Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
File: CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json)
Hash identifier: dAAl/X3v5CVv9I45IUQbY60TE8zGt3LGf5jnl3u45Pc=
Subject key identifier: 99:AE:4B:65:1D:4B:FE:59:B7:4F:74:5C:89:A2:09:CA:56:70:BE:CD
Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
Certificate issuer: /CN=08819c27a5be3d2db222b05637447ed6e8324873
Certificate serial: 019E1D90E2E3932A9097AC7888AB5EAEA90A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
Manifest number: 1647
Signing time: Tue 12 May 2026 19:01:34 +0000
Manifest this update: Tue 12 May 2026 19:01:34 +0000
Manifest next update: Wed 13 May 2026 19:01:34 +0000
Files and hashes: 1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: ul2yFAZuUxt6orVYrl87ohf8/SWBh33qqlTnT3kI0Is=)
2: IQDg8XUunRwYK-C6GvbnJQ7EHM0.roa (hash: DFgB9yi6JU5q5PfQOPOS6steUe02MkhWX55KVlM+wDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:e2:e3:93:2a:90:97:ac:78:88:ab:5e:ae:a9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873
Validity
Not Before: May 12 19:01:34 2026 GMT
Not After : May 13 19:01:34 2026 GMT
Subject: CN=99ae4b651d4bfe59b74f745c89a209ca5670becd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:82:a3:18:c1:71:fb:47:a4:e1:14:f6:bb:
dc:7f:78:2a:04:5d:4f:04:07:a6:a7:05:e9:7e:fd:
ff:6f:a7:c5:bf:9d:10:23:ef:1a:33:ab:d1:19:6d:
ad:c9:2d:44:24:20:6f:31:99:f1:e3:cc:dd:86:67:
01:55:18:3f:ac:0f:64:dd:7b:5a:1a:35:24:95:db:
4a:ef:f0:93:f1:6c:10:e0:f1:3a:77:1b:bc:59:b0:
4e:24:6c:8f:25:33:22:d5:1b:52:e6:8f:95:c7:82:
f0:2d:0f:b7:b0:4d:98:0b:1b:1a:66:c7:04:54:73:
43:f2:ca:c4:1e:57:7d:05:09:7f:0c:0e:1b:d4:17:
53:be:c4:f2:97:24:a6:3f:66:71:63:3f:f9:d2:4d:
31:8d:43:5f:2f:42:38:f4:ec:70:49:ff:77:67:b8:
07:7a:aa:64:52:10:20:0e:97:8e:39:cf:54:c9:dd:
1f:51:72:52:54:26:1d:11:8e:e0:0a:b3:a8:50:58:
b9:96:4b:99:2a:85:3b:ad:93:a2:ae:59:e8:d6:76:
53:29:9b:6e:e8:7a:65:f8:44:c5:58:ba:20:ee:94:
2d:83:41:e3:94:79:d0:5b:0c:2e:7a:8d:16:98:34:
4b:17:86:80:d4:19:08:b0:c5:4c:b0:9f:70:cf:ce:
a3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AE:4B:65:1D:4B:FE:59:B7:4F:74:5C:89:A2:09:CA:56:70:BE:CD
X509v3 Authority Key Identifier:
keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7c:ae:dd:16:9f:9c:d4:9e:ae:4f:66:72:39:0a:23:0d:60:
d3:bf:cc:7d:9f:e4:52:61:c7:39:84:43:cb:26:9b:02:a6:7f:
74:90:9a:91:5b:19:13:61:6a:61:1e:7a:e8:64:03:00:86:53:
b5:59:7d:21:e1:82:5d:ff:82:0e:eb:b9:66:06:e4:0a:35:86:
54:6b:32:87:46:e2:00:b8:38:c6:c0:8b:c7:16:9b:8c:77:12:
9f:49:66:28:d0:fd:fa:d7:d8:d4:28:e3:e0:89:04:d0:84:14:
b1:3a:a3:1d:c9:76:bd:58:be:f9:47:90:a3:96:8f:7a:65:74:
b3:53:60:9f:d6:6b:dd:7a:21:ee:bf:f6:72:fa:dd:93:b6:7b:
06:6e:ba:00:64:31:db:23:fe:53:7d:97:cf:23:e6:34:82:79:
7d:56:f1:01:e6:be:2c:c6:21:a8:d7:6b:5e:4f:d3:05:7a:03:
73:39:07:e9:f1:79:15:8b:9f:df:5c:d6:76:ce:af:87:06:8c:
cd:5c:dd:46:ea:d9:3a:b6:4e:f4:bc:5c:c2:29:1c:70:f0:40:
72:77:33:22:92:9a:79:d6:98:aa:5e:51:a1:dd:3f:7a:4b:21:
e6:d8:33:b0:ee:4a:b2:a6:bf:47:7e:3b:00:b0:46:bf:06:da:
e7:7c:b3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:13 2026 by rpki-client