Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
File: CNJ4u-X8LfcyAyzbI1li26vg9kE.mft (raw, json)
Hash identifier: NV+4RGBqnk6Rr3nh7navv74apQx61zvtXUkDh1dCdhY=
Subject key identifier: 7D:A9:13:8B:36:2A:61:0B:78:5D:5F:3F:DE:6A:DE:0C:CB:1B:FA:97
Authority key identifier: 08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
Certificate issuer: /CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Certificate serial: 019F90FE8C6CE9768AE1610D1E8D585836B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 22:00:28 +0000
Manifest this update: Thu 23 Jul 2026 22:00:28 +0000
Manifest next update: Fri 24 Jul 2026 22:00:28 +0000
Files and hashes: 1: CNJ4u-X8LfcyAyzbI1li26vg9kE.crl (hash: 99hne1O7HebNNTm5XO8rC97mVnBiWf12tKVfPtJkGhA=)
2: cqRNRYld8xc0CoCi2GIRdSN1pec.roa (hash: UvIZReHdG2/zwr7aSyXObjS9yFZjBI/EHczHCt3scrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:8c:6c:e9:76:8a:e1:61:0d:1e:8d:58:58:36:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Validity
Not Before: Jul 23 22:00:28 2026 GMT
Not After : Jul 24 22:00:28 2026 GMT
Subject: CN=7da9138b362a610b785d5f3fde6ade0ccb1bfa97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:eb:4a:26:47:24:92:b6:64:7e:42:e1:36:95:
3b:11:cb:86:1a:a7:fb:a6:d4:23:9e:13:2a:c2:d1:
d7:61:45:d4:70:80:0d:c1:71:b3:cd:c5:45:b1:cc:
2b:4b:a2:81:e6:ce:89:ac:fd:89:e3:18:85:4b:03:
56:ce:a5:03:dc:d8:5e:e2:72:3e:95:37:9a:db:69:
d3:58:40:32:56:84:a3:05:7c:fe:9e:06:c3:bd:9d:
67:ca:92:59:c2:10:e3:03:a7:35:d9:15:6d:60:ef:
19:6c:12:66:c7:52:53:1a:f9:9c:b4:a5:5d:88:5a:
cb:81:8a:b6:be:a2:8f:1f:3c:57:a2:7b:a4:0f:13:
5f:ec:78:af:11:ba:2e:97:24:f8:d9:05:61:0a:5b:
a4:05:7d:d9:bb:96:ca:f8:fc:20:d2:12:52:64:cf:
ec:10:83:40:ff:38:19:15:49:a2:bc:92:68:7e:01:
d9:f3:58:64:24:90:ca:77:e2:21:7f:b9:37:ba:8f:
b8:cb:ac:5d:ff:76:e1:e8:cd:71:71:c9:14:4d:0a:
f4:c5:a1:1f:56:37:0a:78:e8:ee:73:98:a5:0e:40:
05:71:b7:b4:fe:d1:55:47:eb:91:8c:03:8c:69:2f:
46:ee:92:fb:97:7f:21:a0:26:b5:ef:4c:67:d5:91:
06:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A9:13:8B:36:2A:61:0B:78:5D:5F:3F:DE:6A:DE:0C:CB:1B:FA:97
X509v3 Authority Key Identifier:
keyid:08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fe:ff:04:93:7e:b8:99:ac:7b:ae:58:ca:15:78:39:6f:25:
1a:3a:66:20:8f:2b:74:9e:de:b6:93:88:1b:f4:33:b5:e1:63:
c4:d3:03:fe:d2:73:a7:d2:dc:df:32:4c:f0:99:7d:e3:ad:6a:
00:ee:85:2b:c8:23:a6:59:56:05:4d:ca:90:40:2b:03:52:04:
07:6c:e9:e7:b5:9c:e5:9e:10:0f:27:69:af:07:3b:bd:6d:8d:
f6:cb:a6:b0:49:29:0b:67:d2:42:5b:57:98:7a:b7:db:4a:bd:
79:1a:6e:81:89:f7:de:19:2b:65:0e:bb:af:5e:df:f7:03:cf:
f8:dc:26:f4:79:f7:67:33:28:ee:a5:5b:0f:f0:05:6a:9e:db:
be:9f:12:ad:33:82:29:6e:f8:db:4c:63:8c:c8:7b:5f:8a:fb:
cd:c4:f6:d4:58:0d:b2:33:8d:01:7f:52:e7:83:eb:0e:8f:fc:
0d:13:f4:49:ff:dc:6b:72:07:f2:10:1a:03:5f:de:8f:66:62:
5d:16:e7:46:42:b4:59:c8:fa:2b:c1:6a:d1:9c:02:6f:3b:21:
a1:d9:12:29:b2:84:93:fb:3e:bd:20:a0:05:8c:07:03:a6:93:
26:60:e9:8e:8d:32:c3:dd:20:3a:47:62:a4:ba:35:55:2c:36:
c9:32:07:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:39:10 2026 by rpki-client