Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
File: CI4DIScTMq_HfkyFefDlVZzAnFA.mft (raw, json)
Hash identifier: m3/WAtCsDzpz4qkyEc29biQQ4DsYfc6ufCeVAFePIC4=
Subject key identifier: CB:71:81:9D:21:1A:DC:CC:A1:69:A9:6A:01:B6:D6:53:24:B1:9F:88
Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50
Certificate serial: 019D27A8D0B134DCBA09A1CD20548562E6AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
Manifest number: 154E
Signing time: Thu 26 Mar 2026 01:01:07 +0000
Manifest this update: Thu 26 Mar 2026 01:01:07 +0000
Manifest next update: Fri 27 Mar 2026 01:01:07 +0000
Files and hashes: 1: CI4DIScTMq_HfkyFefDlVZzAnFA.crl (hash: 27MROjQxCBhLwm1eMOF3p2FK1dLg00S39Fd5aQLWtJ8=)
2: KtMqQnXaTgjktxdZ9isOcMNd_ow.roa (hash: EvEd1Dr3LRZFLdIp6Wy0JVab3CsirxaKCwus40x7MwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:d0:b1:34:dc:ba:09:a1:cd:20:54:85:62:e6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50
Validity
Not Before: Mar 26 01:01:07 2026 GMT
Not After : Mar 27 01:01:07 2026 GMT
Subject: CN=cb71819d211adccca169a96a01b6d65324b19f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3c:54:db:49:f1:fd:66:d6:ca:b3:65:e8:7d:
f9:ac:03:c7:41:c3:26:cf:05:36:7b:f4:fb:3b:ce:
9f:bf:7b:ac:a3:98:f9:94:7b:5d:dd:d5:5e:7f:d6:
ed:d9:3e:a3:c1:44:25:a4:3b:8f:a6:fa:64:0c:c6:
52:c3:78:c2:be:b1:ea:55:a8:70:52:7b:7d:33:ef:
6b:92:fa:1b:aa:b1:57:82:a2:ca:e9:83:35:e3:10:
f8:6e:f7:bd:07:02:83:b9:d2:d0:c1:c5:c3:3e:0d:
96:23:43:53:11:e1:3a:ee:bf:dd:b8:85:28:a7:37:
74:fb:74:90:61:4d:5a:83:02:eb:ac:96:06:92:5c:
2d:46:25:f4:e9:21:84:3e:c9:9e:39:01:91:a1:1e:
1c:59:51:18:3d:6f:19:43:4e:b6:e0:df:3f:a8:f4:
19:04:1a:cb:45:81:d7:62:cc:ed:9b:06:10:22:25:
ed:35:e2:7f:63:36:f2:00:d7:27:be:9b:73:95:6e:
d7:00:81:14:0f:62:9e:a1:0a:a9:69:2e:19:dc:0e:
4a:4b:2e:aa:f8:64:2d:29:df:df:78:1f:46:83:f9:
c0:cb:13:ed:05:fb:c2:bc:01:7e:39:7f:07:ad:28:
63:66:23:32:ec:15:02:13:dc:3a:4c:5c:19:9d:c8:
a3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:71:81:9D:21:1A:DC:CC:A1:69:A9:6A:01:B6:D6:53:24:B1:9F:88
X509v3 Authority Key Identifier:
keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:24:23:b6:f6:9d:11:fb:54:ca:3b:98:09:28:55:35:1c:54:
ba:25:b7:37:e1:99:73:49:f0:ce:a8:35:b9:10:0d:6f:fc:e2:
89:51:10:8c:85:14:ad:aa:65:c2:a6:65:25:99:e1:fa:f0:8c:
fb:63:ae:e7:25:75:ca:17:b3:bc:7d:b0:4d:c1:62:72:ca:ba:
29:a6:fe:df:56:30:4f:2f:67:e8:ed:08:fc:8f:e9:98:08:d3:
29:08:2f:0b:49:d7:03:c1:72:06:e5:07:24:ac:7d:ee:99:8f:
2d:29:c0:17:c1:0d:52:8e:47:11:b6:8c:f4:17:88:0b:4f:45:
b3:41:87:41:f7:3f:70:2c:8e:eb:f1:4d:bd:24:72:11:6b:2b:
eb:0b:53:7f:4c:e8:9a:84:d3:19:fe:9c:7b:a7:e2:66:18:ed:
43:ce:71:34:65:ba:12:af:70:0b:1d:1e:8f:75:38:2e:0e:2d:
b4:c2:ef:0e:51:f6:70:13:ad:c0:be:44:ef:7a:4e:f2:c9:28:
fd:cf:50:8e:68:89:a8:90:85:d8:ab:72:89:57:c8:7c:6f:5d:
af:4e:ae:20:57:fa:b9:82:3a:f8:98:cf:d8:6c:41:11:9f:cb:
e7:91:20:9d:91:77:87:95:8d:03:60:28:30:40:11:fd:31:55:
0d:72:80:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqNCxNNy6CaHNIFSFYuatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OGUwMzIxMjcxMzMyYWZjNzdlNGM4NTc5ZjBlNTU1OWNj
MDljNTAwHhcNMjYwMzI2MDEwMTA3WhcNMjYwMzI3MDEwMTA3WjAzMTEwLwYDVQQD
EyhjYjcxODE5ZDIxMWFkY2NjYTE2OWE5NmEwMWI2ZDY1MzI0YjE5Zjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDxU20nx/WbWyrNl6H35rAPHQcMm
zwU2e/T7O86fv3uso5j5lHtd3dVef9bt2T6jwUQlpDuPpvpkDMZSw3jCvrHqVahw
Unt9M+9rkvobqrFXgqLK6YM14xD4bve9BwKDudLQwcXDPg2WI0NTEeE67r/duIUo
pzd0+3SQYU1agwLrrJYGklwtRiX06SGEPsmeOQGRoR4cWVEYPW8ZQ0624N8/qPQZ
BBrLRYHXYsztmwYQIiXtNeJ/YzbyANcnvptzlW7XAIEUD2KeoQqpaS4Z3A5KSy6q
+GQtKd/feB9Gg/nAyxPtBfvCvAF+OX8HrShjZiMy7BUCE9w6TFwZncijZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtxgZ0hGtzMoWmpagG21lMksZ+IMB8GA1UdIwQY
MBaAFAiOAyEnEzKvx35MhXnw5VWcwJxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hMmE1MmMtMTM2YS00M2E4LTk2N2Mt
ZjZkOTY2Y2E0ZjA3LzEvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9hMmE1MmMtMTM2YS00M2E4LTk2N2MtZjZkOTY2Y2E0ZjA3
LzEvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtSQjtvad
EftUyjuYCShVNRxUuiW3N+GZc0nwzqg1uRANb/ziiVEQjIUUraplwqZlJZnh+vCM
+2Ou5yV1yhezvH2wTcFicsq6Kab+31YwTy9n6O0I/I/pmAjTKQgvC0nXA8FyBuUH
JKx97pmPLSnAF8ENUo5HEbaM9BeIC09Fs0GHQfc/cCyO6/FNvSRyEWsr6wtTf0zo
moTTGf6ce6fiZhjtQ85xNGW6Eq9wCx0ej3U4Lg4ttMLvDlH2cBOtwL5E73pO8sko
/c9QjmiJqJCF2KtyiVfIfG9dr06uIFf6uYI6+JjP2GxBEZ/L55EgnZF3h5WNA2Ao
MEAR/TFVDXKAHQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:41 2026 by rpki-client