Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
File: CNJ4u-X8LfcyAyzbI1li26vg9kE.mft (raw, json)
Hash identifier: kuv53ms8M8UyegU+KqRDU+l/E7ad+fFmhxMHoQuDmD8=
Subject key identifier: 38:BD:45:57:FA:D5:71:06:0D:C8:73:E1:79:75:96:94:FC:02:A2:0E
Authority key identifier: 08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
Certificate issuer: /CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Certificate serial: 019D2704B4DCC5EC7DCBCD8C6A3713E83EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 22:01:53 +0000
Manifest this update: Wed 25 Mar 2026 22:01:53 +0000
Manifest next update: Thu 26 Mar 2026 22:01:53 +0000
Files and hashes: 1: CNJ4u-X8LfcyAyzbI1li26vg9kE.crl (hash: WVrriIZfqowiuxZjrNzV5npNHGkKK5RMxoxda+4pYQg=)
2: cqRNRYld8xc0CoCi2GIRdSN1pec.roa (hash: UvIZReHdG2/zwr7aSyXObjS9yFZjBI/EHczHCt3scrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:b4:dc:c5:ec:7d:cb:cd:8c:6a:37:13:e8:3e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Validity
Not Before: Mar 25 22:01:53 2026 GMT
Not After : Mar 26 22:01:53 2026 GMT
Subject: CN=38bd4557fad571060dc873e179759694fc02a20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a9:79:8d:c0:22:af:4e:53:80:7a:74:65:32:
89:c6:06:b7:18:fb:6f:28:41:fe:84:aa:9d:4e:4d:
2f:82:fb:76:6b:fa:4c:f5:d4:46:cf:cc:96:ab:80:
4f:54:a8:3d:95:4a:37:87:4c:04:ea:45:63:e0:33:
03:9e:08:da:d4:a1:11:ab:96:c5:98:a9:51:e8:6f:
e2:6d:d4:99:c5:be:42:1b:cb:15:59:dc:08:4f:8c:
33:77:c5:f8:16:0e:f9:60:c0:94:99:a7:b7:11:aa:
cb:cb:f5:c9:f9:3b:ca:31:53:ef:09:58:05:e9:f8:
cc:3c:34:66:52:bb:13:94:d5:28:6f:f3:cc:7b:6f:
83:c0:53:90:c8:c2:71:54:75:87:3a:e5:a5:a9:3d:
a9:73:0c:c6:d0:af:37:7a:6c:0a:ff:53:ae:27:55:
37:68:3c:03:1d:8e:37:c5:93:b6:b4:e7:e0:c3:6d:
ee:68:ef:3d:14:bc:e8:d3:b8:4e:86:ae:fd:1d:21:
2e:ad:f4:37:82:18:bc:9d:a7:11:50:b2:18:98:c8:
04:00:73:b2:7c:9d:59:f6:99:3b:2f:7a:fa:81:0d:
2e:9f:3c:7e:70:b2:51:cc:2e:52:8b:70:df:15:e8:
39:ba:aa:12:e6:67:0a:dd:e3:19:2e:da:cf:ec:9c:
90:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BD:45:57:FA:D5:71:06:0D:C8:73:E1:79:75:96:94:FC:02:A2:0E
X509v3 Authority Key Identifier:
keyid:08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:84:fa:6f:54:a7:4d:d5:a1:ee:83:48:b5:fa:9b:c7:8b:b1:
09:9d:43:4c:72:15:d6:b9:c7:46:fa:01:20:1c:8e:9e:b2:24:
cc:34:93:dd:b4:6c:a2:15:1e:43:c8:ea:06:5b:87:e4:ae:d4:
