Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
File: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json)
Hash identifier: pxxWByrLy+DDACi9XouwwpLR1i5Pvb6sh3uf5HbnjPE=
Subject key identifier: 28:AF:4E:D0:34:5F:31:A4:17:F2:7B:17:27:81:19:92:CB:E1:22:89
Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
Certificate issuer: /CN=0a35575b9947ace25ce87774c82775f18977fd19
Certificate serial: 019D28BB45E399417ABC97C058287E798184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
Manifest number: 1614
Signing time: Thu 26 Mar 2026 06:00:54 +0000
Manifest this update: Thu 26 Mar 2026 06:00:54 +0000
Manifest next update: Fri 27 Mar 2026 06:00:54 +0000
Files and hashes: 1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: Xx2H37ks+Wfp098RkJjSxW/0jk9SyTilyuNZR0GVavw=)
2: Fr5UXfjdMrhEHYQ6Xdia0OdmNWk.roa (hash: 30Ofi4XCsm5vnfPYfxuSwPdN95VWJBJfoWiBcDk1LZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:45:e3:99:41:7a:bc:97:c0:58:28:7e:79:81:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19
Validity
Not Before: Mar 26 06:00:54 2026 GMT
Not After : Mar 27 06:00:54 2026 GMT
Subject: CN=28af4ed0345f31a417f27b1727811992cbe12289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:7a:15:d1:9d:71:f4:db:19:12:be:b1:19:
85:1b:a1:ec:b6:b4:ee:13:c5:ab:bd:3c:37:47:ef:
3c:8a:7f:ef:1b:73:b5:6c:5a:a9:cb:be:61:3c:b6:
11:20:88:a5:8b:f2:09:dc:07:91:6c:5e:89:44:2a:
59:16:1f:32:53:fc:1c:af:f3:8e:60:87:5f:bc:f6:
1c:b8:a7:6a:ad:5e:c7:3f:2f:85:78:75:0e:79:b8:
36:83:de:7b:8f:2d:8d:76:9c:f0:8f:18:d8:93:bd:
a1:52:d8:9b:93:1e:01:72:1e:cb:43:48:1e:a0:3f:
c0:87:8a:9d:74:d9:3d:16:e3:f8:b6:da:23:e9:d8:
79:a7:03:aa:83:e5:2e:b1:f0:4b:c5:3d:65:ed:c6:
57:e0:86:3d:90:2e:c4:e7:29:6b:36:2a:27:72:a4:
b1:7b:66:14:52:94:7e:93:24:6e:96:e7:0e:dc:4f:
70:82:5f:7f:f1:74:1d:d1:a7:0b:10:fb:4b:cd:c2:
18:95:12:0a:5a:aa:15:fe:d5:61:f6:41:ff:97:f4:
cc:05:d1:86:26:95:b7:d1:26:f3:d9:c8:14:70:89:
fc:dc:72:be:1e:7a:56:fd:8d:f0:60:95:e9:8d:e0:
4b:6e:3b:46:e4:e4:e5:16:40:1d:bf:12:55:c2:1a:
81:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AF:4E:D0:34:5F:31:A4:17:F2:7B:17:27:81:19:92:CB:E1:22:89
X509v3 Authority Key Identifier:
keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:94:b7:64:e1:ec:85:98:dd:0a:c9:79:27:70:15:f9:66:83:
12:d3:16:ae:5c:b4:20:43:72:95:eb:b7:79:f4:05:c0:5c:5f:
e3:12:46:a2:42:f5:5f:53:73:eb:97:88:34:cc:ca:5f:4b:34:
06:71:f8:96:f9:4b:02:4c:98:b6:65:86:51:2d:9d:68:76:00:
92:41:07:5c:b1:16:18:47:29:9c:7b:54:4c:98:d3:a6:ae:9a:
b0:1b:f1:8c:36:00:bb:85:d4:aa:92:93:0d:b2:4a:fa:16:bf:
9d:c2:99:e7:cc:27:62:e3:a8:8c:3a:ce:69:ad:85:2a:cc:3e:
8b:84:ac:4f:8a:08:18:65:15:46:f2:bb:e6:9a:1b:c2:8d:52:
67:35:32:a3:47:c9:a5:12:94:04:4d:1d:f2:00:a2:c6:de:1f:
26:e0:f3:d4:87:16:ed:e5:f7:1f:f9:33:24:d3:33:e6:9d:52:
37:c3:f6:58:a0:80:4b:ca:cd:d7:58:0f:b9:e6:21:38:94:cf:
f7:fa:0a:48:14:d7:ee:5e:12:cc:14:b3:98:50:4e:f2:6f:1a:
5b:89:3d:1c:76:4e:47:7f:97:df:da:c2:82:f4:4b:75:a7:d9:
38:af:f9:66:f8:e1:98:c9:d3:7b:b8:6e:e8:01:7e:7a:01:62:
a2:9a:d9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:01:44 2026 by rpki-client