Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
File: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json)
Hash identifier: KKCl6x+AXW5pzzSSKz8QDW7Qe1QhEMewRfBNNlYo/mc=
Subject key identifier: 84:00:66:BF:29:51:91:09:FD:65:DE:CB:7F:38:13:B7:4F:F0:95:2F
Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
Certificate issuer: /CN=0a35575b9947ace25ce87774c82775f18977fd19
Certificate serial: 019E1C0F8D485D1621ACC8DCF8E06C9D7A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
Manifest number: 1692
Signing time: Tue 12 May 2026 12:00:41 +0000
Manifest this update: Tue 12 May 2026 12:00:41 +0000
Manifest next update: Wed 13 May 2026 12:00:41 +0000
Files and hashes: 1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: yjmpbx1TsiAN2VqPN7wPqv4TE2HhqaUzkqJr6/XyVdw=)
2: Fr5UXfjdMrhEHYQ6Xdia0OdmNWk.roa (hash: 30Ofi4XCsm5vnfPYfxuSwPdN95VWJBJfoWiBcDk1LZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:8d:48:5d:16:21:ac:c8:dc:f8:e0:6c:9d:7a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19
Validity
Not Before: May 12 12:00:41 2026 GMT
Not After : May 13 12:00:41 2026 GMT
Subject: CN=840066bf29519109fd65decb7f3813b74ff0952f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b3:31:df:17:72:48:70:46:6f:27:9d:5a:72:
49:93:d2:ab:8c:97:35:30:45:4e:9d:c0:79:21:b0:
2e:4d:de:6e:b6:74:89:0a:3d:a9:19:77:ab:6e:32:
6f:ca:0a:0a:e5:12:7b:18:11:da:97:d9:24:79:28:
e0:b4:57:c4:ee:80:bd:d2:2a:e4:51:66:80:7f:86:
c1:19:ca:f7:a3:2f:da:fe:24:6b:aa:f8:92:87:00:
18:de:28:2a:c7:25:ef:10:6e:05:c7:0c:c0:1d:2e:
8e:5d:a7:ca:d1:68:43:00:6e:69:c9:48:4a:68:67:
1c:dd:9a:02:1d:2b:92:f1:c7:bd:e5:2e:af:64:47:
98:d0:61:c6:17:0f:d0:70:8c:cc:59:5a:88:98:6e:
4b:70:d1:46:9e:b7:49:5a:0e:76:38:63:47:0a:20:
d3:a7:f5:c2:08:93:a5:d2:01:13:0a:ea:f5:3a:ea:
6f:08:69:db:0a:68:17:e9:96:f5:76:1c:39:1a:e9:
84:95:0c:d2:f0:f4:84:07:ee:3d:17:75:27:c9:bd:
bc:10:d0:33:ea:0d:bd:19:7f:6f:d6:4c:db:83:87:
5b:67:cf:19:3e:5c:10:c1:22:47:12:e3:9f:6d:60:
a2:a2:35:54:78:76:c4:ff:e3:68:a8:04:b8:ff:be:
d1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:00:66:BF:29:51:91:09:FD:65:DE:CB:7F:38:13:B7:4F:F0:95:2F
X509v3 Authority Key Identifier:
keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:93:c0:8d:35:e9:ca:43:e4:25:1b:a1:c4:74:ee:0e:4f:00:
bb:05:26:d7:48:b3:82:87:c6:7d:7b:7b:64:cb:b5:d4:5e:e3:
35:e5:4c:97:70:9d:fd:a2:bd:97:8a:76:01:c0:78:28:77:0a:
78:d6:82:3a:22:88:f2:01:da:71:50:1c:e1:fd:b0:da:b2:f1:
1c:23:e3:82:20:49:8c:64:2b:87:ef:2c:36:ec:9d:f7:c3:17:
39:54:6c:f3:f8:0c:5b:67:f0:84:09:4d:88:f3:7b:7f:0a:f4:
85:70:fa:e6:a4:bf:86:e4:5b:73:ce:e9:0f:8c:20:75:96:9c:
b6:cf:47:a6:3d:77:a7:d2:e3:3c:49:00:6a:ce:82:8b:2f:a2:
b4:96:2e:fb:f9:c4:59:48:4e:1a:81:ad:7a:2c:88:e7:49:12:
d0:ae:25:c0:69:36:30:b7:0e:7a:19:34:dc:67:3e:4a:4d:09:
6c:0d:7b:b6:dd:9e:d9:8f:e6:ee:cc:66:aa:b5:c2:eb:02:b9:
5a:a7:8b:e1:d1:49:a5:4c:4a:bf:ee:ef:37:a1:bb:df:bd:fc:
6e:e0:90:29:d5:d0:25:28:8f:b9:ad:0d:03:c6:d0:1d:82:7b:
c0:25:2b:a6:97:64:65:bf:fe:13:52:39:c8:e7:89:84:a0:1f:
c5:c9:5f:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cD41IXRYhrMjc+OBsnXqHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzU1NzViOTk0N2FjZTI1Y2U4Nzc3NGM4Mjc3NWYxODk3
N2ZkMTkwHhcNMjYwNTEyMTIwMDQxWhcNMjYwNTEzMTIwMDQxWjAzMTEwLwYDVQQD
Eyg4NDAwNjZiZjI5NTE5MTA5ZmQ2NWRlY2I3ZjM4MTNiNzRmZjA5NTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LMx3xdySHBGbyedWnJJk9KrjJc1
MEVOncB5IbAuTd5utnSJCj2pGXerbjJvygoK5RJ7GBHal9kkeSjgtFfE7oC90irk
UWaAf4bBGcr3oy/a/iRrqviShwAY3igqxyXvEG4FxwzAHS6OXafK0WhDAG5pyUhK
aGcc3ZoCHSuS8ce95S6vZEeY0GHGFw/QcIzMWVqImG5LcNFGnrdJWg52OGNHCiDT
p/XCCJOl0gETCur1OupvCGnbCmgX6Zb1dhw5GumElQzS8PSEB+49F3Unyb28ENAz
6g29GX9v1kzbg4dbZ88ZPlwQwSJHEuOfbWCiojVUeHbE/+NoqAS4/77RlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQAZr8pUZEJ/WXey384E7dP8JUvMB8GA1UdIwQY
MBaAFAo1V1uZR6ziXOh3dMgndfGJd/0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wZjJkYTktZjNkNS00YWI0LWJhYmUt
NzlkOTFlZjgyN2NlLzEvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wZjJkYTktZjNkNS00YWI0LWJhYmUtNzlkOTFlZjgyN2Nl
LzEvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJPAjTXp
ykPkJRuhxHTuDk8AuwUm10izgofGfXt7ZMu11F7jNeVMl3Cd/aK9l4p2AcB4KHcK
eNaCOiKI8gHacVAc4f2w2rLxHCPjgiBJjGQrh+8sNuyd98MXOVRs8/gMW2fwhAlN
iPN7fwr0hXD65qS/huRbc87pD4wgdZacts9Hpj13p9LjPEkAas6Ciy+itJYu+/nE
WUhOGoGteiyI50kS0K4lwGk2MLcOehk03Gc+Sk0JbA17tt2e2Y/m7sxmqrXC6wK5
WqeL4dFJpUxKv+7vN6G73738buCQKdXQJSiPua0NA8bQHYJ7wCUrppdkZb/+E1I5
yOeJhKAfxclfHw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:29:43 2026 by rpki-client