Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
File: CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json)
Hash identifier: fHDrsE6mx4kDRJ2m3ORSxeTlW7E2l1bwCiW/MGhPzzA=
Subject key identifier: 12:8A:06:DC:69:02:F6:61:1E:09:95:9C:F5:86:F4:F9:1B:EA:C8:44
Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
Certificate issuer: /CN=08819c27a5be3d2db222b05637447ed6e8324873
Certificate serial: 019F905A60D7984B4CBA9F5497C2BBAFA4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
Manifest number: 1707
Signing time: Thu 23 Jul 2026 19:01:09 +0000
Manifest this update: Thu 23 Jul 2026 19:01:09 +0000
Manifest next update: Fri 24 Jul 2026 19:01:09 +0000
Files and hashes: 1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: 0ew6OgvfmiVHlvoFLMWS5tHC4phLM72h5qMmUHzLJ9U=)
2: IQDg8XUunRwYK-C6GvbnJQ7EHM0.roa (hash: DFgB9yi6JU5q5PfQOPOS6steUe02MkhWX55KVlM+wDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:60:d7:98:4b:4c:ba:9f:54:97:c2:bb:af:a4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873
Validity
Not Before: Jul 23 19:01:09 2026 GMT
Not After : Jul 24 19:01:09 2026 GMT
Subject: CN=128a06dc6902f6611e09959cf586f4f91beac844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:44:c6:96:3c:f5:aa:23:5e:6d:50:e5:b4:80:
87:0f:6e:84:89:7f:ad:bd:47:f6:74:9b:b8:9e:81:
b1:8f:56:6f:c7:55:6e:bc:c3:eb:49:89:33:6e:62:
b3:f9:3e:79:d3:02:0a:6a:46:18:fe:a6:d8:76:3a:
cf:92:c1:42:9c:a2:cd:13:12:25:cb:c9:12:d6:29:
fa:b1:d6:a8:48:43:4c:39:57:c0:b7:41:fe:f6:a9:
20:11:4a:7c:91:3f:83:a7:2e:03:56:0e:66:3a:db:
8d:1a:47:f9:db:50:2d:e2:25:8f:e1:e7:55:7b:81:
6e:6b:d6:a0:62:b4:70:33:be:77:ec:a9:2e:56:61:
a5:a5:bc:5e:0d:a4:f5:ea:c4:fe:43:d1:8a:69:69:
f4:6d:3e:68:77:65:10:88:97:b8:16:1d:20:74:cc:
a0:0a:fc:7a:1e:1f:0c:0f:fa:ee:17:87:1d:41:8c:
f0:91:85:b1:86:f9:18:dc:69:3e:90:e6:de:e3:0b:
d0:5d:97:bc:17:79:d3:4c:e9:29:7e:92:c3:9c:ed:
31:b5:95:bd:8e:a7:17:24:f4:02:dc:45:5e:62:2e:
35:ec:7e:34:e7:25:fe:9c:a0:f0:22:4e:89:c6:c4:
e9:6b:f7:d6:95:16:ca:13:10:0c:0a:2e:f8:56:25:
bc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8A:06:DC:69:02:F6:61:1E:09:95:9C:F5:86:F4:F9:1B:EA:C8:44
X509v3 Authority Key Identifier:
keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4e:73:a9:dc:f8:67:ee:95:ab:29:10:26:33:9d:7f:b1:de:
92:2c:d5:f1:9b:1f:67:7e:fe:6d:55:b7:81:0e:c8:a5:9c:1b:
da:6e:fa:e4:75:0d:8b:64:c4:c4:6c:14:22:9d:61:73:b6:f3:
87:86:ba:49:c8:41:0a:47:c8:d2:69:ce:54:37:67:dc:91:c5:
f6:9a:71:5e:53:d2:90:f2:20:53:4c:05:64:05:78:a5:02:31:
94:47:18:32:a9:82:ce:5a:03:b0:45:35:3d:1c:2d:c8:ea:ef:
56:71:7f:c7:02:84:e5:8f:00:35:89:37:2f:ad:5a:cb:8e:07:
d1:23:21:6c:c9:d4:ef:5c:97:00:ed:64:02:64:a0:9e:2c:86:
d9:c0:a6:36:a5:63:1d:be:3a:4a:98:4d:f1:3e:b6:da:f2:a1:
55:df:67:0c:2c:28:13:9d:cf:3a:fe:62:19:8c:e4:14:e5:08:
50:bb:67:3d:c8:8a:20:d3:94:5e:53:45:d7:4d:15:5f:d1:df:
21:02:b2:22:fc:05:0f:16:12:81:2a:ad:4a:58:13:c2:61:4b:
d0:e2:79:0c:8c:35:10:29:16:09:f5:51:2a:dc:02:d4:fa:f2:
0c:42:d1:e1:b7:81:4a:28:88:fa:06:31:50:58:ef:5c:d4:a8:
e7:d8:7e:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWmDXmEtMup9Ul8K7r6SlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODE5YzI3YTViZTNkMmRiMjIyYjA1NjM3NDQ3ZWQ2ZTgz
MjQ4NzMwHhcNMjYwNzIzMTkwMTA5WhcNMjYwNzI0MTkwMTA5WjAzMTEwLwYDVQQD
EygxMjhhMDZkYzY5MDJmNjYxMWUwOTk1OWNmNTg2ZjRmOTFiZWFjODQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ETGljz1qiNebVDltICHD26EiX+t
vUf2dJu4noGxj1Zvx1VuvMPrSYkzbmKz+T550wIKakYY/qbYdjrPksFCnKLNExIl
y8kS1in6sdaoSENMOVfAt0H+9qkgEUp8kT+Dpy4DVg5mOtuNGkf521At4iWP4edV
e4Fua9agYrRwM7537KkuVmGlpbxeDaT16sT+Q9GKaWn0bT5od2UQiJe4Fh0gdMyg
Cvx6Hh8MD/ruF4cdQYzwkYWxhvkY3Gk+kObe4wvQXZe8F3nTTOkpfpLDnO0xtZW9
jqcXJPQC3EVeYi417H405yX+nKDwIk6JxsTpa/fWlRbKExAMCi74ViW8VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKKBtxpAvZhHgmVnPWG9Pkb6shEMB8GA1UdIwQY
MBaAFAiBnCelvj0tsiKwVjdEftboMkhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMt
MWNhZjA2MTEzNzRkLzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMtMWNhZjA2MTEzNzRk
LzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALU5zqdz4
Z+6VqykQJjOdf7HekizV8ZsfZ37+bVW3gQ7IpZwb2m765HUNi2TExGwUIp1hc7bz
h4a6SchBCkfI0mnOVDdn3JHF9ppxXlPSkPIgU0wFZAV4pQIxlEcYMqmCzloDsEU1
PRwtyOrvVnF/xwKE5Y8ANYk3L61ay44H0SMhbMnU71yXAO1kAmSgniyG2cCmNqVj
Hb46SphN8T622vKhVd9nDCwoE53POv5iGYzkFOUIULtnPciKINOUXlNF100VX9Hf
IQKyIvwFDxYSgSqtSlgTwmFL0OJ5DIw1ECkWCfVRKtwC1PryDELR4beBSiiI+gYx
UFjvXNSo59h+Mg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:22:23 2026 by rpki-client