Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
File: CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft (raw, json)
Hash identifier: 19Rq/TEvyk1LQy4+UtZngkbXlnarMNjTtjgVCqieIQE=
Subject key identifier: C0:1F:B2:C0:04:A6:34:92:DB:90:61:4C:3B:DF:25:4C:CF:EC:5A:09
Authority key identifier: 08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
Certificate issuer: /CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Certificate serial: 019F913565D9B397FFA41A9B7AA91B5B327B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
Manifest number: 19CE
Signing time: Thu 23 Jul 2026 23:00:23 +0000
Manifest this update: Thu 23 Jul 2026 23:00:23 +0000
Manifest next update: Fri 24 Jul 2026 23:00:23 +0000
Files and hashes: 1: CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl (hash: Un1riliZ0FiGTgVzP8fS6XbQ78gAeJz+U5FXVYA6rUQ=)
2: W-VoV17I_X3lPw0iDUZQHRelxBg.roa (hash: KAR3woHBe4DQ7VMg1DKXsXjsr/10HOtfObZUxwxzNb0=)
3: auvSz2lhlxmICy5UZfYtBa_ZANo.roa (hash: 1QPJodraJ3/LeONbiuOhWdG9AilrgvOVM/bkBbENKmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:65:d9:b3:97:ff:a4:1a:9b:7a:a9:1b:5b:32:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Validity
Not Before: Jul 23 23:00:23 2026 GMT
Not After : Jul 24 23:00:23 2026 GMT
Subject: CN=c01fb2c004a63492db90614c3bdf254ccfec5a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:3d:74:ed:98:1b:f8:f8:bc:de:0b:d2:ed:
f5:30:30:e3:cd:19:48:67:58:9b:ef:05:6e:a1:2b:
bf:b7:41:57:dc:62:ad:36:2e:7e:34:39:cb:66:c5:
2d:95:d0:ce:98:c8:09:1d:1c:8f:82:f2:e6:22:7c:
06:f3:88:46:9a:fb:79:81:0b:a0:68:6a:56:7b:40:
60:72:bf:80:f2:67:76:1f:70:42:c2:ce:d8:35:6d:
fc:6d:72:84:07:9a:e6:a7:59:7d:90:db:fd:13:3f:
c4:9c:cf:73:6b:d1:9b:d4:23:76:5a:e1:a1:77:6f:
e6:db:83:2c:58:2b:0f:1a:f0:5f:76:27:60:93:d6:
4e:7a:3a:c6:c9:ac:ec:4f:8f:77:35:08:95:68:82:
46:06:50:0f:4c:68:fd:94:7a:ab:95:3f:aa:e6:0f:
53:4b:34:f2:76:ba:8b:8b:ba:ba:92:37:4a:08:0b:
78:24:45:ba:cd:01:57:a6:fa:c4:36:fe:82:46:3a:
c4:93:87:05:47:68:fb:ee:c7:09:d5:4e:4e:f9:49:
f2:f8:9b:86:cd:08:c4:ff:6c:b8:f1:d3:bb:37:25:
4f:28:fa:d2:61:eb:19:29:bb:25:67:7f:4e:30:e5:
b2:b4:f5:3b:77:f4:51:f7:c7:87:04:b1:70:f6:df:
13:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1F:B2:C0:04:A6:34:92:DB:90:61:4C:3B:DF:25:4C:CF:EC:5A:09
X509v3 Authority Key Identifier:
keyid:08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:df:92:1d:88:72:83:0c:60:74:a4:5d:5d:ba:8f:f4:72:96:
0d:dd:15:46:2c:c2:bd:66:9c:2d:e5:60:c7:f3:15:ae:4c:df:
c3:15:c6:5d:80:e4:6c:56:51:e1:32:72:f3:64:43:56:35:91:
da:13:ec:eb:8f:51:fc:0a:1a:21:79:2c:04:33:37:fd:57:d6:
50:b7:a9:28:74:a5:6a:c7:f0:c7:ee:68:b5:36:e5:19:e6:af:
2d:f9:76:c7:db:5f:53:e0:78:79:a3:92:ba:75:38:b2:bd:ad:
11:11:c5:ca:16:c2:3c:29:f7:fc:4b:8c:a5:38:0b:8c:cf:8a:
3b:94:81:11:c5:f9:0e:97:0c:66:a8:b7:6d:fb:68:4e:75:c0:
ee:42:92:60:8d:02:42:8b:61:97:5b:93:2e:36:b6:f5:9f:58:
cb:27:0d:2d:c2:91:08:f4:0e:13:b4:1e:8a:b5:ce:d7:8a:dc:
63:67:c8:4b:fe:78:eb:7f:22:30:2f:5c:0f:0b:8a:f2:b6:44:
a8:d7:7a:1a:fa:59:e2:da:88:ab:26:1b:0f:74:14:6f:b5:ea:
43:ba:8b:e4:59:08:97:af:2b:9d:dd:75:7c:e3:77:75:b0:bc:
10:fc:ec:a7:43:60:a3:40:6f:7d:b4:a6:a8:fe:9b:03:27:55:
42:1b:aa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:15:31 2026 by rpki-client