Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
File: CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft (raw, json)
Hash identifier: /kfDOtvjjkGB3xEqehuY/ZM7qRjnffyWaSe1fjSjkto=
Subject key identifier: 65:7B:55:D9:77:CB:07:F9:23:47:F7:D5:8F:90:D0:64:55:60:D0:2E
Authority key identifier: 08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
Certificate issuer: /CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Certificate serial: 01A0D983E4C53FFBA844B6EBF1591EAD511B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
Manifest number: 0DD0
Signing time: Fri 25 Sep 2026 17:01:34 +0000
Manifest this update: Fri 25 Sep 2026 17:01:34 +0000
Manifest next update: Sat 26 Sep 2026 17:01:34 +0000
Files and hashes: 1: CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl (hash: 0F3wXRSrml3ZIsi0X9UI0DVZSTH5Ipvc8AesqU6gWMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:e4:c5:3f:fb:a8:44:b6:eb:f1:59:1e:ad:51:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Validity
Not Before: Sep 25 17:01:34 2026 GMT
Not After : Sep 26 17:01:34 2026 GMT
Subject: CN=657b55d977cb07f92347f7d58f90d0645560d02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2c:04:24:f0:1f:70:d0:35:1c:08:e8:6a:ba:
e4:7c:2b:2a:cb:59:c1:32:c8:ac:52:0a:fb:c3:74:
9c:30:e1:47:0e:9d:43:2b:5e:57:1f:df:64:0e:6d:
f3:e6:b5:f1:6d:e6:c5:9d:6d:6a:10:da:72:c9:99:
8c:51:09:59:b1:a4:16:ec:5d:91:90:89:19:6e:94:
71:c8:f5:41:98:cc:e6:5f:b1:e9:09:0f:89:09:a3:
5c:71:18:1e:d5:e7:8b:a7:15:28:1d:c0:8a:f1:33:
3f:ee:d6:fe:49:32:70:88:35:f7:23:0e:4a:5b:5a:
c8:d4:40:ae:83:ae:2e:5d:4a:dd:44:e4:b6:89:54:
a3:92:55:d8:7c:e3:db:1e:a6:b7:38:34:8b:ed:b2:
35:19:bf:3b:16:3c:a8:66:49:79:cf:95:f4:35:60:
ae:5a:b6:61:a6:f4:fa:78:3f:64:49:23:23:77:22:
5a:c9:27:cb:34:f1:1b:ed:f9:18:81:02:56:9b:50:
90:c8:d3:68:6a:a7:3d:cd:81:52:08:fa:b7:23:31:
7a:10:68:39:ff:6e:06:a1:c5:c2:fc:15:f1:89:80:
2a:6e:f7:69:29:14:5b:d1:af:a7:d6:be:4b:4b:19:
57:f7:fd:4b:cc:54:2f:4a:fa:74:20:bb:c7:71:5b:
f1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7B:55:D9:77:CB:07:F9:23:47:F7:D5:8F:90:D0:64:55:60:D0:2E
X509v3 Authority Key Identifier:
keyid:08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f0:55:42:b4:96:79:db:03:fc:60:85:9a:e6:46:e4:92:c6:
b8:cc:6f:9f:7e:6f:29:5a:03:5d:95:13:a1:e6:7b:6a:f8:91:
d4:b9:7e:6b:9b:38:64:9d:a2:54:31:bf:37:24:ac:10:90:41:
10:5a:a6:17:dc:f0:94:6a:05:72:39:47:96:fd:93:75:c6:4d:
b6:03:03:2f:c0:3a:4d:8f:da:aa:5e:49:4d:ea:eb:10:20:65:
ce:c7:65:08:34:c6:7b:67:20:de:cf:b7:91:f0:af:f6:72:91:
9c:4a:68:1c:3f:24:ce:fa:a7:dc:91:12:2a:6b:ee:d4:e1:4d:
eb:61:f9:b2:e3:da:49:11:4d:75:12:6a:d0:e5:24:7f:6e:34:
56:6a:2c:40:f8:4d:3e:75:1c:a0:89:76:01:38:62:d5:c5:89:
95:4c:cc:c7:db:b9:c5:4c:a6:05:1e:99:d4:07:e1:79:ed:b5:
6d:1b:0d:75:6a:dc:5f:3a:c0:eb:90:d8:ba:5f:cc:54:75:25:
c1:d3:af:25:98:e9:3f:75:6b:d4:92:42:54:e5:1e:4e:49:ad:
da:26:39:5a:b6:a3:6a:81:b9:fa:66:5c:ea:a5:c6:97:84:fa:
cb:e2:c2:39:c0:c9:5e:03:73:fe:b4:60:67:4b:f5:47:51:69:
2c:cb:5b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:00:11 2026 by rpki-client