
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
File: caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json)
Hash identifier: PcztQR3DsVWqLsj6WEozDsrlDonlLnCT26EISUvQaZQ=
Subject key identifier: 23:C5:88:EA:00:05:B1:FF:AD:DE:A7:C6:C6:8D:6C:DD:05:A1:3A:78
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial: 01A1DACB02816FE645029E6721D27F735FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
Manifest number: 0854
Signing time: Sat 14 Nov 2026 16:01:39 +0000
Manifest this update: Sat 14 Nov 2026 16:01:39 +0000
Manifest next update: Sun 15 Nov 2026 16:01:39 +0000
Files and hashes: 1: 1-yrh7o7l73BoZ4mxu1Sc2NNXao.roa (hash: REAlvue4rS4WJe/Gx81v/QcR074zYeNDV7Fc3dUQZ50=)
2: KLKSPBmIoAckM_2zX1kcfv1RrIA.roa (hash: e5cmcWcfsQcMYd5C3G20wyHPZjtC4smNjex/8EyXnIs=)
3: UkjSUTUx7IMjtaAeMWvjHQv755g.roa (hash: BnS14gtS4fdP8nYmUOmguLX9BTECEdJHjxJKXb0Fl+E=)
4: ca4C5AzdpNKNar2d8IS6G83I0hM.roa (hash: BnmHeJGgIqbaAvekP5MH0alnMlpA9Lw+88gexar1FUM=)
5: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: EfDhcaM9y1KSvJHdeUIRtknqfayp5npIR1BLsE9xWD4=)
6: gEwlTNXeA40BzLkIAufL5zwng2w.roa (hash: 3owTDiLn5Lk7S0+G7mX4ebXjc7PmszGPcA5fLrARLvE=)
7: jlRGgVBGWswnpknlFwD2OACQfY0.roa (hash: BF4j6/GtndRNBeLKylQcAt1vG3+YqL36ZTZe+Rd0tlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:cb:02:81:6f:e6:45:02:9e:67:21:d2:7f:73:5f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Validity
Not Before: Nov 14 16:01:39 2026 GMT
Not After : Nov 15 16:01:39 2026 GMT
Subject: CN=23c588ea0005b1ffaddea7c6c68d6cdd05a13a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6b:27:04:e6:49:fe:3f:37:96:0b:2a:0f:a5:
a8:27:c5:f0:ca:a4:f3:c5:da:e0:ab:94:8f:8f:6c:
bb:82:fc:87:5c:8c:02:2e:d7:be:65:8c:05:53:a0:
00:96:37:7f:30:69:73:36:0e:57:d0:b0:02:76:9d:
fb:64:bd:18:1d:94:f6:ce:59:59:ae:c1:12:d9:7b:
80:52:67:d1:2b:de:bf:49:f4:cb:4a:dc:06:35:11:
b3:09:b1:48:a4:8f:ce:64:7b:7b:4c:5d:66:f0:c0:
60:5f:1f:09:b8:ba:17:22:80:1f:1b:23:47:73:96:
ee:4d:87:2b:40:51:ad:87:c0:13:c1:c8:cf:62:07:
8b:53:b2:89:73:c9:19:e1:6a:c3:6b:16:b3:b7:1f:
cb:36:8e:cd:81:d9:17:34:3c:c0:3e:6f:e6:41:25:
c2:a9:a1:1c:62:73:0f:f9:0a:2e:e7:a6:37:b4:dc:
ff:bc:f9:00:7d:96:5e:71:63:4c:6f:83:0d:3f:56:
a0:3e:56:bc:65:53:04:c5:e8:8b:08:b6:d3:e0:4f:
76:8e:f0:0e:4e:9c:c7:23:64:1d:6f:61:62:aa:50:
43:03:4b:b8:e1:28:21:a7:57:e2:36:de:93:c1:5c:
e7:03:48:67:c4:56:08:42:1f:27:50:dd:61:18:4e:
a8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C5:88:EA:00:05:B1:FF:AD:DE:A7:C6:C6:8D:6C:DD:05:A1:3A:78
X509v3 Authority Key Identifier:
keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:86:fe:0b:da:ee:1b:cf:2b:47:6a:5a:f6:c0:cb:d4:ae:de:
60:69:dd:47:7b:4e:bf:9d:4b:cd:8b:d8:bd:4b:0f:09:6e:f0:
7f:36:ea:66:9f:7b:64:85:30:7f:93:98:76:f0:54:a5:c2:89:
2b:b3:ba:6b:59:e9:50:dc:38:82:1f:ee:c6:dd:81:46:fa:8d:
2f:af:bd:32:c4:54:6c:2e:ff:6a:47:78:73:89:fc:bc:bd:2f:
1a:6f:a7:39:6b:c8:17:9a:11:46:67:d2:15:69:99:ce:20:73:
0e:78:7e:d4:86:f0:b8:fa:91:57:91:8a:c2:89:e1:50:33:52:
00:7d:f0:6e:14:4e:f1:c6:9d:fd:1e:d3:53:f2:9f:8a:22:db:
89:ca:36:66:15:18:c0:30:5a:42:19:ec:1e:91:17:51:1f:a6:
db:f9:1b:25:33:d0:55:74:1c:2c:9c:c9:aa:b4:72:79:8a:31:
29:b5:e9:6e:40:c3:e2:78:47:64:b5:6a:78:c8:78:06:8f:db:
27:eb:bf:84:19:f3:3f:14:e3:35:e2:e4:4d:de:40:38:40:c7:
f1:5e:f4:2e:df:fb:d5:c0:77:91:3f:76:14:96:4f:86:fe:12:
05:12:05:7d:22:af:79:1c:76:ea:73:7c:1e:7e:55:25:a2:aa:
cb:c1:9b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:30:52 2026 by rpki-client