Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
File: CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json)
Hash identifier: 8hEFWN6joqBC4RplvHYQRpa+tCItfoN2uu6jYwyMz6c=
Subject key identifier: FC:BC:AE:0E:7B:67:E2:51:CD:01:A7:51:06:81:CB:A3:A5:6C:3D:F7
Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
Certificate issuer: /CN=08819c27a5be3d2db222b05637447ed6e8324873
Certificate serial: 019D2A3B3AD75748998764A969523A86B38A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
Manifest number: 15C9
Signing time: Thu 26 Mar 2026 13:00:17 +0000
Manifest this update: Thu 26 Mar 2026 13:00:17 +0000
Manifest next update: Fri 27 Mar 2026 13:00:17 +0000
Files and hashes: 1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: jwKMdl1VaS3wm+wKx8lHbeOBsuKL3YQsoc8Hq+DoRzk=)
2: IQDg8XUunRwYK-C6GvbnJQ7EHM0.roa (hash: DFgB9yi6JU5q5PfQOPOS6steUe02MkhWX55KVlM+wDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:3a:d7:57:48:99:87:64:a9:69:52:3a:86:b3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873
Validity
Not Before: Mar 26 13:00:17 2026 GMT
Not After : Mar 27 13:00:17 2026 GMT
Subject: CN=fcbcae0e7b67e251cd01a7510681cba3a56c3df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cb:67:df:c7:85:22:6f:9b:c5:7e:80:c8:9a:
fc:3d:9f:5f:cf:b6:93:86:d3:e4:9e:dc:df:94:47:
c2:78:c3:90:f6:1a:41:90:19:20:3b:1c:7c:e5:a4:
a3:f8:49:3a:61:68:6a:d2:f5:5c:4d:be:b7:0e:7a:
d5:b2:f9:e8:d9:de:87:09:1e:98:50:fd:b6:bb:58:
67:ae:d3:64:af:6f:ab:39:54:a5:1d:dc:2a:83:b4:
4f:62:c6:34:7e:dc:c4:b1:50:f8:ba:0c:de:51:72:
58:56:98:a6:14:46:5e:f5:57:ba:83:ac:ea:65:f6:
e0:0b:db:11:61:e5:92:80:10:ac:a3:20:44:ba:13:
2d:24:c3:36:70:9c:7e:fb:54:31:3f:85:32:3b:4d:
96:ab:56:8a:5d:3b:9c:59:3a:bd:ea:3a:42:0c:e0:
9f:96:d8:da:f6:8b:ed:52:04:8e:27:d7:09:07:34:
87:30:26:8c:9d:83:b1:d7:d0:a5:46:ed:0a:df:f2:
43:f0:8f:bc:fc:21:9c:33:5e:ca:f8:19:2b:6a:2f:
16:2d:a5:d4:b8:7e:85:22:b8:f3:3e:bb:0b:73:81:
61:2b:24:2b:f9:03:f2:d9:b6:08:72:ed:1d:d0:af:
fc:b4:c6:2a:c0:cc:f4:ad:99:5c:b7:c8:0b:6c:1d:
5a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BC:AE:0E:7B:67:E2:51:CD:01:A7:51:06:81:CB:A3:A5:6C:3D:F7
X509v3 Authority Key Identifier:
keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:41:a9:c5:6b:fc:0b:4d:b7:27:04:8f:c0:f1:2c:fc:6c:bc:
6d:cb:e7:52:d0:ef:92:8c:28:b0:f2:38:c5:3d:85:59:f8:f4:
a1:62:1d:22:90:a3:cd:0f:df:fa:70:65:97:d6:1a:80:71:bd:
0f:9b:ae:6e:d8:47:60:fd:0a:8f:78:3b:97:9e:48:83:3f:e3:
9a:cf:75:c3:e1:53:36:21:6e:99:ca:47:6d:3d:cf:95:3d:0a:
6b:29:99:66:19:10:4d:d0:bd:2a:da:2b:78:67:87:c1:68:5c:
fa:c5:3f:20:0b:fc:1b:21:a5:30:9a:b7:78:6b:e1:98:52:60:
54:08:8d:f9:70:bb:0a:a0:85:a9:dd:33:2f:aa:80:b2:81:29:
2e:01:ce:da:cd:f1:7f:f6:d3:ff:3a:a0:49:37:04:cf:62:b7:
3a:0a:6f:c3:37:f3:26:5e:66:25:c0:4e:83:5c:fb:8d:a3:1a:
d3:37:26:57:6f:c0:1f:c0:17:6e:db:25:e5:5f:ef:c8:54:fb:
bf:68:b7:66:6c:7d:94:3c:a8:83:04:09:85:50:27:16:64:56:
e7:83:f8:00:85:5f:53:c7:18:fb:a5:0c:6b:f1:af:34:36:fb:
45:4f:df:66:a8:c1:79:48:ab:12:9e:7c:e4:c0:9b:65:e8:35:
ba:42:49:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qOzrXV0iZh2SpaVI6hrOKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODE5YzI3YTViZTNkMmRiMjIyYjA1NjM3NDQ3ZWQ2ZTgz
MjQ4NzMwHhcNMjYwMzI2MTMwMDE3WhcNMjYwMzI3MTMwMDE3WjAzMTEwLwYDVQQD
EyhmY2JjYWUwZTdiNjdlMjUxY2QwMWE3NTEwNjgxY2JhM2E1NmMzZGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhstn38eFIm+bxX6AyJr8PZ9fz7aT
htPkntzflEfCeMOQ9hpBkBkgOxx85aSj+Ek6YWhq0vVcTb63DnrVsvno2d6HCR6Y
UP22u1hnrtNkr2+rOVSlHdwqg7RPYsY0ftzEsVD4ugzeUXJYVpimFEZe9Ve6g6zq
ZfbgC9sRYeWSgBCsoyBEuhMtJMM2cJx++1QxP4UyO02Wq1aKXTucWTq96jpCDOCf
ltja9ovtUgSOJ9cJBzSHMCaMnYOx19ClRu0K3/JD8I+8/CGcM17K+Bkrai8WLaXU
uH6FIrjzPrsLc4FhKyQr+QPy2bYIcu0d0K/8tMYqwMz0rZlct8gLbB1alwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPy8rg57Z+JRzQGnUQaBy6OlbD33MB8GA1UdIwQY
MBaAFAiBnCelvj0tsiKwVjdEftboMkhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMt
MWNhZjA2MTEzNzRkLzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMtMWNhZjA2MTEzNzRk
LzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0GpxWv8
C023JwSPwPEs/Gy8bcvnUtDvkowosPI4xT2FWfj0oWIdIpCjzQ/f+nBll9YagHG9
D5uubthHYP0Kj3g7l55Igz/jms91w+FTNiFumcpHbT3PlT0KaymZZhkQTdC9Ktor
eGeHwWhc+sU/IAv8GyGlMJq3eGvhmFJgVAiN+XC7CqCFqd0zL6qAsoEpLgHO2s3x
f/bT/zqgSTcEz2K3OgpvwzfzJl5mJcBOg1z7jaMa0zcmV2/AH8AXbtsl5V/vyFT7
v2i3Zmx9lDyogwQJhVAnFmRW54P4AIVfU8cY+6UMa/GvNDb7RU/fZqjBeUirEp58
5MCbZeg1ukJJEA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:38 2026 by rpki-client