Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
File: CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft (raw, json)
Hash identifier: aX2wlTPqSxdbKmG9Etu9vC526a9LDjIg/14CZZw5iFc=
Subject key identifier: 80:E5:1A:8B:33:C7:57:16:B5:D3:18:D9:B0:23:90:62:BD:1F:95:66
Authority key identifier: 08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
Certificate issuer: /CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Certificate serial: 019F91355200E2C79D6EE68FA65E29FC8978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
Manifest number: 0D26
Signing time: Thu 23 Jul 2026 23:00:18 +0000
Manifest this update: Thu 23 Jul 2026 23:00:18 +0000
Manifest next update: Fri 24 Jul 2026 23:00:18 +0000
Files and hashes: 1: CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl (hash: F6ns76nIbSXqgAN/MQlqKoKNwROdjvIbHwDheuqJkCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:52:00:e2:c7:9d:6e:e6:8f:a6:5e:29:fc:89:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Validity
Not Before: Jul 23 23:00:18 2026 GMT
Not After : Jul 24 23:00:18 2026 GMT
Subject: CN=80e51a8b33c75716b5d318d9b0239062bd1f9566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9b:db:24:79:df:4a:32:af:60:9e:28:a1:c9:
eb:20:54:d3:1e:77:57:56:fb:ed:ac:d6:81:93:5a:
0c:dd:fe:19:ba:c6:63:01:94:6f:7b:fc:c5:62:01:
5f:93:d4:68:3b:76:8c:58:70:bd:e0:ea:31:73:d6:
35:40:e7:fc:53:68:21:89:a2:7c:93:25:04:30:86:
bb:bf:b6:a0:c2:d8:09:84:2a:e4:ed:04:6d:ae:ae:
3d:fb:9f:7b:57:7f:69:fc:68:b5:2f:95:14:0f:a0:
31:6e:c7:fa:45:4f:41:40:ed:f9:d3:b4:19:97:06:
a4:56:a4:d0:e5:37:79:1c:10:ac:46:af:14:f4:a8:
4f:62:87:6c:fe:ef:00:da:de:3c:f8:bb:e8:3e:ec:
74:b8:22:14:fc:84:78:f9:78:8b:7b:e9:43:82:96:
61:e9:05:d6:c4:8a:c0:ed:90:3d:47:4b:9b:7e:e5:
8f:a1:07:72:fc:ba:ee:d7:63:f1:3a:79:c7:54:c1:
22:13:5f:1b:89:a8:a0:bd:6b:5e:8a:73:0f:71:40:
32:a2:fe:07:fe:48:18:70:e6:06:ea:08:98:57:70:
cd:0b:44:94:23:54:82:39:61:3f:9c:93:3b:0f:68:
21:41:d9:0e:64:74:e3:ba:4b:13:a4:31:6c:49:ce:
f0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E5:1A:8B:33:C7:57:16:B5:D3:18:D9:B0:23:90:62:BD:1F:95:66
X509v3 Authority Key Identifier:
keyid:08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1e:e3:c9:85:26:0f:b7:15:d5:64:eb:52:fb:ef:80:22:38:
92:00:43:3c:8d:67:25:04:64:df:07:8a:45:7d:61:55:46:f6:
38:7e:af:68:71:24:59:c2:2f:61:fe:c8:15:b5:5b:6e:e5:78:
b4:d4:56:b4:e8:49:ce:76:78:7d:2d:c7:bc:89:84:ba:5e:90:
a7:44:3a:b7:9c:c7:2f:41:a7:ef:f9:97:8b:97:5f:23:31:bd:
c9:4c:cf:c9:d1:07:9e:0f:d2:f8:4e:0a:56:0b:f5:65:b6:1e:
80:ab:7f:38:02:5e:54:5b:cd:49:9e:5a:5f:84:f8:f4:cb:af:
c0:e9:6a:f9:fc:45:34:48:1d:3b:a7:23:86:69:bc:23:37:25:
45:68:0b:52:09:91:a1:d9:d4:ca:cf:51:04:30:ad:dc:02:35:
7a:25:e0:2b:84:18:e4:be:2e:50:1c:7b:0a:ce:f4:cc:45:13:
54:c6:59:03:fa:7d:58:4e:6f:29:90:1c:b2:12:2a:76:48:bf:
3b:83:11:7f:00:0c:b7:b9:ed:02:33:b1:99:de:b3:22:94:e0:
db:0e:63:e6:c0:d4:71:25:23:0c:0f:24:a4:cd:c4:0c:ad:0a:
3f:42:6d:55:c9:44:77:00:8d:d4:58:ef:66:4e:e2:d1:4f:08:
ea:aa:80:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:18:10 2026 by rpki-client