Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier: 8AUZAcV17fx2pDXALqDBL3Tpb/loQlZfxqVFjycys6A=
Subject key identifier: 5B:6F:D5:A5:54:73:56:3C:36:F1:51:E7:8D:FB:9A:2C:CF:94:72:1C
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 019D2771F30F9ABD69A9CCECBDF8E716320A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 00:01:12 +0000
Manifest this update: Thu 26 Mar 2026 00:01:12 +0000
Manifest next update: Fri 27 Mar 2026 00:01:12 +0000
Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: +TotFRoialyl8kFAkKyWev5n7PH+G/wAgbB+xStg4Oo=)
2: OHiJ9XzBUi42gNdFbFSonns_rq0.roa (hash: 5izRR616Szlh4ynpWzSXWkX0E9KgDJBqg2wIQA5yWeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f3:0f:9a:bd:69:a9:cc:ec:bd:f8:e7:16:32:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: Mar 26 00:01:12 2026 GMT
Not After : Mar 27 00:01:12 2026 GMT
Subject: CN=5b6fd5a55473563c36f151e78dfb9a2ccf94721c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:fa:1f:0c:0c:a5:42:6b:3c:23:6d:3c:71:
82:79:f8:27:d6:be:a0:47:60:16:5f:59:ca:5b:0e:
5a:af:70:13:38:ff:55:7c:e3:61:56:dd:7a:91:16:
7e:48:12:ec:55:0f:e2:e2:c3:70:56:76:ec:28:7a:
60:99:e0:59:6a:85:26:1a:6f:93:a6:11:b2:03:13:
90:09:e7:39:6b:66:fc:69:a8:27:9f:ff:29:8f:0e:
1a:c1:57:46:f5:be:f9:b5:e1:39:c6:80:9f:7f:3b:
8b:7a:6b:10:6e:84:c9:7e:55:1f:ed:50:11:23:de:
ad:1f:0a:96:7b:03:7a:dc:20:d3:25:53:bf:ce:9b:
0f:82:78:ab:64:9f:9b:2c:74:ab:5e:28:eb:5e:1a:
3c:a8:d5:c5:25:4f:91:b8:ee:ad:c3:d7:23:9b:5e:
a1:3d:52:22:bf:d2:1c:70:06:cf:68:b2:c5:d2:19:
c8:2a:ff:4f:85:bd:76:ea:e2:f5:07:54:58:0c:10:
56:a7:b3:85:a2:dd:9d:05:59:7a:4f:f3:cb:2b:74:
75:d9:98:be:cf:32:f4:9e:02:49:29:20:95:1c:ff:
38:af:7b:68:fe:18:92:23:b0:16:34:a1:b7:c9:44:
e1:c0:88:74:63:bc:6b:97:9f:45:f6:0a:53:2c:1e:
5a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6F:D5:A5:54:73:56:3C:36:F1:51:E7:8D:FB:9A:2C:CF:94:72:1C
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6e:04:e6:3e:65:0f:57:01:7c:7a:74:01:30:22:28:52:b1:
0d:3c:af:b9:21:a9:6e:4e:2e:80:54:ad:a5:44:35:5e:e2:4f:
17:0b:54:fa:54:ad:28:a3:5d:7d:16:1b:88:34:d7:bb:8f:f2:
98:4b:6f:13:84:9f:02:ee:99:59:41:5e:1c:fd:35:e1:e6:b8:
5e:a3:b1:c8:bc:c6:cd:12:73:ff:34:3d:0d:d5:d1:1f:fb:47:
1e:b6:d5:28:20:f9:72:ba:60:ea:08:75:59:2c:c0:42:cd:ce:
d2:c5:65:fa:3e:6f:3f:54:05:ba:5e:8d:d7:c4:fb:38:c8:a8:
b3:4d:58:07:70:29:8f:38:63:41:09:a2:1d:33:c9:e5:8b:8d:
da:43:81:d6:f0:bf:a8:3f:2b:af:da:2a:67:36:6f:3d:cc:58:
b1:23:2e:8c:36:ab:86:6a:3e:dc:72:fe:a5:51:23:20:89:36:
b7:63:ae:f9:46:95:1b:70:14:1d:28:8d:9e:40:cb:59:29:79:
dc:a6:39:fc:5d:0c:0a:9e:63:57:47:f7:20:a4:b2:71:03:74:
d1:41:3c:90:0a:42:a6:e3:f5:65:84:89:58:00:e6:d4:e0:64:
1a:10:2a:82:6e:f2:18:f2:da:e3:fb:76:6e:f8:cb:13:c4:cf:
ea:01:e4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:04 2026 by rpki-client