Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
File: cjM1sFB1VK5sbMKUdQdkyv0L1og.mft (raw, json)
Hash identifier: eYhn8A/LcCdeqBTJurlkt9+1uWSW8/k+mEVAe5r9HMU=
Subject key identifier: 70:E3:C9:26:F1:E8:AA:E9:01:D0:5C:B9:81:29:B3:F4:56:78:19:B2
Authority key identifier: 72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88
Certificate issuer: /CN=723335b0507554ae6c6cc294750764cafd0bd688
Certificate serial: 019E1BD92606AC42C495F54D027FF348967F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
Manifest number: 016D
Signing time: Tue 12 May 2026 11:01:16 +0000
Manifest this update: Tue 12 May 2026 11:01:16 +0000
Manifest next update: Wed 13 May 2026 11:01:16 +0000
Files and hashes: 1: cjM1sFB1VK5sbMKUdQdkyv0L1og.crl (hash: pUdp/vqqCB9n5ep2m2m73smO84HIfrJh00CrfGcWaWQ=)
2: cwaVlyUcrRob1yQGfrzbyd4SXY8.asa (hash: hxp7g2uf5EIcMdBETFCVoZR6vdDL2LqgNsCC4ZPPusU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:26:06:ac:42:c4:95:f5:4d:02:7f:f3:48:96:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=723335b0507554ae6c6cc294750764cafd0bd688
Validity
Not Before: May 12 11:01:16 2026 GMT
Not After : May 13 11:01:16 2026 GMT
Subject: CN=70e3c926f1e8aae901d05cb98129b3f4567819b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:be:6f:e3:85:b7:c8:b7:02:61:aa:d5:e6:
16:5c:5d:47:65:12:ef:66:c5:16:5c:ce:b4:ba:09:
8c:f3:71:53:6f:ca:31:45:dc:fd:f7:de:26:31:66:
f5:ba:1b:ca:50:51:01:56:aa:04:58:15:67:78:bc:
8e:17:3c:23:cd:73:74:df:dd:51:e8:1a:0d:18:ce:
34:c6:52:d2:73:99:6d:d4:b2:04:70:10:bf:9f:5b:
df:d2:8b:88:e0:fc:b7:01:4c:4f:d3:db:b7:97:ec:
f6:5d:68:28:f7:38:93:0b:30:f1:c6:72:2e:5f:7d:
f0:55:73:61:c2:ed:b7:5d:fc:ae:fb:6b:5f:2a:ec:
ff:7b:ae:3a:71:5e:6c:d6:84:df:e1:c7:a5:d2:dc:
c5:0f:dd:cb:9e:f2:67:4e:b8:84:41:f7:8c:f3:19:
12:b4:a9:d3:71:12:4e:3e:91:54:24:16:d2:7b:d1:
d2:3c:ea:cb:d5:76:e0:dc:94:22:3f:38:c5:19:ab:
18:39:d2:c1:92:ab:7e:56:c9:1e:be:bb:63:0d:8e:
2b:c0:79:7d:bd:cf:9f:d2:6c:e0:a9:2a:d3:89:0b:
06:26:62:ed:9f:f2:c8:43:aa:9d:de:a0:dc:1a:ee:
bd:dd:2c:cb:3b:43:62:d7:a2:4f:ae:66:15:1a:ba:
6a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E3:C9:26:F1:E8:AA:E9:01:D0:5C:B9:81:29:B3:F4:56:78:19:B2
X509v3 Authority Key Identifier:
keyid:72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e9:0e:04:a4:2f:06:ff:30:3c:7a:ba:67:87:8f:7c:ea:1e:
d4:7c:f6:3f:14:ac:ce:52:53:ee:1d:98:f6:1d:1a:b7:5a:21:
df:f7:c7:47:b7:a8:ee:d9:fd:62:10:ab:de:a1:b7:73:95:46:
82:91:c2:c6:1e:27:77:e3:1f:18:ab:4e:70:fc:13:ab:25:49:
76:4c:01:4c:1b:76:a8:e2:b8:d4:0f:ba:18:71:a8:f2:c9:2b:
3b:1c:5a:0b:47:95:35:9f:49:c8:07:73:11:de:df:38:5d:60:
26:08:55:94:f0:2e:82:f1:c9:cf:94:58:e5:1a:ea:9c:68:ad:
0d:dc:c8:71:61:8b:7f:6c:b8:a8:12:5a:1e:c5:e8:88:23:ce:
61:fc:09:1a:27:36:7b:c3:fd:13:45:46:c2:98:78:71:e7:f0:
ff:0c:60:4a:02:bd:ca:71:c1:47:54:2d:5c:44:df:4c:3c:07:
ab:07:32:41:00:c3:fc:2d:e6:e2:f0:33:7e:72:ee:02:1e:72:
b0:a1:96:3c:84:97:db:9d:c0:dd:83:20:94:04:cd:6f:fd:c2:
35:77:95:ec:96:07:ff:7d:81:3e:10:89:c1:99:4c:07:ef:57:
0f:82:b4:bb:2a:97:a5:56:9f:27:70:6d:5c:3c:8c:01:de:0c:
d2:87:df:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:36:54 2026 by rpki-client