Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
File: CNJ4u-X8LfcyAyzbI1li26vg9kE.mft (raw, json)
Hash identifier: THfhfGg0Yub8bX04qgKEzVFdDWsE46H0yoOAcANjBDM=
Subject key identifier: 8F:97:D8:3F:6A:4A:31:1C:1D:41:BE:1E:31:6B:13:4D:CB:35:46:B6
Authority key identifier: 08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
Certificate issuer: /CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Certificate serial: 01A0D5704F199BBBA9EB1593C00F9374853A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 22:01:42 +0000
Manifest this update: Thu 24 Sep 2026 22:01:42 +0000
Manifest next update: Fri 25 Sep 2026 22:01:42 +0000
Files and hashes: 1: CNJ4u-X8LfcyAyzbI1li26vg9kE.crl (hash: yhRtPvKW8vP7AxQWjgQOM0bKci0H3kQaIhB41C+IRP8=)
2: cqRNRYld8xc0CoCi2GIRdSN1pec.roa (hash: UvIZReHdG2/zwr7aSyXObjS9yFZjBI/EHczHCt3scrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:4f:19:9b:bb:a9:eb:15:93:c0:0f:93:74:85:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Validity
Not Before: Sep 24 22:01:42 2026 GMT
Not After : Sep 25 22:01:42 2026 GMT
Subject: CN=8f97d83f6a4a311c1d41be1e316b134dcb3546b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:36:31:b1:21:3e:8f:33:24:e2:b3:09:ce:
c4:9b:e1:a4:ce:4d:e9:40:4d:dd:22:64:d7:2a:51:
0c:bb:ab:a1:9b:22:e4:95:f3:61:97:ee:49:86:94:
9e:f0:45:db:56:1c:43:ab:4f:0a:6b:07:c3:77:17:
12:e0:03:88:f7:69:5b:ac:75:50:ec:8f:13:93:d1:
b5:b3:73:a2:e1:70:b9:82:0d:ff:d0:ad:c4:1b:bd:
de:34:cd:cd:8a:38:dc:92:26:d6:65:fe:eb:09:9f:
09:b5:61:d5:f8:14:d1:23:4c:54:42:02:fe:91:64:
1e:a3:da:ab:85:1a:69:58:ae:e3:bd:f8:f8:ac:2e:
a6:31:9a:b1:04:55:53:85:8e:37:79:4e:73:19:c0:
1b:5f:a0:f9:cc:b1:25:c8:d7:f6:bf:43:b2:d9:bc:
d8:f5:47:26:bc:46:77:17:bf:27:9e:b1:23:a3:9d:
a5:8a:b1:0e:47:ad:19:29:d9:b3:78:11:8c:e4:26:
e9:38:79:8e:04:da:d2:0e:bb:44:dc:3b:69:08:54:
3f:92:7c:15:78:95:05:f0:38:76:12:c0:7a:30:25:
20:3d:36:a3:ea:43:3b:29:9d:e4:04:8c:f9:5f:64:
10:b0:46:f3:10:e0:08:b9:3b:20:9f:f7:01:82:99:
6b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:97:D8:3F:6A:4A:31:1C:1D:41:BE:1E:31:6B:13:4D:CB:35:46:B6
X509v3 Authority Key Identifier:
keyid:08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7e:97:07:78:b3:bc:79:5e:f6:f1:9f:79:40:7f:3e:98:7a:
26:fb:a4:00:6f:61:f3:26:16:89:f9:ae:44:95:77:25:84:49:
a7:67:91:16:23:86:f4:a0:81:4b:fb:96:e5:38:37:c7:c9:4b:
c2:05:86:7f:a5:d5:13:e9:ce:10:bf:81:b5:80:77:80:ed:44:
c4:60:63:cc:2a:05:ed:5a:5a:0a:40:17:0a:7a:39:80:17:fc:
6b:4c:d0:b4:6f:83:e2:8d:b0:a4:dc:80:2c:92:fd:ed:30:57:
0c:bb:78:b5:9f:6c:15:07:3d:24:41:ab:b9:12:eb:35:8d:5b:
54:7d:1d:8c:fb:a7:87:d9:40:74:cd:c3:bc:e7:3a:3d:39:0c:
b1:64:ba:36:c0:41:6c:40:fb:24:b7:c7:86:7a:c2:9a:5c:e6:
60:ce:e5:3f:fc:86:47:c9:f3:4b:59:43:16:f9:30:54:e2:86:
d4:33:0e:6f:d2:15:ac:6e:39:ef:99:c7:27:4e:45:c8:2b:d7:
2b:f6:b3:48:71:ec:4d:5a:2e:2c:e6:48:52:a4:63:d0:d6:3d:
31:16:37:1d:4b:92:4b:f1:89:af:53:16:a1:af:bf:f3:a5:0a:
43:ac:66:6c:da:b3:00:42:d1:7a:e2:3d:aa:b0:da:1f:71:85:
08:29:da:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:29:12 2026 by rpki-client