Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
File: CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft (raw, json)
Hash identifier: 260Xn9rrS4OsvbPy+AOiqOMl1JxDkEz0zDqS4Y4EhJQ=
Subject key identifier: 70:03:15:57:7C:C8:D7:38:39:C3:5E:C3:60:B6:9C:EB:5B:94:A7:F7
Authority key identifier: 08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
Certificate issuer: /CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Certificate serial: 019E1E6C1FCA6785E9BB2BABB73D09317767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
Manifest number: 0C66
Signing time: Tue 12 May 2026 23:01:02 +0000
Manifest this update: Tue 12 May 2026 23:01:02 +0000
Manifest next update: Wed 13 May 2026 23:01:02 +0000
Files and hashes: 1: CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl (hash: PHW1nNr2XPfXhYfjAZB5xrmfWUIZE+Qz5iHJiAWcZYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:1f:ca:67:85:e9:bb:2b:ab:b7:3d:09:31:77:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Validity
Not Before: May 12 23:01:02 2026 GMT
Not After : May 13 23:01:02 2026 GMT
Subject: CN=700315577cc8d73839c35ec360b69ceb5b94a7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:08:16:23:d3:61:4b:a5:53:8c:3b:88:25:
23:0f:14:67:ce:51:9f:42:46:10:f8:47:62:60:a1:
cc:71:7a:bf:30:e0:0f:46:08:ff:b4:ca:db:f9:15:
85:96:58:0f:4a:3c:92:da:e2:ba:f6:5a:53:e3:5c:
3a:6c:16:4f:3f:7f:c4:20:23:82:e6:dd:60:4c:de:
5d:23:09:96:d7:0b:ef:34:b0:90:07:4b:84:10:ca:
6a:cb:a3:4e:04:98:77:a0:1c:c8:8f:29:f7:fe:91:
65:a5:ec:5a:ba:26:35:ff:32:c0:5c:86:4a:43:4d:
b3:5a:47:65:f4:22:b3:12:8f:ac:3d:7b:0a:20:44:
bc:e0:84:ba:54:b9:3a:da:71:a3:02:bf:b9:34:fc:
19:46:2d:31:9b:b1:c5:24:e4:9f:47:56:fe:c0:94:
17:27:8e:35:14:38:d0:39:16:33:6c:ca:66:a5:7c:
d9:25:95:88:d9:ba:42:2e:fd:03:7a:21:96:03:16:
bf:44:e8:36:3f:a7:5c:54:2e:f6:7f:c2:de:43:9e:
e2:f7:8e:a3:e1:cd:ee:c8:a6:c7:59:fd:50:ad:ae:
30:47:84:e2:f4:91:d4:7f:97:68:4a:12:92:66:6f:
db:aa:26:24:44:78:30:bb:e1:c2:7a:6d:de:39:ad:
9b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:03:15:57:7C:C8:D7:38:39:C3:5E:C3:60:B6:9C:EB:5B:94:A7:F7
X509v3 Authority Key Identifier:
keyid:08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e6:ab:9b:e9:97:04:92:33:5f:aa:37:22:99:a5:8e:21:bd:
7f:7b:49:d1:3d:6d:cd:31:3b:37:f7:52:2e:0c:a6:c3:d2:0f:
8e:38:b0:ed:34:f4:46:3b:55:d4:3a:15:44:27:8a:ec:9d:ab:
49:e6:65:c8:e5:12:fb:13:a4:30:fc:61:ce:bc:56:3a:ae:42:
ce:84:c0:02:a9:bb:97:45:27:42:20:59:4f:1c:90:7c:de:2f:
22:e5:81:de:31:90:6c:21:36:e8:48:b8:ba:5f:5b:38:5d:1f:
e8:2d:50:5e:81:b9:8f:fe:5d:63:f0:74:3f:12:05:04:06:de:
fd:42:2e:c6:8d:e3:52:18:dc:de:94:fe:01:5a:b0:c3:5a:c2:
86:06:18:ed:88:fe:44:10:28:1a:fb:1f:ca:85:6b:36:e9:b5:
15:a6:64:69:5f:6f:eb:c4:1b:9d:f8:e5:cb:38:20:3d:67:f4:
a5:6b:ff:51:27:24:da:87:a8:a4:3d:35:c0:a8:30:c7:e6:1d:
2f:37:96:74:76:fa:df:db:f5:ef:a9:49:e6:76:72:27:fc:72:
b9:69:cc:c3:0f:08:72:72:3d:2d:eb:a4:ec:d6:0b:d5:25:13:
a4:2b:00:2e:16:c1:61:41:9e:1c:df:e1:58:8c:48:12:ff:38:
f9:d1:40:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:13:38 2026 by rpki-client