Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
File: cjM1sFB1VK5sbMKUdQdkyv0L1og.mft (raw, json)
Hash identifier: sbP52sdWZJtQP77fSmC7d+e8wCA8yLiKrpFXlb3ncJ4=
Subject key identifier: B7:B9:B2:E7:1D:36:03:AC:58:9E:96:80:75:1A:55:C5:33:BB:9C:F8
Authority key identifier: 72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88
Certificate issuer: /CN=723335b0507554ae6c6cc294750764cafd0bd688
Certificate serial: 01A0D26EAACF89E2C8460EEDF40A7ECEB21C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
Manifest number: 02D7
Signing time: Thu 24 Sep 2026 08:01:02 +0000
Manifest this update: Thu 24 Sep 2026 08:01:02 +0000
Manifest next update: Fri 25 Sep 2026 08:01:02 +0000
Files and hashes: 1: cjM1sFB1VK5sbMKUdQdkyv0L1og.crl (hash: yobjVK4HjY6sc625rOOX02tUj1rvWUFYbkPIZlApmSk=)
2: h1AxusJ0gzCuRYNROBYE_ex13Gw.asa (hash: RqU6DmGS5GS4oIpT5CWEZ1wznv9eazt1xRYLsNLaGg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:aa:cf:89:e2:c8:46:0e:ed:f4:0a:7e:ce:b2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=723335b0507554ae6c6cc294750764cafd0bd688
Validity
Not Before: Sep 24 08:01:02 2026 GMT
Not After : Sep 25 08:01:02 2026 GMT
Subject: CN=b7b9b2e71d3603ac589e9680751a55c533bb9cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:08:29:f8:67:e2:db:df:a4:ab:3c:71:5b:37:
55:34:4c:9c:a5:d0:74:7e:04:4b:63:07:b0:71:4b:
f2:b4:d6:45:36:5d:09:7a:28:d4:e9:65:bb:b2:6a:
69:be:3f:33:86:ba:5d:71:2b:40:90:d0:cb:c8:c0:
4a:59:ad:82:8b:8d:c2:5f:04:c7:20:69:29:00:13:
f7:2e:13:9a:0a:91:3e:cb:90:15:87:b9:09:ca:96:
59:bf:79:b8:4f:08:2e:c7:7e:77:e7:c1:d7:94:ce:
95:f0:53:aa:c1:00:4f:5f:2a:1b:e4:4e:9a:cc:e2:
3f:be:98:18:46:51:99:9f:31:03:71:53:c6:6f:16:
03:2e:9a:9b:75:69:12:f4:3a:0c:b9:cb:dd:97:8d:
b3:a0:dd:a1:37:10:a0:ae:e9:d0:c3:fe:7c:fd:04:
28:ec:07:be:74:da:f2:e6:b7:7c:34:18:aa:3e:5a:
97:74:37:fe:87:4f:b6:e8:74:08:0e:1e:25:98:9e:
2b:c9:de:4f:eb:6c:14:f7:86:3a:f2:57:ee:02:62:
92:9c:60:07:92:85:20:f5:e3:f6:5f:09:b4:1d:3b:
60:90:71:f1:bc:43:17:b4:7e:90:8f:12:4e:1c:bf:
1f:37:42:07:fa:3c:9e:b3:8b:ee:38:42:b9:86:94:
00:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B9:B2:E7:1D:36:03:AC:58:9E:96:80:75:1A:55:C5:33:BB:9C:F8
X509v3 Authority Key Identifier:
keyid:72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:61:a7:81:c5:3f:78:88:fd:f7:26:2e:4f:95:6f:81:70:51:
1f:89:a3:bd:f0:cc:76:e7:ee:d4:6d:a6:e5:64:08:7a:de:2d:
24:55:c2:d3:ea:35:d1:3b:a6:81:41:35:00:b1:91:6b:01:98:
d9:50:0d:d1:7f:5f:63:ac:14:1d:54:9c:1a:77:ca:78:8d:55:
b0:b7:04:91:3b:f4:8c:44:77:16:8f:01:01:f5:75:7b:92:e1:
bb:59:bd:e0:13:2d:b3:bc:0a:b1:07:d4:b7:de:1a:30:25:26:
42:d2:7d:6e:c9:73:3b:83:fc:95:a7:8a:42:f4:ab:37:ff:57:
bf:8a:a6:d1:7d:8d:82:79:8e:d8:7f:8a:8b:40:95:64:10:3d:
c6:d8:f7:77:fd:8c:e6:98:13:69:6e:86:b2:61:54:7c:76:b1:
c0:f2:78:b8:32:ae:cb:1a:dc:59:07:58:94:31:c8:1c:80:88:
c5:03:f3:26:d7:97:aa:b2:7e:a9:55:e2:e8:00:bb:cd:c0:e9:
53:42:0e:f1:d8:57:e9:bb:15:32:af:7c:a6:82:63:be:d5:26:
9e:42:ee:fa:42:6d:65:f3:05:5e:e9:b0:57:5c:cd:9d:8d:ec:
54:d8:18:50:d9:c2:c1:78:1b:b1:f8:0d:a7:bb:20:3e:e5:f6:
97:bc:d7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:24:17 2026 by rpki-client