Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
File: CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft (raw, json)
Hash identifier: k7BIfaqMFpsT0JWPW15FG3vSXF+PjN9FHKuD0RnC5KQ=
Subject key identifier: 1E:85:8F:F6:AD:94:BA:BB:CF:97:98:0E:23:2A:B0:E4:4D:BB:9E:3E
Authority key identifier: 0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
Certificate issuer: /CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Certificate serial: 019D25BADCBB82A6DD7DB32C5721890CF39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 16:01:36 +0000
Manifest this update: Wed 25 Mar 2026 16:01:36 +0000
Manifest next update: Thu 26 Mar 2026 16:01:36 +0000
Files and hashes: 1: CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl (hash: KFWPmr5hDofujpqutROfHGOBvj/PteUYcui5F2ukYR8=)
2: jr3Qwfg8Z9qypQ7083QLXtA-1bs.roa (hash: BStTXqRwyFgu7NL9U4UDu4snXF66XXGZwBXM2f9Q63k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:dc:bb:82:a6:dd:7d:b3:2c:57:21:89:0c:f3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Validity
Not Before: Mar 25 16:01:36 2026 GMT
Not After : Mar 26 16:01:36 2026 GMT
Subject: CN=1e858ff6ad94babbcf97980e232ab0e44dbb9e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:63:60:0d:0f:4b:9b:fa:4c:23:b5:b2:17:ba:
9a:44:74:d7:dc:ca:c4:1b:1c:cc:4b:da:a4:57:fb:
3d:28:1c:69:88:0a:71:30:dc:9c:74:d6:4a:8a:2c:
a6:58:3a:85:a6:7f:ad:75:b9:c7:f1:1f:f8:d1:9a:
48:1f:d2:9a:93:2f:78:ec:32:a2:b6:25:00:a1:9e:
ca:b3:20:7e:e1:fa:b0:11:18:82:da:74:a6:46:88:
dd:14:53:a3:d1:97:da:61:11:92:22:9e:a0:6d:5c:
d8:29:61:1c:1a:50:bb:80:eb:20:44:d4:8a:6b:bf:
93:14:dd:d2:95:e4:03:52:6b:c5:e4:c1:c1:c1:75:
90:7d:28:a2:91:17:44:bf:23:34:75:5e:1f:47:c2:
71:32:e7:83:38:68:17:5d:4d:9f:40:e4:9c:10:6a:
1e:bd:30:9f:1d:18:d3:e3:25:2a:73:8e:6f:88:b1:
0c:b1:9d:33:41:d4:da:fc:ce:80:e5:65:a4:53:35:
b4:c3:7a:3c:9a:34:f1:05:b2:92:e2:3f:32:93:df:
66:a4:46:1c:8d:a6:0d:b0:a0:ef:d2:d6:e0:73:92:
93:d6:da:f1:17:64:03:aa:c4:0e:51:79:31:81:44:
5c:26:ef:af:bb:81:bf:25:ea:e3:c1:dd:81:ea:43:
d2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:85:8F:F6:AD:94:BA:BB:CF:97:98:0E:23:2A:B0:E4:4D:BB:9E:3E
X509v3 Authority Key Identifier:
keyid:0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5e:86:4a:9c:71:2f:41:f5:b1:99:ad:70:21:e2:88:5f:ed:
0e:f1:86:1a:94:a2:ce:19:16:21:42:bf:c9:59:76:ce:df:24:
e7:ef:a0:07:46:e1:86:6a:34:ca:8b:7c:6a:7c:c8:3c:7b:7d:
33:1e:ec:5a:c5:bc:86:bd:f1:b1:11:88:da:9a:dd:a6:5a:6a:
c9:6c:75:f9:c7:3f:3b:fa:cc:04:69:be:0d:48:b7:37:15:12:
ec:61:18:c5:f1:2f:cd:64:17:de:de:60:14:ac:92:0d:05:15:
52:c1:65:fd:b6:ff:66:44:1b:b8:71:1e:6d:72:d8:b8:99:2c:
99:08:49:fe:9d:1f:11:17:37:45:33:7b:d6:cd:91:93:da:ba:
b5:b3:c9:a1:87:1c:14:46:b1:d7:d9:5c:c6:41:22:dc:6d:f0:
7f:ba:8e:d3:39:16:7c:61:60:28:d4:7b:31:ff:95:63:15:61:
b2:71:ae:02:de:29:fb:4c:c2:b0:05:71:35:d9:6d:78:5f:67:
62:9a:da:d9:28:06:2e:1a:1a:dc:c8:9b:da:d3:26:ce:af:65:
31:bd:39:c0:18:ed:c2:0f:44:d9:27:59:50:67:9e:7f:47:be:
0a:46:c0:53:c0:90:71:d3:42:3d:fe:fd:3d:13:47:7c:87:e0:
d2:42:ff:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:26 2026 by rpki-client