Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
File: CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft (raw, json)
Hash identifier: PgWDrjaP3V1i69zhBOBTyT+1uuFiGKmPxqMpTf4miXY=
Subject key identifier: A0:F1:C8:F9:9A:9B:5F:5A:8A:E6:48:54:73:C8:79:4C:34:81:13:E6
Authority key identifier: 0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
Certificate issuer: /CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Certificate serial: 01A0CA7DE4D724ED4E64B82F926F6440F628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 19:00:43 +0000
Manifest this update: Tue 22 Sep 2026 19:00:43 +0000
Manifest next update: Wed 23 Sep 2026 19:00:43 +0000
Files and hashes: 1: CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl (hash: niZhBls+n7WUxcJxTFEgIZ9/D3bRuvH+CnUCs7HuIi8=)
2: jr3Qwfg8Z9qypQ7083QLXtA-1bs.roa (hash: BStTXqRwyFgu7NL9U4UDu4snXF66XXGZwBXM2f9Q63k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:e4:d7:24:ed:4e:64:b8:2f:92:6f:64:40:f6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Validity
Not Before: Sep 22 19:00:43 2026 GMT
Not After : Sep 23 19:00:43 2026 GMT
Subject: CN=a0f1c8f99a9b5f5a8ae6485473c8794c348113e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:f8:92:09:70:36:83:1e:ad:a0:31:61:8b:
c1:78:32:53:b2:40:c8:54:42:da:aa:df:49:d4:75:
0b:1b:11:9d:58:ef:36:04:a0:b4:dc:6a:8a:dc:30:
a3:09:8d:1b:c5:12:54:cd:2a:66:02:29:4c:cf:41:
1b:de:fe:68:7f:5d:51:bd:b6:e3:9f:4c:f9:f6:e6:
58:db:98:93:41:f2:3c:24:af:ab:e7:9f:47:02:29:
54:13:80:f4:e6:1c:6f:a5:c5:01:94:f9:09:da:9a:
e3:1c:aa:ff:d2:cd:65:0e:c6:64:46:aa:34:eb:50:
c1:e9:d6:af:0d:ad:14:76:77:6c:36:39:3a:98:e7:
5d:6f:7c:06:90:3c:80:60:43:ca:1c:15:3d:cf:2c:
b2:12:29:87:e9:62:fc:60:a7:f4:c3:40:3a:2e:c1:
44:19:3b:7a:b7:10:0c:dd:20:7c:12:e3:4e:99:a1:
d9:80:77:e6:aa:ae:da:da:50:15:6b:f2:3c:aa:db:
77:c3:40:59:f0:73:08:a9:5a:63:c7:e0:88:db:e1:
00:80:e2:26:77:1a:71:24:dd:6c:45:e9:bd:48:2e:
99:0e:ae:48:93:80:46:3b:47:a8:55:44:94:0e:68:
ab:26:07:e0:a2:36:b1:c7:cc:f4:0c:29:ea:93:1c:
ca:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F1:C8:F9:9A:9B:5F:5A:8A:E6:48:54:73:C8:79:4C:34:81:13:E6
X509v3 Authority Key Identifier:
keyid:0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c5:96:c5:4b:a3:3f:a8:70:2f:fd:30:80:f2:7f:f4:dd:8b:
4b:fe:99:38:9b:a6:00:5c:37:bf:51:bd:4c:63:d3:24:28:cb:
88:3e:35:cd:f2:5e:1f:50:70:22:c4:38:17:28:e0:34:f9:45:
89:87:f3:75:fd:f7:75:1e:fa:99:16:2b:dc:31:08:88:f7:96:
30:2d:df:ba:41:fa:f1:3e:56:db:52:34:1c:88:9e:af:86:2d:
73:0e:b0:ce:da:8d:d7:d8:d3:35:14:20:9e:a8:5f:aa:d1:7f:
d6:8a:d8:dc:08:c3:4f:4c:24:9f:d8:24:1b:dd:69:bf:9c:9a:
2a:94:77:ca:ac:e2:6c:1f:43:8e:31:67:f6:4f:57:32:bc:e5:
2d:ea:7d:2f:eb:0a:2b:e3:6e:fd:05:fa:84:02:32:f9:9b:60:
a0:e6:6d:07:8a:2a:72:db:b3:eb:3e:a0:c0:21:42:4e:1d:00:
ef:17:0b:12:c5:53:c2:f7:3d:a8:d1:31:51:a3:59:0a:49:ea:
1a:ba:cd:93:27:f8:26:02:58:11:1c:76:1e:73:72:83:af:ce:
91:1c:2c:dd:42:2f:64:bf:51:5b:37:44:49:fd:ca:7b:e3:5d:
5c:1b:63:2c:99:e0:b2:17:80:25:9e:0e:ad:5a:fc:f6:34:ec:
06:9d:0f:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKfeTXJO1OZLgvkm9kQPYoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMjNlMmYwYjA2NDA4N2ZkODRmMDQ4YjFmYTk5OTcwMjNk
NTk5ZTEwHhcNMjYwOTIyMTkwMDQzWhcNMjYwOTIzMTkwMDQzWjAzMTEwLwYDVQQD
EyhhMGYxYzhmOTlhOWI1ZjVhOGFlNjQ4NTQ3M2M4Nzk0YzM0ODExM2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJX4kglwNoMeraAxYYvBeDJTskDI
VELaqt9J1HULGxGdWO82BKC03GqK3DCjCY0bxRJUzSpmAilMz0Eb3v5of11Rvbbj
n0z59uZY25iTQfI8JK+r559HAilUE4D05hxvpcUBlPkJ2prjHKr/0s1lDsZkRqo0
61DB6davDa0UdndsNjk6mOddb3wGkDyAYEPKHBU9zyyyEimH6WL8YKf0w0A6LsFE
GTt6txAM3SB8EuNOmaHZgHfmqq7a2lAVa/I8qtt3w0BZ8HMIqVpjx+CI2+EAgOIm
dxpxJN1sRem9SC6ZDq5Ik4BGO0eoVUSUDmirJgfgojaxx8z0DCnqkxzK9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDxyPmam19aiuZIVHPIeUw0gRPmMB8GA1UdIwQY
MBaAFAoj4vCwZAh/2E8Eix+pmXAj1ZnhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2lQaThMQmtDSF9ZVHdTTEg2bVpjQ1BWbWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jOTgzYWEtYjYxZS00ZWQ4LThlODEt
YmMxZTU1YzY5NzU1LzEvQ2lQaThMQmtDSF9ZVHdTTEg2bVpjQ1BWbWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jOTgzYWEtYjYxZS00ZWQ4LThlODEtYmMxZTU1YzY5NzU1
LzEvQ2lQaThMQmtDSF9ZVHdTTEg2bVpjQ1BWbWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMWWxUuj
P6hwL/0wgPJ/9N2LS/6ZOJumAFw3v1G9TGPTJCjLiD41zfJeH1BwIsQ4FyjgNPlF
iYfzdf33dR76mRYr3DEIiPeWMC3fukH68T5W21I0HIier4Ytcw6wztqN19jTNRQg
nqhfqtF/1orY3AjDT0wkn9gkG91pv5yaKpR3yqzibB9DjjFn9k9XMrzlLep9L+sK
K+Nu/QX6hAIy+ZtgoOZtB4oqctuz6z6gwCFCTh0A7xcLEsVTwvc9qNExUaNZCknq
GrrNkyf4JgJYERx2HnNyg6/OkRws3UIvZL9RWzdESf3Ke+NdXBtjLJngsheAJZ4O
rVr89jTsBp0PbA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 05:00:04 2026 by rpki-client