Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
File: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json)
Hash identifier: 8q+WfJI2L6CkwM7+XHtKNCp4UvQDudVdZ4cbbuyj34A=
Subject key identifier: 07:4B:0F:02:5B:B4:3E:FD:AE:F8:9B:2E:2D:59:A0:2C:FF:F5:AA:A3
Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
Certificate issuer: /CN=0a35575b9947ace25ce87774c82775f18977fd19
Certificate serial: 01A0CF6D580920340C1E1228920A0F0D65A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
Manifest number: 17F8
Signing time: Wed 23 Sep 2026 18:00:44 +0000
Manifest this update: Wed 23 Sep 2026 18:00:44 +0000
Manifest next update: Thu 24 Sep 2026 18:00:44 +0000
Files and hashes: 1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: pIJHsrV2hxv7U7C/fc0wDBo+4nmBjMP2nEzZriimGp8=)
2: Fr5UXfjdMrhEHYQ6Xdia0OdmNWk.roa (hash: 30Ofi4XCsm5vnfPYfxuSwPdN95VWJBJfoWiBcDk1LZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:58:09:20:34:0c:1e:12:28:92:0a:0f:0d:65:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19
Validity
Not Before: Sep 23 18:00:44 2026 GMT
Not After : Sep 24 18:00:44 2026 GMT
Subject: CN=074b0f025bb43efdaef89b2e2d59a02cfff5aaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:80:b9:fa:00:5b:84:2e:b8:90:17:d2:b5:aa:
b8:8c:ab:8e:19:aa:16:5f:03:3d:2a:8e:e8:a7:7d:
f0:3f:5c:31:98:c9:0e:6a:c9:25:83:ec:2b:dd:95:
d8:26:b9:91:29:72:ff:95:33:d0:e1:31:f7:ba:d8:
e2:8b:47:fb:c5:af:1c:57:12:88:0f:5e:97:a9:38:
01:3c:c7:93:e3:13:fb:75:bb:4f:06:06:d1:d3:f6:
f6:dd:a0:d7:35:21:21:42:52:2f:71:92:e3:da:12:
1d:df:bd:76:91:b5:b3:d2:a4:ca:1e:0b:29:90:67:
c9:0e:38:9e:cb:61:2e:4d:ee:94:fc:28:45:78:ed:
97:8a:2c:85:82:0a:86:37:db:d0:a3:62:aa:18:b1:
29:41:25:f5:c1:46:be:61:a0:ca:ed:c4:32:23:ed:
5a:3c:b1:c8:5e:9d:53:e0:b7:71:02:4b:01:b1:5f:
72:23:b5:a0:61:59:8f:8e:56:af:e1:f1:73:c6:08:
bf:66:73:a5:8b:a6:c2:32:4f:82:3b:1d:83:bd:9e:
a2:a0:9d:a8:d1:bb:4a:63:8b:1b:56:dd:0b:7d:85:
68:cd:88:ca:7e:25:03:30:c4:f3:3f:27:12:14:ce:
bd:41:c2:0e:a0:fe:f2:60:d8:a0:37:6c:01:59:b7:
52:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4B:0F:02:5B:B4:3E:FD:AE:F8:9B:2E:2D:59:A0:2C:FF:F5:AA:A3
X509v3 Authority Key Identifier:
keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4e:7c:75:21:a1:d6:36:b5:aa:4f:c0:7e:3b:02:22:6f:04:
07:82:9b:a3:1c:83:cb:7e:95:99:b4:ff:97:8a:1e:17:7b:e1:
4c:e6:7b:ae:c2:ab:77:25:bb:5b:2d:94:ef:3f:51:96:f9:0c:
5d:6a:f4:65:a8:9d:f8:42:ed:ee:f4:f6:79:bb:fa:ee:58:54:
fd:8f:7a:d9:a5:14:da:56:89:ac:b0:48:2f:3e:1f:49:4b:91:
6f:c5:21:28:b4:d8:4d:de:fb:1a:18:9a:f8:d2:4b:44:51:33:
b1:a9:01:90:97:9c:f6:b3:89:8d:80:f0:e0:59:2a:4e:22:09:
25:44:71:b6:c2:17:62:c6:ae:00:5a:e1:33:41:d0:f1:e7:34:
57:75:ea:06:5d:e3:05:91:2c:88:12:e2:25:90:d6:e2:4b:6c:
01:6d:11:2b:a8:fc:49:77:08:0c:a5:f6:ee:1b:78:50:07:f7:
b4:0e:e1:49:4d:58:23:8d:bd:43:a1:f6:ec:fa:62:73:8e:cd:
7e:97:2b:87:71:35:0d:ee:2a:58:8e:8f:da:f6:1b:30:99:fc:
47:8b:2b:b1:06:62:27:c7:fb:ba:1a:7d:0c:a0:3e:6b:c3:74:
67:ce:4d:75:bc:ba:4f:ba:8d:58:9a:d8:dc:23:3c:9b:37:5c:
a7:16:1b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:32:38 2026 by rpki-client