Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
File: CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft (raw, json)
Hash identifier: 93L79kES9kb75wzxTuRHd+EZoQatMSDH5qcL3pLbUAo=
Subject key identifier: A8:F6:01:37:C1:A2:10:A4:13:1F:5F:74:45:F1:97:3B:85:50:BA:06
Authority key identifier: 08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
Certificate issuer: /CN=08818cbb0f9d1e573773d791138a0122f28bec56
Certificate serial: 019D2A72DFFCA697738B43488E90A476657C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
Manifest number: 1826
Signing time: Thu 26 Mar 2026 14:01:04 +0000
Manifest this update: Thu 26 Mar 2026 14:01:04 +0000
Manifest next update: Fri 27 Mar 2026 14:01:04 +0000
Files and hashes: 1: CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl (hash: hgDpFn0FaxPsl4yCLt6pHI4IFbnT36MOOmHQy9eEhMk=)
2: _89DnbijBQeF2cskoVpDTtK_5Rg.roa (hash: euBzCkVm4A9E+7P7b5QQPhEnEA1gc5PwXhqwL4l+p88=)
3: cuCsDpWQfSwNKoTxDF01haLSsl4.roa (hash: IAbjDvtvpTV67MkNRYgVgrsjV6vVbtlcGTDqIknDuaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:df:fc:a6:97:73:8b:43:48:8e:90:a4:76:65:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08818cbb0f9d1e573773d791138a0122f28bec56
Validity
Not Before: Mar 26 14:01:04 2026 GMT
Not After : Mar 27 14:01:04 2026 GMT
Subject: CN=a8f60137c1a210a4131f5f7445f1973b8550ba06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:74:a0:70:ed:a3:cf:02:7e:a7:19:07:f4:
b2:b3:da:03:95:f6:69:2d:45:db:6c:c7:77:aa:67:
dc:4c:8a:05:a0:14:cd:b2:64:5e:be:48:95:8c:02:
7b:f1:b8:c8:d5:19:99:c9:71:16:d5:14:1f:0a:04:
73:26:54:a0:76:40:3e:e7:8e:a6:0d:c7:74:97:f0:
ab:1d:9d:16:bb:72:2b:2a:a3:38:68:5c:cb:a5:5f:
7a:27:ed:f3:a0:05:12:93:d3:1c:ef:e2:3c:db:e9:
2f:87:6a:47:79:b4:12:65:e2:d6:69:08:e7:b8:95:
58:5e:84:ce:33:52:9e:f8:7d:af:64:c8:66:6c:d8:
07:00:08:5d:a5:12:e7:cd:b3:f5:16:c9:16:4b:73:
d6:40:ba:04:6d:31:c7:cf:c8:47:f5:9a:c1:a6:5c:
33:8f:ce:cf:84:60:49:f2:94:d8:f8:15:46:86:97:
dc:64:00:d5:c5:4b:d0:27:a5:a9:99:49:3f:30:e8:
b7:aa:ff:40:e5:17:a8:99:34:f7:ee:5f:68:e4:1e:
fe:cf:69:50:1e:1c:25:9a:f5:3c:d9:79:d7:b8:2d:
8e:7b:9a:93:05:c4:ef:0e:07:a1:81:44:7b:1b:26:
1a:93:aa:a6:c0:e0:15:f5:fa:2f:05:5f:e8:6e:1d:
bb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F6:01:37:C1:A2:10:A4:13:1F:5F:74:45:F1:97:3B:85:50:BA:06
X509v3 Authority Key Identifier:
keyid:08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:77:fe:60:d9:32:42:ef:81:34:56:74:51:e2:12:2d:e9:9b:
07:d2:b0:a8:ab:0c:cb:db:37:12:b0:fb:a7:78:64:83:ec:34:
27:86:db:8e:68:68:e1:83:b6:29:b7:5c:13:2f:bd:8b:49:c4:
fa:10:c8:89:69:a2:11:d7:6c:f6:4f:c2:b5:b6:59:fe:69:94:
e3:10:d8:ff:d9:04:cc:e3:5d:91:c0:c9:9a:eb:67:0a:d3:43:
7b:5a:fe:9d:74:29:d2:7f:fa:e1:83:92:20:de:d8:11:9e:f1:
3f:ee:91:99:77:53:c8:67:aa:10:ef:12:53:d7:55:b8:3c:4c:
c5:4a:73:c1:e8:6d:3e:4f:1a:4d:7f:5d:a4:32:94:b3:50:97:
e2:b4:36:81:36:68:13:16:df:bb:0c:fc:d8:a3:e6:50:1f:c7:
16:f2:ef:27:8f:be:6d:78:5e:68:13:c4:55:39:07:a3:ce:d5:
74:85:1c:cd:61:b1:9d:d3:97:b8:97:bc:63:cd:c0:82:93:b3:
ff:fa:3f:8c:67:f6:f0:29:f0:ed:0c:90:5c:fe:14:de:cc:eb:
fa:dc:4f:e2:85:8c:99:fb:65:15:fd:ab:52:e3:89:bd:24:bd:
e0:21:8e:ab:eb:30:ac:f6:4c:b8:30:14:73:96:79:0c:54:46:
16:dc:69:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:15 2026 by rpki-client