Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
File: CIAqhiH4eCf9WXI85my1nDj5HyE.mft (raw, json)
Hash identifier: 0qmX3c07JD1BFnsE7VS7ksN5Sxsljrw9h1ZyVjRmYAM=
Subject key identifier: 5D:27:13:95:4C:9D:BF:FA:5A:7A:2F:7A:71:79:63:9D:C5:F6:FE:B4
Authority key identifier: 08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
Certificate issuer: /CN=08802a8621f87827fd59723ce66cb59c38f91f21
Certificate serial: 019F8F7EA41FA10CFC771FF4757DB512720B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
Manifest number: 0D1D
Signing time: Thu 23 Jul 2026 15:01:09 +0000
Manifest this update: Thu 23 Jul 2026 15:01:09 +0000
Manifest next update: Fri 24 Jul 2026 15:01:09 +0000
Files and hashes: 1: CIAqhiH4eCf9WXI85my1nDj5HyE.crl (hash: xOg4zNl81FeJNrKF4ebEACMOZ13h/EzfCEnh0yX31/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:a4:1f:a1:0c:fc:77:1f:f4:75:7d:b5:12:72:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08802a8621f87827fd59723ce66cb59c38f91f21
Validity
Not Before: Jul 23 15:01:09 2026 GMT
Not After : Jul 24 15:01:09 2026 GMT
Subject: CN=5d2713954c9dbffa5a7a2f7a7179639dc5f6feb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:d1:e6:64:98:9e:c9:f4:7d:6d:19:9c:b0:
06:72:0a:26:e8:ac:c3:23:63:62:ea:09:39:0b:e7:
76:93:40:1b:03:67:1c:7c:c0:26:28:34:3d:4d:46:
c9:ab:76:50:46:e0:81:ae:3c:48:01:ae:37:44:a1:
1f:50:ba:6a:86:e7:9a:06:ac:b3:73:95:ab:14:8f:
95:87:83:15:89:37:1d:84:33:d4:60:0e:28:9d:20:
5e:51:40:33:7b:ef:27:d9:27:9e:79:6e:67:ee:fe:
ac:b5:4b:b0:7c:a6:69:b1:33:7f:4d:be:f9:1d:c4:
df:1b:86:14:0d:09:bd:16:64:e9:07:66:64:32:86:
90:f0:77:1d:74:1c:d7:9a:44:89:a4:6b:d4:15:d1:
52:d3:9d:02:90:27:5b:9b:0c:ac:d3:b9:7b:4a:9a:
dd:57:d9:62:f6:33:86:67:98:4d:18:f1:f8:7f:c3:
c7:31:f5:4e:7b:20:96:ac:d2:30:67:06:16:2a:7c:
d0:f8:7b:c1:b8:38:a0:1e:aa:39:07:1e:5a:a9:70:
cb:6b:e4:91:04:01:22:c4:7b:04:dd:c0:73:d8:61:
bf:03:3d:20:89:98:70:e2:7d:66:b2:83:10:6e:ac:
89:1d:c4:2a:2f:cc:c5:c6:f2:36:34:48:86:1b:50:
d4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:27:13:95:4C:9D:BF:FA:5A:7A:2F:7A:71:79:63:9D:C5:F6:FE:B4
X509v3 Authority Key Identifier:
keyid:08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:49:08:ae:da:5e:e0:4e:1d:2e:d4:01:3d:34:2b:6c:67:30:
7e:67:81:3a:76:d0:69:2f:02:ee:1c:87:85:fa:db:76:d4:2e:
a9:b6:80:0e:dd:02:dc:f6:19:6a:74:7d:81:27:6a:d6:14:e4:
3d:e9:fe:00:d6:f5:75:fd:1a:26:ac:ba:66:96:fd:9e:af:14:
bd:d2:82:60:8a:b3:f5:58:c1:28:79:f4:27:ac:97:f3:09:a7:
bf:8b:ce:6d:f9:3f:b9:8e:e7:f2:cb:fe:90:39:28:0c:92:82:
63:b7:78:8f:cb:61:41:31:85:d1:6c:5e:e8:47:7e:79:6c:d3:
07:5f:20:88:78:88:a4:97:8f:ae:d0:9e:30:06:93:9d:5b:9f:
a2:ca:da:f1:83:12:5c:1e:3a:8d:96:af:69:ce:d3:f8:10:17:
05:20:cf:43:6a:7a:a2:30:5c:30:8c:a3:a9:c9:40:56:fc:32:
8c:77:3c:86:cf:44:34:ee:2b:81:2c:8b:d9:f9:ea:5b:a7:1e:
23:3b:fc:41:9a:66:5d:66:43:ab:3e:a4:c0:f1:1d:59:4b:15:
2a:8f:79:f6:07:eb:46:61:94:e9:e2:95:6a:d8:f3:a0:1d:cd:
1a:01:54:f9:76:a3:ab:5c:d4:c3:28:a4:5e:ce:85:e2:0d:4c:
bd:df:12:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:49:21 2026 by rpki-client