Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
File: ciLFq32z3TlmGS-q_gfzEVsMjuU.mft (raw, json)
Hash identifier: 5WHkmpNXFFR88+EYFpv1/kb6EJB/K7HlbFF9L/tHoE8=
Subject key identifier: 8D:5C:C5:D8:D4:21:DC:77:9B:A2:8F:89:E1:C1:2E:D8:9E:31:C5:64
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial: 019D2A3B9C4C80002C3D1D67BD0117B92A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
Manifest number: 155E
Signing time: Thu 26 Mar 2026 13:00:42 +0000
Manifest this update: Thu 26 Mar 2026 13:00:42 +0000
Manifest next update: Fri 27 Mar 2026 13:00:42 +0000
Files and hashes: 1: ciLFq32z3TlmGS-q_gfzEVsMjuU.crl (hash: d2OYsPD0iSsrKBDfvEjE1Domg3L63mpZEWvvBzmWIVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:9c:4c:80:00:2c:3d:1d:67:bd:01:17:b9:2a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Validity
Not Before: Mar 26 13:00:42 2026 GMT
Not After : Mar 27 13:00:42 2026 GMT
Subject: CN=8d5cc5d8d421dc779ba28f89e1c12ed89e31c564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:b1:7a:6d:83:93:e3:01:79:57:6b:a4:33:
8d:1e:93:67:88:4d:46:93:f1:d9:88:bc:de:29:b3:
84:da:0a:95:5d:a4:a9:7d:03:b5:71:07:a9:b7:0e:
35:17:9f:42:c0:07:c8:19:72:41:dd:b8:fd:29:72:
5a:69:1d:43:48:1e:5b:88:ee:0a:94:64:4e:90:8b:
c8:28:ce:60:54:a8:49:ff:5b:70:10:29:bd:19:a2:
e9:67:58:42:71:5f:b5:db:c3:a3:9f:3f:2c:bd:e6:
d2:52:14:5c:a6:39:5d:50:15:2f:7a:6d:59:4f:cc:
c9:f1:02:5d:f6:89:e2:f1:23:64:d6:01:3d:07:8b:
f6:d9:73:11:6c:f2:44:ec:07:14:d2:a4:88:69:8c:
7e:63:af:4a:ab:23:1c:9e:b4:eb:ac:14:23:3a:4f:
24:58:0b:1a:a3:f5:ff:67:08:ee:58:9a:8f:ff:aa:
1c:3c:81:13:e7:4d:85:cb:8c:68:fa:12:d2:e0:1d:
34:6a:63:da:2b:ad:a6:65:9d:27:5c:8c:d5:b9:5c:
53:1c:a2:f7:3b:65:d6:35:0b:76:ba:e4:51:d6:d8:
b9:c1:bc:62:b7:46:78:22:ea:e2:2b:bf:04:3f:eb:
1d:13:6c:9b:7a:14:40:9f:a4:6a:49:fd:19:58:e8:
b9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5C:C5:D8:D4:21:DC:77:9B:A2:8F:89:E1:C1:2E:D8:9E:31:C5:64
X509v3 Authority Key Identifier:
keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e8:79:ce:4f:42:b5:87:ef:4f:4b:eb:64:82:8f:ef:c1:a3:
57:7d:a5:5b:86:2e:88:1b:4b:79:e4:4a:f1:e4:a7:59:04:8e:
33:6a:ea:aa:d7:87:6e:4a:6e:98:13:6d:f2:b9:6c:53:25:41:
4b:d1:20:ef:5a:74:a9:57:1c:5b:e9:01:f7:64:e5:ae:99:97:
19:e1:45:73:88:44:d1:94:35:cd:9d:f3:6b:7b:69:6a:32:37:
83:fa:5b:93:fe:ab:85:e2:c8:34:50:a6:9c:cc:28:77:0c:26:
82:33:41:4e:2d:de:6e:7c:2a:b4:56:61:dd:7c:8c:6d:75:3c:
e2:a8:d9:59:0e:be:95:dd:85:69:9a:5e:11:01:1d:3a:55:66:
c5:32:e5:74:05:45:1c:4a:a4:5d:84:c7:22:b3:f1:bd:38:7d:
70:5d:4e:3a:63:fd:82:0c:36:48:40:fc:d9:0f:83:a7:43:b2:
a2:91:fd:46:20:f8:ec:ab:e1:54:39:e0:7d:49:af:15:f7:58:
49:b4:83:e7:86:ae:a4:e4:d2:78:42:70:05:2f:dd:f2:a0:4a:
79:f3:ba:f5:37:93:a9:66:a7:ae:f7:8b:cf:dc:73:1f:8c:20:
60:77:45:cb:ff:8a:ea:b0:d2:e2:9f:47:46:ff:f2:c5:02:ce:
4c:01:cf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:07 2026 by rpki-client