Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
File: CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft (raw, json)
Hash identifier: 5lN8gssBW4/liiS7KGz3OThELU315ZDtYayl39izVOw=
Subject key identifier: D7:94:CC:85:8B:F2:81:41:7A:69:D1:EA:B3:E4:AA:38:00:ED:E1:BE
Authority key identifier: 08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
Certificate issuer: /CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Certificate serial: 01A0D3B8F6FD1578401DFAE55907444090A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
Manifest number: 1A75
Signing time: Thu 24 Sep 2026 14:01:49 +0000
Manifest this update: Thu 24 Sep 2026 14:01:49 +0000
Manifest next update: Fri 25 Sep 2026 14:01:49 +0000
Files and hashes: 1: CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl (hash: lmBYkOsHRe4tGmi68fOVL+JpbTE5v9MWQdDFq9J7QQY=)
2: W-VoV17I_X3lPw0iDUZQHRelxBg.roa (hash: KAR3woHBe4DQ7VMg1DKXsXjsr/10HOtfObZUxwxzNb0=)
3: auvSz2lhlxmICy5UZfYtBa_ZANo.roa (hash: 1QPJodraJ3/LeONbiuOhWdG9AilrgvOVM/bkBbENKmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:f6:fd:15:78:40:1d:fa:e5:59:07:44:40:90:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Validity
Not Before: Sep 24 14:01:49 2026 GMT
Not After : Sep 25 14:01:49 2026 GMT
Subject: CN=d794cc858bf281417a69d1eab3e4aa3800ede1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:9f:f3:fc:c7:36:d4:52:0f:45:7a:ae:b8:
a0:56:f9:d8:8f:f2:51:fe:71:38:5d:44:2c:c3:3a:
fc:a2:bd:82:78:d1:6f:50:45:4b:6a:65:cf:1b:07:
88:49:f8:23:d6:07:cf:8c:f5:c7:38:68:8f:f9:d0:
aa:97:4c:04:77:6c:97:43:2a:27:ed:c8:f9:06:1c:
da:ee:5a:c0:a6:64:45:86:d9:86:7b:09:3e:06:3c:
c2:74:d9:fa:d3:33:95:ce:b8:80:f6:46:df:3e:18:
be:d1:b9:f1:e8:13:79:58:91:09:78:5c:20:a9:7a:
86:94:12:97:54:23:94:4e:3f:1f:59:05:ed:4d:79:
5f:48:a0:c6:20:5a:1a:28:48:15:1e:53:be:98:7c:
51:ff:06:30:3a:7c:94:81:36:46:34:47:c3:8b:78:
ae:36:d3:c7:46:93:bd:09:77:cf:19:6a:ba:6d:78:
68:e3:66:58:94:36:a9:51:3f:e3:35:51:85:6a:cc:
e1:82:0f:f6:89:77:ee:94:e9:79:37:bf:a3:df:d2:
dd:fb:c5:de:57:2d:79:28:08:67:78:1e:c7:d0:be:
57:58:c3:74:96:e7:db:18:53:90:d9:d9:74:fd:ce:
cc:ce:5c:c8:0d:45:bb:f3:32:f5:d2:b8:1b:21:a9:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:94:CC:85:8B:F2:81:41:7A:69:D1:EA:B3:E4:AA:38:00:ED:E1:BE
X509v3 Authority Key Identifier:
keyid:08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:03:7a:b1:f6:bb:18:2d:48:b7:78:c3:d5:40:32:56:39:3b:
95:d1:13:c6:42:b5:f8:5f:b6:9e:dc:d7:1b:50:e7:e0:8c:40:
f5:1b:70:28:71:87:a0:66:7b:14:6b:98:3c:bf:60:8e:b5:79:
4f:c4:ee:4e:d7:cf:9d:2f:31:36:04:7e:1c:ba:f6:60:42:c6:
50:34:08:ae:75:b1:ad:05:36:00:db:25:e1:ea:88:1b:90:12:
b0:08:4c:0c:d4:95:d3:90:64:81:a2:39:fc:16:ae:f1:be:5a:
5a:e0:81:1a:b6:6a:97:49:7f:e2:86:e3:38:3f:29:c5:a3:43:
ee:ee:7e:1f:02:c8:b3:a0:0a:ea:5e:ef:74:e5:3f:82:ea:95:
50:00:d5:0b:9c:f0:67:bf:1e:75:a5:be:9f:ee:99:d0:c4:88:
13:6b:60:38:d1:3e:34:9a:a0:e1:6f:e7:32:f3:8d:22:1f:64:
61:e3:0b:16:c9:a4:42:a9:4b:a9:46:24:19:99:61:74:e8:ee:
ae:0f:b9:70:58:92:47:7c:18:16:d8:1b:b7:98:38:a8:b7:aa:
bd:f2:58:2b:14:26:49:f3:3d:10:68:02:4e:f6:74:29:47:a9:
9f:30:68:ee:86:a6:55:b4:2f:a7:87:5a:35:b2:de:74:f4:d3:
21:cb:a1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:19:43 2026 by rpki-client