Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
File: CNJ4u-X8LfcyAyzbI1li26vg9kE.mft (raw, json)
Hash identifier: kA3Vnd0dSqFto2w0/L8gPrI0wJg7rzXOzg+kue/gFN8=
Subject key identifier: 9B:3A:F0:AD:10:3B:54:BB:50:61:87:7F:81:3A:16:33:F2:34:67:06
Authority key identifier: 08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
Certificate issuer: /CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Certificate serial: 019E1C474828833083D5B6E77978B03FA9B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 13:01:33 +0000
Manifest this update: Tue 12 May 2026 13:01:33 +0000
Manifest next update: Wed 13 May 2026 13:01:33 +0000
Files and hashes: 1: CNJ4u-X8LfcyAyzbI1li26vg9kE.crl (hash: Td/pi6IyQkGErcZXFfpmcxO6XqSfG9mYIWWHX+3xMtA=)
2: cqRNRYld8xc0CoCi2GIRdSN1pec.roa (hash: UvIZReHdG2/zwr7aSyXObjS9yFZjBI/EHczHCt3scrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:48:28:83:30:83:d5:b6:e7:79:78:b0:3f:a9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Validity
Not Before: May 12 13:01:33 2026 GMT
Not After : May 13 13:01:33 2026 GMT
Subject: CN=9b3af0ad103b54bb5061877f813a1633f2346706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:3d:7e:6e:f2:c7:4b:a0:0c:81:20:b9:c9:
b1:13:49:bc:6f:7f:b1:f7:d4:e9:78:33:88:90:64:
46:e8:5c:e0:67:d3:b4:25:ea:39:3f:ba:13:85:15:
1d:56:fc:8e:52:41:c7:8b:5c:99:9a:24:e4:77:cc:
75:6c:d6:de:f4:78:eb:8d:88:95:35:3b:72:1c:9e:
ab:71:10:66:00:fa:97:c9:01:e9:4f:d9:85:60:38:
6a:d4:46:54:58:74:59:19:c2:07:a5:61:30:f0:12:
53:0b:e1:1b:22:f5:0b:fa:d7:06:4d:16:99:a2:0a:
0b:4d:6d:38:f2:0a:20:6a:dd:da:8d:8f:b4:b1:11:
ea:14:f3:86:a1:5e:b3:3a:0f:7a:8c:72:33:a0:34:
b7:e2:be:33:0c:b9:b3:6e:e3:84:e4:c0:77:e6:b1:
6e:e7:12:25:ed:ae:bc:36:c7:80:9e:09:15:d1:f3:
94:69:ac:7e:2a:b4:77:a9:37:37:c1:36:aa:b7:8e:
67:48:74:b3:21:a9:dd:a5:f6:f0:21:5a:3a:18:4d:
9b:91:66:78:cb:03:99:51:23:b4:6c:fd:ec:eb:69:
9b:6d:39:19:1e:09:14:4a:a9:49:f3:5a:fe:4a:8e:
44:67:51:d4:e3:d6:a1:65:6e:27:8e:d7:d8:0d:e2:
53:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3A:F0:AD:10:3B:54:BB:50:61:87:7F:81:3A:16:33:F2:34:67:06
X509v3 Authority Key Identifier:
keyid:08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5d:8d:46:89:4f:b3:d8:3e:04:55:a2:de:ce:f7:d6:fd:18:
cd:f3:56:87:86:18:d0:e8:cc:f7:df:f1:26:9f:cc:dc:20:b2:
e5:be:50:3f:70:e5:fa:35:04:da:c4:26:67:a8:c2:74:56:7f:
de:eb:a0:03:58:73:3d:84:bd:49:b3:13:26:9b:6b:39:1e:b6:
e4:af:5b:9e:5b:99:b6:0e:b9:32:4e:d2:ac:47:5f:69:64:c3:
1e:c1:4c:47:2d:c9:81:41:80:a0:58:f3:b4:89:aa:57:0e:52:
c1:50:e5:a9:c1:32:7f:f4:01:58:a0:63:e6:2c:e3:36:1e:a2:
f5:b9:d5:fe:98:8d:58:08:f2:30:a3:28:e1:a0:c6:a1:bc:49:
44:96:c5:ec:b4:8e:f0:8f:5b:9a:86:c1:1c:fc:a8:6e:52:fa:
37:9d:c4:82:16:6c:81:1d:37:52:a2:55:c8:b2:ac:fd:a5:79:
03:c1:78:88:95:0d:22:32:57:dc:5e:a6:90:67:88:97:ff:f3:
45:1d:9e:7f:70:9a:76:a2:82:37:17:39:8b:fb:d4:d1:24:19:
bf:79:ea:cc:e7:80:29:a1:c5:85:15:43:47:f7:46:e5:13:0e:
38:9b:34:36:6b:20:49:cd:ba:7b:86:43:5c:46:b3:78:88:ff:
6a:af:5c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:01 2026 by rpki-client