Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier: kQEBnZ38kPgkg5BXqy38xg8ygqEXCCMmVz7TFnGE1BU=
Subject key identifier: 75:E3:77:8D:07:FD:56:A7:67:0A:6F:69:B0:9D:0B:A7:C0:77:5E:F3
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 019F8F7FBDA5F3D88C6D59D8F964C80D9781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 15:02:21 +0000
Manifest this update: Thu 23 Jul 2026 15:02:21 +0000
Manifest next update: Fri 24 Jul 2026 15:02:21 +0000
Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: 63bFOH6hbV882iDLW7o0iSRpOahWeSNedAq/ykGdEfY=)
2: OHiJ9XzBUi42gNdFbFSonns_rq0.roa (hash: 5izRR616Szlh4ynpWzSXWkX0E9KgDJBqg2wIQA5yWeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:bd:a5:f3:d8:8c:6d:59:d8:f9:64:c8:0d:97:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: Jul 23 15:02:21 2026 GMT
Not After : Jul 24 15:02:21 2026 GMT
Subject: CN=75e3778d07fd56a7670a6f69b09d0ba7c0775ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b5:2a:e5:7d:92:6e:47:8f:ee:3c:ad:3c:1e:
2c:17:c9:e3:20:be:fd:a8:1b:6f:83:8f:f7:95:50:
62:4b:2d:60:f2:01:b7:3d:35:87:b4:ca:26:50:d9:
4d:e9:5f:6b:60:df:15:3b:b7:01:87:6b:89:cf:d7:
3e:6f:d2:13:4a:7f:44:21:b7:48:53:21:2a:9f:f0:
2c:54:6e:7b:58:b4:37:42:49:70:bc:6d:32:06:31:
64:d2:ee:dc:9b:04:64:b9:a8:9e:78:c8:14:90:ee:
81:97:d9:34:8c:be:47:3c:f7:4f:30:57:5e:d9:14:
6e:15:5b:60:3f:34:2c:6f:2e:01:2e:ab:00:47:2f:
7d:aa:7b:91:b0:a5:71:6e:46:bd:9d:64:4f:2a:24:
62:a7:17:20:ad:cc:ba:87:01:bd:16:7d:11:52:6e:
40:f3:01:0c:1b:3e:67:ab:d6:2e:ad:1e:45:69:55:
d3:bb:d6:1f:8b:72:25:ef:32:cf:da:b0:f9:83:b2:
b0:44:97:35:e0:4a:ee:06:f2:b4:c9:97:52:1b:88:
32:e4:92:a6:82:21:d1:99:15:23:01:5d:c6:f2:aa:
2f:2b:29:df:4a:c4:9b:94:55:f9:2a:0a:21:9f:e2:
4f:b1:a0:f9:90:b2:81:ff:9c:fb:1f:cc:2f:7d:31:
a8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E3:77:8D:07:FD:56:A7:67:0A:6F:69:B0:9D:0B:A7:C0:77:5E:F3
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ac:6f:91:90:54:89:83:e5:95:09:cf:41:ed:c6:e4:56:35:
4b:91:6e:e3:09:5a:b9:ae:8f:b6:70:d7:5c:fc:f3:d9:2f:72:
83:90:56:e8:1f:f3:ca:83:8b:b4:8b:4b:67:c4:45:63:a4:2c:
83:a8:c5:8c:62:62:fc:d0:4b:49:3e:10:64:70:cb:b8:08:66:
18:85:03:26:1f:56:22:85:e8:a4:50:2e:96:54:95:1f:5f:ba:
08:75:b8:5d:f6:f7:49:15:9d:4b:17:3e:9d:0d:45:4c:97:c6:
3e:c9:8d:bb:15:6e:93:61:2a:8d:62:8f:62:cd:95:e9:02:52:
3d:5a:db:9d:23:c1:e8:f3:36:f4:83:70:59:6f:dc:65:20:2f:
e2:f6:bc:a6:61:b9:01:cb:96:ba:5e:df:9d:18:a9:00:1b:82:
5e:27:f1:40:0c:a2:5a:e6:e7:06:77:27:57:3a:1d:4f:a6:93:
db:0d:87:bd:a3:53:0b:bf:89:aa:4b:29:c8:58:12:82:7b:f4:
5f:b1:c4:c8:7e:68:1c:f4:72:cf:f3:a4:4a:ce:e1:e6:64:a0:
25:7a:68:9f:48:b6:0b:f8:c7:18:9b:9f:00:a1:c7:f1:1b:0d:
02:6c:06:72:53:54:98:9e:30:9e:5c:86:8b:6a:9d:ed:7b:f5:
f0:c1:05:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:03 2026 by rpki-client