Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
File: CiebQDjgAue9ZOUHbRo56-lvI8Q.mft (raw, json)
Hash identifier: isN4rvwEK1evCqt5+LV7MZUFXSDsyZeF2Yt0HdbQJ6M=
Subject key identifier: 33:94:E8:C1:5A:02:C2:7F:38:7B:E0:7B:6A:5F:DA:15:EC:2E:B5:F5
Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
Certificate issuer: /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Certificate serial: 019E1FEC8B3AC6B4E917EA6BC0E578B36856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
Manifest number: 09B6
Signing time: Wed 13 May 2026 06:00:56 +0000
Manifest this update: Wed 13 May 2026 06:00:56 +0000
Manifest next update: Thu 14 May 2026 06:00:56 +0000
Files and hashes: 1: CiebQDjgAue9ZOUHbRo56-lvI8Q.crl (hash: ToLO0pSu0NSUecI2swcWg+UIJ/Pe1ikGDRUtvhrcKms=)
2: INTBCoLNdz7dS74vmemjPaj4YZM.roa (hash: T73/8m3M1Tbn+oTqJQV/X3k5SIAZKJ+xpZ9QZlSwB80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:8b:3a:c6:b4:e9:17:ea:6b:c0:e5:78:b3:68:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Validity
Not Before: May 13 06:00:56 2026 GMT
Not After : May 14 06:00:56 2026 GMT
Subject: CN=3394e8c15a02c27f387be07b6a5fda15ec2eb5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:75:4d:ba:b7:68:f5:4c:13:73:9d:12:14:
60:17:11:1d:61:f7:73:8f:69:fc:65:8f:49:0e:02:
c8:87:f8:3f:08:8e:38:d9:e9:1a:74:40:1f:f6:0d:
1e:5e:fa:8c:d0:0a:06:6e:10:ba:44:63:f0:f2:a2:
93:5c:e4:8a:56:9e:1d:1d:42:60:cf:d4:4b:f3:1e:
36:8c:92:a2:05:7f:bd:0a:5d:0f:46:c4:65:6d:d3:
47:b5:08:a6:58:22:d0:ad:52:ad:6a:e4:c9:5c:20:
5e:68:eb:9f:41:3a:95:ad:47:59:e3:a3:70:05:74:
81:ec:e1:14:63:d6:6d:79:91:c8:b5:f0:af:a6:0d:
f1:65:e5:ff:cc:30:cb:08:6a:8a:1c:b0:aa:58:99:
6c:8d:9f:ea:40:02:90:f8:65:1c:87:18:72:77:22:
3a:d3:44:ae:2d:f8:01:a6:39:8a:7e:0e:f6:69:c6:
04:ac:c5:0e:03:89:58:a8:b7:f6:18:87:62:1d:72:
b1:af:78:43:dc:e6:18:5c:85:d7:74:9a:f7:b8:2a:
78:26:38:36:84:5c:e1:c0:85:1f:0a:23:7f:b2:54:
00:d1:00:79:51:a2:3d:e8:0c:dc:28:06:7f:47:3f:
f0:89:e7:3d:4c:88:53:7a:d4:61:ee:53:b8:42:ab:
f0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:94:E8:C1:5A:02:C2:7F:38:7B:E0:7B:6A:5F:DA:15:EC:2E:B5:F5
X509v3 Authority Key Identifier:
keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7b:52:bf:a6:3f:1a:84:51:33:43:6d:b2:0f:b7:61:22:2f:
18:56:85:f5:fd:d4:b5:31:a2:c5:af:70:37:aa:d0:d9:66:c4:
cd:00:d2:c4:d5:f7:3f:f5:2c:c8:34:fe:50:13:a1:1c:de:96:
a7:f2:dd:19:51:c0:77:6b:48:c2:a3:f2:9d:cb:95:7f:9b:f5:
02:80:32:da:f4:fc:99:d2:e5:ca:f6:29:66:ed:2e:83:6f:81:
45:58:c3:85:22:98:29:91:dc:aa:05:b0:0a:2e:29:c1:02:17:
b8:2f:31:bd:6c:ab:39:1b:9c:62:d9:2f:61:84:64:3a:3d:25:
e1:1d:aa:f2:40:ee:35:2f:87:12:23:bb:e4:f7:07:e5:59:9c:
fa:85:03:f9:b1:c3:64:9d:fd:c3:35:00:39:c8:9e:4e:5f:4e:
7e:96:55:b4:8a:d9:dc:67:f6:55:e3:98:95:bb:ea:d1:ce:3a:
ee:7d:be:97:30:7d:f3:43:3a:22:d8:de:49:0a:af:01:ea:61:
ad:4d:3f:cb:cf:ee:a0:e6:83:3d:e6:25:92:15:a6:04:47:59:
36:69:28:94:af:df:f5:1f:bf:32:14:96:68:7b:15:6d:82:f2:
42:e8:e0:6f:ee:1c:b1:4b:af:e2:6d:44:8e:f8:31:9d:62:f9:
6f:90:c8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:12:47 2026 by rpki-client