Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier: KAFZpGGozs+lah5y30G1RfGnYInlT9+KJkMZG8OwTDE=
Subject key identifier: B1:A5:E9:E8:AA:6A:16:FE:07:FC:60:6E:E1:15:22:7B:7F:9E:41:01
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 019E1F111DA424EC4FC136ED051F750B2003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number: 0C4A
Signing time: Wed 13 May 2026 02:01:15 +0000
Manifest this update: Wed 13 May 2026 02:01:15 +0000
Manifest next update: Thu 14 May 2026 02:01:15 +0000
Files and hashes: 1: RpRVr86nrmR4pLP_o-Dkxgygl-I.roa (hash: dYMAWblY0LPrzbeqEQ3uJpDKV9wamvkF6WdwjSusrRI=)
2: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: A4gcM2xafSKRzskUFOq2dGoIhGH2Kya3e8/6WnoFwwM=)
3: exmQSDmoNH_azOiipU8IusPL-zE.roa (hash: tOEc7EoupcuUU99+9kHSEhJIEOT6G42NFE+0vNPQoj4=)
4: zLLpSlai4j_BckMwzN3FZevoFJI.roa (hash: X+bvA7vFedjj2qlLm3vDJgVyiO2iqldPs11sP4fxghM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:1d:a4:24:ec:4f:c1:36:ed:05:1f:75:0b:20:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: May 13 02:01:15 2026 GMT
Not After : May 14 02:01:15 2026 GMT
Subject: CN=b1a5e9e8aa6a16fe07fc606ee115227b7f9e4101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:18:ad:2f:67:a5:52:08:b8:4d:ba:b9:29:
65:e8:77:09:51:a9:ee:03:ac:aa:6e:ed:64:70:7c:
a5:04:f0:a2:0d:30:67:e8:af:0c:1e:e9:b5:ab:ba:
04:d0:10:fe:c2:fb:77:2f:5a:8a:a1:42:d6:f8:b5:
67:0b:da:37:b2:0a:fc:48:1e:2a:24:ad:2a:56:e8:
32:3b:7e:02:33:32:32:a6:dc:47:6b:0d:5e:65:39:
80:b9:1b:93:60:5e:38:d5:76:aa:bb:60:6d:8f:70:
4c:a4:3a:02:69:ff:49:25:90:1f:8a:68:bc:ce:35:
b8:46:08:56:00:df:bf:60:e6:1e:c6:06:66:7c:63:
5c:89:21:4d:b0:c1:55:86:4a:b5:af:94:d7:b9:85:
a5:40:8d:cc:ba:13:b0:8a:4b:5d:62:6b:1b:19:e4:
1b:96:0b:1a:01:93:4e:91:7e:c8:8d:ce:56:66:a1:
45:d5:6a:3b:96:01:67:19:95:3a:69:8a:8d:31:0d:
18:af:b1:db:54:aa:e8:f9:e2:de:0c:5e:30:0b:d4:
29:a8:1b:64:2f:28:46:07:79:8c:5b:18:e4:a2:38:
ad:df:07:da:96:1d:e8:89:c2:0f:a7:ef:96:cc:25:
0a:37:da:e3:58:31:c8:1e:ec:8f:bc:5c:ba:77:f1:
d1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A5:E9:E8:AA:6A:16:FE:07:FC:60:6E:E1:15:22:7B:7F:9E:41:01
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:3d:47:d1:e0:9a:96:8f:f7:c0:c6:e3:e0:12:5d:7e:7e:8d:
18:33:19:39:b3:f3:1f:e8:91:7f:0c:8c:d4:9b:87:9d:ce:2c:
95:ec:be:7d:9b:93:c7:b2:f4:d2:be:f8:56:be:0c:5b:c6:2d:
51:1a:ea:87:5c:e8:dd:3e:df:23:e5:74:ed:9f:9f:1d:61:84:
06:49:57:c5:56:7c:00:ce:79:8e:d7:ad:bb:b0:42:a0:19:2c:
b0:45:b1:8f:ea:f6:32:ec:da:d7:00:5b:79:0b:1f:35:f0:68:
7c:7d:fe:f8:d3:ff:07:cb:64:16:24:83:34:e5:69:dc:3f:9c:
07:17:a2:90:1b:b5:27:53:45:ac:ab:55:41:58:cb:0c:46:d2:
45:27:85:a1:50:72:c4:f2:ee:9e:04:b1:32:e5:18:78:0b:94:
b1:52:0d:a9:7c:ae:98:10:cc:fd:89:ae:aa:81:b5:b0:12:bb:
2e:f5:78:41:52:3a:54:04:b7:88:e6:89:56:2e:8a:c9:c4:27:
22:b8:12:61:cc:b5:df:1d:9f:7a:aa:d2:0c:48:ca:d5:ee:28:
51:da:49:3f:2b:ef:c7:a0:31:83:e2:de:14:bf:27:fc:5c:99:
bb:b3:5f:a5:5f:eb:85:b2:34:7c:0e:4c:97:e7:40:6f:14:db:
7c:f7:fe:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:04:34 2026 by rpki-client