Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
File: CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft (raw, json)
Hash identifier: 8VODN81Q1PQKvwnr+Z6u/7CamQE+fLPj0bFq7XqUV8A=
Subject key identifier: 0F:85:69:7F:CD:8A:76:AE:D9:83:A4:AB:E0:DD:C0:02:7D:99:54:C1
Authority key identifier: 08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
Certificate issuer: /CN=08818cbb0f9d1e573773d791138a0122f28bec56
Certificate serial: 019E1BD90CA2D294B0326874DC61E032E547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
Manifest number: 18A3
Signing time: Tue 12 May 2026 11:01:09 +0000
Manifest this update: Tue 12 May 2026 11:01:09 +0000
Manifest next update: Wed 13 May 2026 11:01:09 +0000
Files and hashes: 1: CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl (hash: LXI1a4RhDJaWY4JdRCxZERHvGE5RQ6d1XheHEnACCbw=)
2: _89DnbijBQeF2cskoVpDTtK_5Rg.roa (hash: euBzCkVm4A9E+7P7b5QQPhEnEA1gc5PwXhqwL4l+p88=)
3: cuCsDpWQfSwNKoTxDF01haLSsl4.roa (hash: IAbjDvtvpTV67MkNRYgVgrsjV6vVbtlcGTDqIknDuaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:0c:a2:d2:94:b0:32:68:74:dc:61:e0:32:e5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08818cbb0f9d1e573773d791138a0122f28bec56
Validity
Not Before: May 12 11:01:09 2026 GMT
Not After : May 13 11:01:09 2026 GMT
Subject: CN=0f85697fcd8a76aed983a4abe0ddc0027d9954c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:7a:c8:f4:ab:94:db:e6:c0:6e:51:11:a4:
9a:91:ed:81:88:a4:c3:3d:ef:ef:a4:89:1e:fc:9e:
57:4e:2b:7b:ca:0b:3c:08:01:52:07:8c:ad:0a:58:
2d:23:da:35:f8:90:66:41:38:22:c0:48:22:56:11:
39:80:34:94:89:06:8d:24:78:52:45:2a:27:70:ca:
89:cf:a6:77:9a:97:66:98:7e:07:33:21:36:49:3f:
29:40:91:e6:20:15:aa:2a:45:22:f6:58:81:f8:a0:
a5:be:23:a8:84:91:79:67:f9:7a:3a:c4:dd:69:47:
87:9e:e5:83:c8:45:f7:b6:e1:ba:6a:b1:76:83:66:
54:e0:41:4a:a7:bc:07:8d:e8:4a:32:d1:78:54:ef:
55:69:f5:34:be:e2:87:d3:21:62:72:f5:4b:b3:c4:
43:8f:ef:27:e5:c4:69:bc:52:fe:46:30:95:5f:fd:
73:a7:ba:a7:22:c4:1a:7d:83:34:7f:28:1b:ee:eb:
7d:f2:0a:31:c4:d4:56:e7:59:0c:45:cc:82:74:20:
08:21:31:a7:45:16:01:f0:9a:ad:8a:58:20:d1:44:
7f:6c:36:00:e2:2a:1d:bb:dc:d6:0f:81:47:ef:b0:
b8:96:7d:e8:86:c2:b6:03:82:fb:aa:57:ea:ac:e4:
4c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:85:69:7F:CD:8A:76:AE:D9:83:A4:AB:E0:DD:C0:02:7D:99:54:C1
X509v3 Authority Key Identifier:
keyid:08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ea:ef:10:68:d5:39:73:19:e8:36:54:84:24:07:ea:a8:eb:
cb:e9:fc:c8:18:ed:bd:52:97:7e:24:a9:a7:24:ad:ad:53:9b:
a3:e5:fc:88:91:72:a8:20:e4:7b:5f:fb:68:6c:72:df:1e:12:
db:db:e0:2b:d3:ca:3b:e4:5c:f5:05:59:23:49:f5:b9:e0:a2:
21:d0:a4:e7:0b:54:b4:bd:ff:0c:a5:5c:76:0b:b5:62:d5:34:
c4:cf:a7:1f:7b:f7:f4:80:de:3e:07:b7:38:00:7f:d9:24:91:
33:d2:ce:b9:c1:9b:e6:40:e2:d3:87:5f:a5:d1:57:e2:e7:56:
d2:06:dc:01:e8:bd:82:17:dd:62:01:f0:d3:0a:30:75:ed:a7:
24:69:f7:69:49:78:eb:18:cc:e2:00:a1:5d:69:9b:1f:c4:4f:
44:20:95:8d:5c:00:67:db:f4:f8:59:0a:8d:87:a8:01:14:65:
20:f3:ef:0c:47:60:cf:93:ad:5e:b3:2b:80:a6:80:3f:1d:8c:
01:ad:5d:60:bb:99:b5:29:b9:51:3c:e3:ab:7f:53:18:97:ba:
28:ab:a4:b9:60:12:e0:ef:5d:7f:3f:b4:25:59:2e:57:c7:9d:
73:a7:b2:58:cc:c8:ad:c7:39:35:ed:0c:dd:d7:8f:c4:68:25:
14:05:03:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:15 2026 by rpki-client