Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft
File: ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft (raw, json)
Hash identifier: Zl2caktz4Mna+ZC1NkD5di9qcIY02JL/SfdQxDcGlzs=
Subject key identifier: 2A:BB:CB:39:E3:7C:C3:DC:A8:F1:86:8F:60:EF:46:B2:C0:CD:A6:45
Authority key identifier: 72:24:D6:F0:72:52:1A:D6:EB:3D:02:9B:18:9F:42:D2:40:A9:15:30
Certificate issuer: /CN=7224d6f072521ad6eb3d029b189f42d240a91530
Certificate serial: 019D27A8AEB48B89D0220063DC22F24724C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 01:00:59 +0000
Manifest this update: Thu 26 Mar 2026 01:00:59 +0000
Manifest next update: Fri 27 Mar 2026 01:00:59 +0000
Files and hashes: 1: ciTW8HJSGtbrPQKbGJ9C0kCpFTA.crl (hash: jYJnjMen0lWOVcAZ1Xg/vp5XgIJnyOMoLklW799/q3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:ae:b4:8b:89:d0:22:00:63:dc:22:f2:47:24:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7224d6f072521ad6eb3d029b189f42d240a91530
Validity
Not Before: Mar 26 01:00:59 2026 GMT
Not After : Mar 27 01:00:59 2026 GMT
Subject: CN=2abbcb39e37cc3dca8f1868f60ef46b2c0cda645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:aa:f5:7c:73:58:05:a8:7c:2c:32:0e:9e:0e:
54:3d:9c:f7:79:c6:d3:86:94:99:3f:b4:23:00:96:
5e:55:1e:f0:9b:26:cb:83:f2:49:01:a5:6e:66:9f:
de:ea:f6:a3:bc:1c:41:5f:95:28:98:86:bd:b3:2a:
0b:13:17:f0:10:2e:14:b0:21:84:a1:0b:68:e6:2b:
a2:56:07:58:85:4a:f0:86:c9:aa:7c:79:70:0f:32:
4a:8f:b9:40:09:fc:10:24:db:fb:27:f5:86:c6:19:
60:3d:55:c1:8f:77:b1:e0:5b:e7:e5:e7:1d:6e:c6:
fe:b8:b0:a4:cb:d3:9b:3d:a0:5a:67:bd:9c:3d:18:
81:4d:55:ba:21:9c:66:32:86:67:44:e8:63:e7:49:
a4:46:d6:80:55:d9:0e:bd:42:14:ba:ff:71:07:75:
17:97:9e:d6:7e:4d:9a:9b:ef:b6:b7:4d:6a:8e:47:
c9:3c:63:30:12:4c:4d:09:3f:c7:54:48:0d:7b:50:
c8:03:1d:9a:99:72:1d:16:6d:bf:7e:db:dd:72:e7:
9e:2f:96:1a:17:d9:4a:ea:c8:a4:ff:74:5b:f9:95:
b7:32:a5:97:be:3e:52:ad:a0:f6:85:93:f2:eb:34:
4d:41:e6:c4:f4:58:c4:2c:cd:8c:4d:ad:00:4f:57:
1a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BB:CB:39:E3:7C:C3:DC:A8:F1:86:8F:60:EF:46:B2:C0:CD:A6:45
X509v3 Authority Key Identifier:
keyid:72:24:D6:F0:72:52:1A:D6:EB:3D:02:9B:18:9F:42:D2:40:A9:15:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:db:fb:a8:9d:98:fe:78:9e:0b:af:74:6b:a8:ed:cf:9a:5d:
eb:79:fe:13:5d:36:1c:64:0a:96:dc:19:c5:dd:8f:57:6e:bc:
12:c1:80:ce:dd:f1:ca:92:46:4e:67:dd:17:c7:d8:e7:09:08:
48:a4:98:43:3e:c2:4e:4b:a1:ca:6e:e0:fb:2f:c2:06:9d:17:
51:2f:02:6d:89:4c:a4:ac:b3:5c:a2:8a:87:4a:da:dd:18:f3:
bc:97:09:1d:d8:fa:f1:84:90:49:ee:f2:a1:67:50:40:91:47:
02:b5:b7:1d:05:0e:df:bc:65:78:a5:67:08:db:23:c2:ae:56:
72:57:23:50:96:fd:a9:72:a7:f1:23:01:6f:84:89:ae:e4:59:
15:6d:ee:2b:99:64:67:a5:ea:66:af:58:0b:aa:31:a7:b7:ec:
06:78:e1:99:7d:af:8e:d9:24:40:8e:e6:f0:77:0d:96:f3:7f:
8d:ce:ec:d0:60:1b:a7:79:52:6d:76:27:11:0a:a5:e8:bb:a0:
5d:36:ed:86:93:05:f6:89:ca:cb:eb:0e:c5:cc:57:22:7c:90:
78:93:b9:8d:af:3e:29:03:4c:7a:66:2e:e1:12:61:5b:51:e8:
16:01:e1:ea:ae:c6:f8:a0:b0:b0:ea:d4:da:c0:1c:2a:cc:a0:
95:b6:9c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:33:05 2026 by rpki-client