Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
File: CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft (raw, json)
Hash identifier: zfQBvAmIwIuRZ0IhFkpADv6MIDsA/QYVoQoiqb2rcPY=
Subject key identifier: 34:69:D6:81:37:03:44:A6:A7:92:90:1B:D8:F6:4D:FC:A0:6B:2A:78
Authority key identifier: 08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
Certificate issuer: /CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Certificate serial: 019F93244A8E160C27F28B30E9F5104694EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
Manifest number: 19CF
Signing time: Fri 24 Jul 2026 08:00:56 +0000
Manifest this update: Fri 24 Jul 2026 08:00:56 +0000
Manifest next update: Sat 25 Jul 2026 08:00:56 +0000
Files and hashes: 1: CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl (hash: WlF9abRWqGvWCoZ5tQVAV90fNkooN9iWk5lvY+RXm48=)
2: W-VoV17I_X3lPw0iDUZQHRelxBg.roa (hash: KAR3woHBe4DQ7VMg1DKXsXjsr/10HOtfObZUxwxzNb0=)
3: auvSz2lhlxmICy5UZfYtBa_ZANo.roa (hash: 1QPJodraJ3/LeONbiuOhWdG9AilrgvOVM/bkBbENKmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:4a:8e:16:0c:27:f2:8b:30:e9:f5:10:46:94:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Validity
Not Before: Jul 24 08:00:56 2026 GMT
Not After : Jul 25 08:00:56 2026 GMT
Subject: CN=3469d681370344a6a792901bd8f64dfca06b2a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:3b:9b:ca:d1:25:ba:df:83:bc:e3:9a:25:
a8:9f:f5:22:5b:60:e1:45:1d:db:b2:9a:8c:ac:81:
1c:68:c8:87:5b:bb:da:7c:cd:5a:fe:bf:d6:3b:f3:
e7:b8:51:86:aa:ef:2b:91:00:f0:8b:78:7a:8f:62:
9e:83:7a:06:91:3e:7f:72:10:f5:78:d3:c3:da:2b:
15:7b:1f:5c:4e:76:50:bd:56:47:89:bb:58:e7:3d:
ac:83:ed:27:91:42:25:ce:2a:69:26:3c:24:32:9d:
75:20:f0:40:5e:9f:63:36:43:7d:81:e8:88:01:7d:
ec:bf:6d:80:d4:07:17:bf:85:f3:d9:c2:34:20:b5:
58:d2:97:46:17:5a:7e:a0:c3:b1:0f:77:46:1d:9f:
7b:74:f1:c9:17:32:7c:2d:36:09:fc:15:d4:03:a7:
ed:e4:a6:8d:bd:4d:31:f6:6e:98:30:d6:2a:56:85:
5b:0f:10:b4:31:45:75:3c:4c:b9:59:27:0b:5b:56:
1e:27:0c:b0:67:11:ad:f5:55:e3:71:f9:f0:89:4e:
bc:ee:92:82:f9:cb:17:0b:d5:51:21:f9:ea:dd:78:
33:c8:d8:66:10:5c:18:5a:fb:2d:3c:f0:24:b5:83:
ca:f4:9e:80:24:d9:2b:71:6b:43:56:99:c5:78:a5:
1d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:69:D6:81:37:03:44:A6:A7:92:90:1B:D8:F6:4D:FC:A0:6B:2A:78
X509v3 Authority Key Identifier:
keyid:08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0a:fc:b7:37:f3:63:bf:50:8e:6d:b1:64:0f:df:d1:47:7d:
fb:6d:93:89:fe:f9:f5:2a:e2:cc:84:fd:ad:f1:5b:f1:d4:51:
e6:cb:e9:c8:aa:e2:3a:2e:eb:55:52:59:5c:02:09:a7:e4:9d:
df:f3:3c:e7:4b:7c:05:43:97:23:6e:12:35:78:75:dc:85:83:
9b:b3:86:03:c0:4e:63:9f:a7:c2:8f:a9:6b:96:6f:4f:0b:e6:
3e:25:ed:54:e6:06:31:f9:30:4a:e7:e7:d5:8a:a6:f8:7b:19:
d0:b2:d7:de:51:be:3d:9f:c0:48:25:8b:0f:03:a8:21:02:cb:
0c:06:ba:56:60:20:1f:b3:2e:9d:c5:e1:d0:64:62:d1:90:a3:
be:42:09:6a:d8:9a:64:15:bb:f3:25:5b:d9:e0:8e:35:93:5b:
ae:08:5b:62:68:7c:79:02:63:38:4f:6b:1d:d4:3e:96:fc:d7:
3d:13:71:9e:5f:3b:40:5b:58:6f:5e:2f:f1:7b:b8:55:07:59:
bf:40:f5:ea:db:a3:c2:24:34:32:51:7c:c5:8f:cf:53:a6:df:
cb:3a:9d:43:29:e3:8a:4e:ac:5d:3c:f4:7f:40:80:10:0f:de:
34:a5:58:9b:39:50:18:7c:e2:0a:fd:2c:51:08:f5:dd:d6:7a:
8b:90:71:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:56:16 2026 by rpki-client