Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
File: cjM1sFB1VK5sbMKUdQdkyv0L1og.mft (raw, json)
Hash identifier: W8g87dl5qe1EWyDkL8T0Xzogv0FRjdazRI8zN6Mu9Eo=
Subject key identifier: F2:19:92:99:A0:19:0D:B2:69:96:78:B1:DA:53:E6:B6:B0:55:E7:17
Authority key identifier: 72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88
Certificate issuer: /CN=723335b0507554ae6c6cc294750764cafd0bd688
Certificate serial: 019D24A7A00FD79DB2C35D5DB7B68B804E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
Manifest number: ED
Signing time: Wed 25 Mar 2026 11:00:58 +0000
Manifest this update: Wed 25 Mar 2026 11:00:58 +0000
Manifest next update: Thu 26 Mar 2026 11:00:58 +0000
Files and hashes: 1: cjM1sFB1VK5sbMKUdQdkyv0L1og.crl (hash: DrZs4LQBSGvkTXnLuVnIyLPCaHPYAXODOS6Jt7yulxI=)
2: cwaVlyUcrRob1yQGfrzbyd4SXY8.asa (hash: hxp7g2uf5EIcMdBETFCVoZR6vdDL2LqgNsCC4ZPPusU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:a7:a0:0f:d7:9d:b2:c3:5d:5d:b7:b6:8b:80:4e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=723335b0507554ae6c6cc294750764cafd0bd688
Validity
Not Before: Mar 25 11:00:58 2026 GMT
Not After : Mar 26 11:00:58 2026 GMT
Subject: CN=f2199299a0190db2699678b1da53e6b6b055e717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:7a:36:96:a0:f1:5e:ec:01:4b:f1:71:37:
bd:b2:45:27:d0:b6:00:98:f0:5e:c3:25:6c:af:4e:
e5:8d:90:c1:d8:63:27:37:41:58:b6:59:13:79:cb:
1a:72:e1:65:e4:e0:3c:d0:a5:1b:9f:c2:50:54:7a:
1d:d2:f9:5b:1b:01:7d:37:f4:f5:2a:30:48:0a:bb:
12:0f:53:d5:7c:40:f1:33:09:b5:e6:38:1a:f1:73:
78:e8:e8:cc:a8:20:7e:2e:5f:04:93:9f:dd:0e:29:
e4:54:53:44:94:49:56:f0:b6:a5:21:06:eb:be:c7:
8d:83:dd:22:1b:0f:7d:27:f9:70:dc:27:71:8e:4b:
fd:c5:a4:ad:76:3e:f5:7d:67:4e:75:d3:db:8d:61:
1a:1b:7c:d8:47:db:24:c3:84:50:ae:b7:04:47:ba:
06:3e:73:b7:17:46:0a:f8:3f:80:cc:6d:1d:75:11:
bc:04:a9:4b:17:6f:36:50:21:ce:6b:bf:39:61:0a:
e4:0a:56:24:d0:71:e6:f5:e6:d2:bb:2b:de:19:d5:
1b:38:3b:e2:3e:07:2c:2f:b9:1e:38:70:26:85:a3:
f8:cb:69:f9:e9:4d:77:05:67:5c:7b:6b:85:04:c8:
77:5d:71:97:1d:bd:f8:d6:f4:01:7e:f6:6b:a8:e9:
e6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:19:92:99:A0:19:0D:B2:69:96:78:B1:DA:53:E6:B6:B0:55:E7:17
X509v3 Authority Key Identifier:
keyid:72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:d0:db:7e:7c:62:d8:16:0b:19:ff:20:29:ee:7d:ab:d8:2d:
63:1d:36:ff:00:f3:8a:8c:b3:67:08:a8:d6:11:54:84:ab:24:
cf:db:56:e2:6e:c7:b5:22:f2:bf:db:d1:70:81:e2:3c:fd:52:
8a:77:19:39:eb:22:da:db:a7:06:a6:70:f1:ed:2a:47:84:ba:
f3:c4:5f:15:78:38:e2:be:22:6e:d8:3c:af:5f:38:0d:56:67:
27:70:f2:06:11:ae:ee:ab:68:e4:5d:88:f8:57:5e:14:e2:e5:
58:24:12:5c:89:86:7a:c4:95:b4:f2:70:74:52:5d:53:7c:73:
1c:da:8f:cd:34:34:56:f6:80:9f:31:bc:77:e5:a3:4f:09:f3:
b2:de:33:64:06:90:9d:67:c4:ae:2b:9d:22:d0:0a:fd:89:66:
6e:33:37:2c:16:06:49:92:63:cc:d7:1a:80:c0:ee:51:94:a1:
00:3e:90:77:96:1c:1b:b9:7b:00:20:0b:0e:b7:f5:d0:51:f1:
cf:32:a2:04:49:65:bd:aa:81:b1:a0:04:7d:22:e8:1b:5b:3e:
04:78:d1:2a:23:d5:af:81:2d:4c:41:6e:bc:03:fa:16:e6:0c:
57:47:ef:94:81:4e:f2:17:a8:34:1b:ed:69:c3:85:17:a9:dd:
f7:c1:9a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:24:45 2026 by rpki-client