Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
File: CI4DIScTMq_HfkyFefDlVZzAnFA.mft (raw, json)
Hash identifier: mhCPzpsdd4VTDI+ooqm/Vxl5oY4Fo/rX4eHrbLkGatE=
Subject key identifier: DF:27:49:F7:4D:7A:B9:7E:CD:F4:A0:AB:8F:E0:C0:CE:51:9A:B1:49
Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50
Certificate serial: 019E1CEB3F2F78FE1EA93192E778835E6789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
Manifest number: 15CD
Signing time: Tue 12 May 2026 16:00:39 +0000
Manifest this update: Tue 12 May 2026 16:00:39 +0000
Manifest next update: Wed 13 May 2026 16:00:39 +0000
Files and hashes: 1: CI4DIScTMq_HfkyFefDlVZzAnFA.crl (hash: DCOBx0pb7hmBa996IUQ+daizxllplNEAPGAjHTm3vE0=)
2: KtMqQnXaTgjktxdZ9isOcMNd_ow.roa (hash: EvEd1Dr3LRZFLdIp6Wy0JVab3CsirxaKCwus40x7MwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:3f:2f:78:fe:1e:a9:31:92:e7:78:83:5e:67:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50
Validity
Not Before: May 12 16:00:39 2026 GMT
Not After : May 13 16:00:39 2026 GMT
Subject: CN=df2749f74d7ab97ecdf4a0ab8fe0c0ce519ab149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:7d:89:6c:9f:6c:f3:6b:2f:fd:ed:36:44:
2b:72:c0:f0:46:95:30:74:85:2a:a7:b3:2c:5a:1e:
0c:25:11:86:40:6c:23:98:6e:97:84:04:50:68:c0:
58:7d:5b:65:d8:0c:ea:80:b8:50:60:b9:79:09:23:
28:7c:d1:3d:3c:d0:88:6b:bc:bc:43:f0:1b:12:24:
d1:fc:38:e4:d0:7e:d1:f5:3a:2e:6e:f2:8f:40:11:
dd:d0:cb:d7:b0:7e:89:94:c8:3d:b0:fd:ea:8e:9d:
45:a1:a5:0e:6f:75:a5:58:b9:05:6f:87:c4:4d:79:
bf:0b:26:ae:3b:9a:83:c1:7b:94:69:f7:18:75:92:
78:10:43:84:0d:8d:ea:78:d2:8b:d8:cd:eb:f4:2e:
95:8f:dd:23:e4:1d:4d:34:62:05:06:22:6b:ec:94:
75:45:89:a0:b6:be:e4:52:bd:11:16:ce:84:f8:18:
4b:e2:b7:da:89:29:33:f2:12:de:ce:4d:0e:b1:df:
69:d1:cc:52:7c:9c:8a:17:6a:fc:81:cd:e5:1d:91:
0a:f4:4f:3d:f4:e7:29:44:2c:c1:1a:2e:09:c9:e9:
e7:bb:21:c8:ef:e7:f6:22:b9:11:86:49:40:86:d8:
4d:32:af:4f:aa:63:86:b3:89:2b:45:34:0a:9f:0b:
bc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:27:49:F7:4D:7A:B9:7E:CD:F4:A0:AB:8F:E0:C0:CE:51:9A:B1:49
X509v3 Authority Key Identifier:
keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b9:21:ad:14:81:d0:1b:5d:01:52:b5:12:a6:33:d5:dc:11:
c8:b5:b2:73:5b:c2:39:fa:4b:b3:cf:8e:60:c2:52:20:bd:32:
37:12:58:b0:09:dc:8d:ef:df:e6:9f:3c:41:e8:6e:3d:07:7b:
f4:b5:b6:33:16:76:bf:14:d6:f5:f5:10:6f:19:b7:7f:47:01:
c8:a2:18:c2:b1:91:d2:fe:8e:30:e0:15:35:e3:11:40:58:07:
12:57:8e:9f:e1:87:3e:9c:81:f9:53:3d:4e:5e:cb:16:c3:12:
4b:06:2c:6c:c3:78:4b:49:71:9d:92:2d:ae:9b:8f:b7:82:56:
ea:bb:05:71:2c:d3:f0:ea:db:0b:57:6e:69:c5:d8:75:4e:35:
30:1d:64:76:84:f5:bb:82:2a:62:9b:57:88:35:fe:c1:0e:7c:
f9:40:d9:85:f5:d9:e9:65:49:e5:5d:b0:96:27:a7:1c:f0:f2:
5e:4d:da:b6:6a:4f:31:cf:02:d1:c2:6d:1e:ca:b3:8e:36:d1:
bd:e8:d0:35:52:cd:d0:60:19:d2:ba:b6:a7:65:40:11:d6:8b:
75:7b:c5:9b:27:0a:7a:fe:30:64:ff:b3:02:b8:2d:9d:af:a0:
31:01:10:f8:55:b8:40:60:3b:2c:49:0a:fa:bf:c1:77:e7:5a:
d8:ed:11:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:44:20 2026 by rpki-client