9e:57:c1:9d:3f:51:c0:55:03:e8:28:76:b2:3e:89:1d:2b:cd:
e1:dc:1e:82:eb:17:20:f5:4b:e0:c9:75:0c:fb:53:d9:47:55:
88:4e:5a:9c:11:6a:b3:fd:04:93:2b:22:68:81:66:92:06:a9:
86:12:79:67:d9:0b:cf:d7:d8:c2:04:f2:75:c1:9b:5e:34:59:
f0:d1:ae:b9:b8:ff:fa:2f:d8:65:f7:95:5b:a5:10:5a:eb:46:
4e:46:6b:88:88:5c:92:73:3f:b2:e5:af:ae:c4:43:6d:d4:32:
35:57:f0:bb:85:af:21:d5:98:b5:e0:86:f1:30:e6:e3:32:9f:
42:3d:8d:80:39:d0:7e:7b:95:dc:94:aa:d4:67:6b:7a:74:b9:
48:9d:2e:d8:27:dd:45:b9:4e:f2:4a:72:8a:dc:d7:59:b1:6a:
6f:a8:4e:70:30:3b:72:69:78:0f:76:e8:d6:c1:3b:4a:33:b1:
83:fc:ab:f3:25:c6:48:19:e8:1f:8b:d9:35:2a:81:d8:47:de:
e8:dd:fd:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBLTcxex9y82MajcT6D7nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDI3OGJiZTVmYzJkZjczMjAzMmNkYjIzNTk2MmRiYWJl
MGY2NDEwHhcNMjYwMzI1MjIwMTUzWhcNMjYwMzI2MjIwMTUzWjAzMTEwLwYDVQQD
EygzOGJkNDU1N2ZhZDU3MTA2MGRjODczZTE3OTc1OTY5NGZjMDJhMjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ql5jcAir05TgHp0ZTKJxga3GPtv
KEH+hKqdTk0vgvt2a/pM9dRGz8yWq4BPVKg9lUo3h0wE6kVj4DMDngja1KERq5bF
mKlR6G/ibdSZxb5CG8sVWdwIT4wzd8X4Fg75YMCUmae3EarLy/XJ+TvKMVPvCVgF
6fjMPDRmUrsTlNUob/PMe2+DwFOQyMJxVHWHOuWlqT2pcwzG0K83emwK/1OuJ1U3
aDwDHY43xZO2tOfgw23uaO89FLzo07hOhq79HSEurfQ3ghi8nacRULIYmMgEAHOy
fJ1Z9pk7L3r6gQ0unzx+cLJRzC5Si3DfFeg5uqoS5mcK3eMZLtrP7JyQRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDi9RVf61XEGDchz4Xl1lpT8AqIOMB8GA1UdIwQY
MBaAFAjSeLvl/C33MgMs2yNZYtur4PZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05KNHUtWDhMZmN5QXl6YkkxbGkyNnZnOWtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83MDNmYzUtNDA2Yy00MTIxLWFiOWUt
ZWY0NmRkZWVhYmY0LzEvQ05KNHUtWDhMZmN5QXl6YkkxbGkyNnZnOWtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC83MDNmYzUtNDA2Yy00MTIxLWFiOWUtZWY0NmRkZWVhYmY0
LzEvQ05KNHUtWDhMZmN5QXl6YkkxbGkyNnZnOWtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGoT6b1Sn
TdWh7oNItfqbx4uxCZ1DTHIV1rnHRvoBIByOnrIkzDST3bRsohUeQ8jqBluH5K7U
nlfBnT9RwFUD6Ch2sj6JHSvN4dwegusXIPVL4Ml1DPtT2UdViE5anBFqs/0Ekysi
aIFmkgaphhJ5Z9kLz9fYwgTydcGbXjRZ8NGuubj/+i/YZfeVW6UQWutGTkZriIhc
knM/suWvrsRDbdQyNVfwu4WvIdWYteCG8TDm4zKfQj2NgDnQfnuV3JSq1GdrenS5
SJ0u2CfdRblO8kpyitzXWbFqb6hOcDA7cml4D3bo1sE7SjOxg/yr8yXGSBnoH4vZ
NSqB2Efe6N39Kg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:27 2026 by rpki-client