Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
File: CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json)
Hash identifier: p0wY6nO+8ywyqQabf3i7sfqmI++UknGwB/jSbz3Q7rQ=
Subject key identifier: 2D:23:69:CF:96:4D:EC:32:4B:1C:62:76:93:19:B8:01:A4:17:38:DF
Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
Certificate issuer: /CN=08819c27a5be3d2db222b05637447ed6e8324873
Certificate serial: 01A0CB22E0036C1F03243102BBCB1D4BB98C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
Manifest number: 17AA
Signing time: Tue 22 Sep 2026 22:00:55 +0000
Manifest this update: Tue 22 Sep 2026 22:00:55 +0000
Manifest next update: Wed 23 Sep 2026 22:00:55 +0000
Files and hashes: 1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: CuN5g5GpGrprK/WbTDREzPoDDPeGf2y3yj3YfC4Jc7o=)
2: IQDg8XUunRwYK-C6GvbnJQ7EHM0.roa (hash: DFgB9yi6JU5q5PfQOPOS6steUe02MkhWX55KVlM+wDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:e0:03:6c:1f:03:24:31:02:bb:cb:1d:4b:b9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873
Validity
Not Before: Sep 22 22:00:55 2026 GMT
Not After : Sep 23 22:00:55 2026 GMT
Subject: CN=2d2369cf964dec324b1c62769319b801a41738df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:f0:4b:48:50:e0:bc:e5:b3:dc:21:62:88:
99:ed:32:71:4c:9c:4f:a3:f6:e8:b5:75:d3:0f:2b:
84:e2:cd:9b:0a:40:b9:78:46:54:87:6e:8c:46:4b:
cf:ee:d6:7a:42:60:83:2d:72:61:71:69:f0:56:d0:
61:01:c1:1c:36:15:7a:b2:61:07:d2:ab:bd:9c:31:
db:5c:f4:e9:24:35:d0:9b:3c:34:7d:4c:bf:0c:75:
7a:10:a1:5a:cf:0b:0e:e2:2a:05:a3:00:0f:d4:cf:
9b:d0:91:a6:3b:74:75:48:46:29:be:67:b1:91:c2:
91:26:fe:af:ac:b7:fc:e4:5e:06:ff:54:29:73:09:
3c:a1:cc:2d:e3:2d:e6:ac:63:81:a9:ce:63:69:c3:
9b:93:fd:5a:80:ae:5a:5c:7e:45:47:d5:5d:c2:a7:
f8:4c:65:a5:15:71:58:53:45:00:af:54:6b:9e:2b:
9b:df:bd:83:08:b2:3c:23:65:ed:19:f1:3c:ce:19:
05:f1:22:17:c3:0d:09:0f:7c:12:74:9c:0a:a1:6a:
f7:4f:04:f5:4e:3b:df:5f:ed:26:78:bf:09:ad:d0:
75:bc:d3:ed:5a:6c:5b:4b:42:de:60:50:37:cd:64:
7f:ef:7b:9b:dd:90:36:69:13:23:80:69:41:d4:b4:
8c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:23:69:CF:96:4D:EC:32:4B:1C:62:76:93:19:B8:01:A4:17:38:DF
X509v3 Authority Key Identifier:
keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:bb:c6:8e:69:b7:a8:64:09:73:2e:24:2f:e4:6b:81:e9:61:
aa:c3:54:fe:d6:7b:5a:57:8b:84:48:76:f5:df:b8:77:e2:26:
eb:86:90:78:56:1f:b9:73:3c:bb:34:68:04:fe:63:68:2f:ec:
69:20:9b:d7:81:b0:60:d3:58:b2:1b:f0:a3:a0:26:f2:5f:af:
38:32:36:9b:f1:ca:c3:24:a0:b6:db:60:96:12:43:f2:b1:8d:
89:e7:55:e9:ec:87:02:32:51:76:54:21:27:66:38:79:f6:47:
6a:26:70:d5:92:fc:47:73:1d:d0:e9:02:d0:14:df:7d:bd:f0:
b9:74:37:5e:c6:87:5a:8b:06:79:30:26:ef:0b:36:a5:4d:4b:
c9:1d:c2:b2:d0:05:7b:99:63:98:48:c1:89:a1:33:78:ef:a9:
50:8b:ae:34:98:7a:dc:3a:66:31:8a:f4:7a:cb:1b:b5:72:4a:
78:2b:c4:86:7a:a0:1a:74:44:2b:88:a9:e5:88:49:f4:c4:14:
09:38:f6:ab:0a:f3:38:61:8c:2c:53:84:3f:10:ac:97:9d:45:
d0:f9:08:3a:dc:28:49:b1:f0:c1:b8:1a:f5:f0:fa:cc:68:c0:
53:dc:47:ee:bb:69:0b:a2:72:d9:3c:68:7e:b1:d4:81:5b:19:
9b:d8:10:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:08:51 2026 by rpki-client