55:cf:37:3c:f8:7a:a8:39:88:35:cd:6b:29:ff:
64:45:dd:66:98:56:3c:b0:1c:d6:1d:48:fd:e3:6b:1f:33:13:
2b:56:6e:ca:31:49:9e:f3:00:d9:ea:b6:94:03:9c:69:39:4e:
a9:de:08:5a:26:e6:4d:0f:bc:de:bb:fb:7f:fa:c7:16:d1:fa:
d9:2f:ff:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou68XBaIYx7gemMB5O3H2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMjc5YjQwMzhlMDAyZTdiZDY0ZTUwNzZkMWEzOWViZTk2
ZjIzYzQwHhcNMjYwMzI2MDYwMTIxWhcNMjYwMzI3MDYwMTIxWjAzMTEwLwYDVQQD
EygxNjg4M2RiYmQ1ODJlYjkxODRiMDU4MDRjYzYwNDE1ODhkM2MzMTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5ZBXjCR/IsCXAy5vZlRzML46uKC
0MMFzvIt1Qbx8Mwh23lQLbxv+7mcjD1gOz2yBN8nzgySjHbHr5kxI5mb/QXQlMaM
r+h3OG/xi6ghH4k+gmpAPXzon3NRShViChfR44B8syxH8sevJrY/jRvCCpFbLYgE
HR3qPclqn7HUa7oFY0ynFjVg9PMQpiTmGa4w2xGxu+HiDrQLIhN4ZOl1XCn+SEah
Ou8ACOv/5uC/7hRWbbjNzG63LKxybKEEEiZRsiVFeB6NNMZRl84ghG0gAbGx188J
Bmz1LMzFYBkNrX91BlneeOdtcB/26K4tefWvNYpydZeM4iqqFP1x7fNKEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaIPbvVguuRhLBYBMxgQViNPDFFMB8GA1UdIwQY
MBaAFAonm0A44ALnvWTlB20aOevpbyPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84NTFkNDUtMTQyMi00YjMxLWJkOGYt
Nzk5M2I5ZTAzYjBmLzEvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC84NTFkNDUtMTQyMi00YjMxLWJkOGYtNzk5M2I5ZTAzYjBm
LzEvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWgW6VNd
9iymT9OixN9Jg6rQ8Qgnfrp4GgOPdS+HfmT1DKAGteQb+HTvCk/2R5xFc6BKfb9n
HIVFPNgYxIqly3kcqf1+euMk0kbwphcdaFzkjiZ1a9/Uobp623zcruSeYnarRmSq
P1W5QUorIZrwHKSnj+x4od/O3Ym6ReDbDIWUwUrN2tspYACqVz0Oeqm1ceiJiv5r
NpUv5UPlF4aDEnq8y1oJzJsWLbk4j6AAt8rQJ3PduzwT/1XPNzz4eqg5iDXNayn/
ZEXdZphWPLAc1h1I/eNrHzMTK1ZuyjFJnvMA2eq2lAOcaTlOqd4IWibmTQ+83rv7
f/rHFtH62S//uQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:26:36 2026 by rpki-client