Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
File: CiebQDjgAue9ZOUHbRo56-lvI8Q.mft (raw, json)
Hash identifier: t1SOuldm4KH2pE5Msu0buu//BFqYGogCGigP/svrnkU=
Subject key identifier: 63:52:A2:21:CF:0C:22:E8:6E:B6:8D:07:5F:48:47:F3:09:51:28:84
Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
Certificate issuer: /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Certificate serial: 019F92B63BEBC943742A7FE1E575D118FDA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
Manifest number: 0A76
Signing time: Fri 24 Jul 2026 06:00:44 +0000
Manifest this update: Fri 24 Jul 2026 06:00:44 +0000
Manifest next update: Sat 25 Jul 2026 06:00:44 +0000
Files and hashes: 1: CiebQDjgAue9ZOUHbRo56-lvI8Q.crl (hash: Yli+WmwjvzKUIDlPzIzjHXxu+vB7tv3he6Vc2/D00n4=)
2: INTBCoLNdz7dS74vmemjPaj4YZM.roa (hash: T73/8m3M1Tbn+oTqJQV/X3k5SIAZKJ+xpZ9QZlSwB80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:3b:eb:c9:43:74:2a:7f:e1:e5:75:d1:18:fd:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Validity
Not Before: Jul 24 06:00:44 2026 GMT
Not After : Jul 25 06:00:44 2026 GMT
Subject: CN=6352a221cf0c22e86eb68d075f4847f309512884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:70:4e:43:21:02:06:cb:3e:16:ab:69:70:41:
40:9a:f5:2e:a9:a8:a0:64:73:f0:33:83:77:a1:84:
1f:d8:0d:4b:11:3f:9a:e6:e0:ab:70:d8:13:60:0d:
37:4e:ec:57:37:19:e9:41:6b:01:24:d8:f6:37:c6:
2d:fd:c6:41:7a:b9:93:41:10:65:9d:25:c4:66:76:
d9:f1:e7:4c:db:0a:ee:26:19:c5:2a:f2:0e:14:b9:
db:4e:af:7c:99:84:a7:90:d7:a1:d7:1a:2a:31:5d:
f3:88:80:cc:52:61:84:09:a2:07:74:ca:f1:d7:67:
32:26:1e:9e:b8:ba:99:89:42:4b:d8:0d:04:c2:98:
47:7e:76:5b:0b:c2:51:f3:90:c5:c3:a4:fa:a5:a8:
98:17:5f:eb:ca:63:55:6a:44:45:76:32:7d:3d:75:
c0:5c:95:76:ac:63:a9:30:2a:8c:77:54:c2:e2:85:
3f:e5:07:66:a4:de:bc:4c:b8:34:68:17:9c:6a:12:
43:60:48:ce:db:46:76:ea:04:64:38:fd:e1:61:7e:
3d:fa:33:64:27:7f:ba:05:ba:38:1f:4d:0c:83:4d:
fd:54:c5:de:35:a2:4c:2f:ba:b5:3b:4f:87:b6:8c:
c9:85:5e:6e:de:0b:81:dc:af:ff:67:5d:6d:b8:5e:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:52:A2:21:CF:0C:22:E8:6E:B6:8D:07:5F:48:47:F3:09:51:28:84
X509v3 Authority Key Identifier:
keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:83:8c:5d:97:fd:3f:bb:cf:88:61:b4:53:05:b3:07:63:6f:
c2:ac:76:1b:c1:c4:3d:2a:2d:bf:cf:84:54:e7:75:8c:e4:86:
7a:b6:9c:18:0c:21:fa:74:60:99:df:53:f9:99:3d:89:fd:f0:
41:9a:4d:b2:41:63:b7:63:5e:39:87:ba:c3:af:d4:84:10:22:
76:b7:9f:e6:52:d0:66:b8:89:fe:af:b7:38:99:ec:92:65:ef:
6f:a5:28:14:8e:ac:88:0e:2d:a4:13:23:dc:1c:42:d8:7e:1c:
34:6f:70:09:33:00:0b:80:f7:d0:87:cd:31:be:db:2d:65:7e:
5e:14:9a:81:75:5d:c6:68:7a:36:39:43:44:73:8f:f4:40:94:
d6:3d:72:3f:02:82:82:d7:c5:a4:d8:2e:12:55:47:52:b5:eb:
0b:b6:17:ef:cb:07:68:50:06:86:92:9c:f8:4f:7a:cf:4e:e0:
6e:a7:53:91:a8:b8:f9:09:4c:bc:72:8a:e0:2e:c3:f7:40:bb:
b0:ad:fc:02:98:76:3d:2c:8d:ac:19:34:81:16:ef:68:24:f7:
19:96:b6:e6:da:f0:a0:7e:ab:19:24:4f:40:55:f6:d4:b4:dd:
9e:61:b9:e3:12:65:a0:f4:7c:dd:06:e2:61:2b:4d:d8:bb:9b:
8f:36:75:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:17:57 2026 by rpki-client