
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
File: CjTa4xWrmAkiVnFV55LRr0QeAEE.mft (raw, json)
Hash identifier: MampKKMo2h41ZPXkgx9wG1a+bY/gPryqmUMotUO1ZDQ=
Subject key identifier: C4:59:5A:5C:50:EB:26:6B:BB:4B:9D:30:AF:C4:D6:1C:73:DC:55:6D
Authority key identifier: 0A:34:DA:E3:15:AB:98:09:22:56:71:55:E7:92:D1:AF:44:1E:00:41
Certificate issuer: /CN=0a34dae315ab980922567155e792d1af441e0041
Certificate serial: 019E1C7DA5ABFE238E83C7130E674BEAB88A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjTa4xWrmAkiVnFV55LRr0QeAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
Manifest number: CC
Signing time: Tue 12 May 2026 14:00:56 +0000
Manifest this update: Tue 12 May 2026 14:00:56 +0000
Manifest next update: Wed 13 May 2026 14:00:56 +0000
Files and hashes: 1: CjTa4xWrmAkiVnFV55LRr0QeAEE.crl (hash: FxTEBVfqEEjCxUMM36Ac/YIHdEukuQyBMzJB5LUsbz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjTa4xWrmAkiVnFV55LRr0QeAEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:a5:ab:fe:23:8e:83:c7:13:0e:67:4b:ea:b8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a34dae315ab980922567155e792d1af441e0041
Validity
Not Before: May 12 14:00:56 2026 GMT
Not After : May 13 14:00:56 2026 GMT
Subject: CN=c4595a5c50eb266bbb4b9d30afc4d61c73dc556d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:52:09:05:b2:5d:ed:58:8c:ca:13:ff:6c:
9e:a9:e2:fd:9c:a1:f2:35:bc:85:93:f2:e2:07:c5:
26:00:5b:71:49:34:78:28:5a:f2:fe:01:69:27:f8:
f3:12:97:e5:63:34:a6:49:dc:24:53:53:d9:ec:e6:
dd:03:bb:81:a6:6d:b3:b4:67:31:7f:5d:a0:b7:35:
c1:79:56:56:b4:b8:f3:a9:b6:59:bc:93:e8:ff:b1:
58:55:de:68:04:69:eb:05:0a:b2:9e:61:f3:31:0d:
4a:3d:29:16:a7:f3:d0:e4:5a:01:6b:84:4d:99:77:
b6:b6:ed:9c:40:fc:81:fa:2c:dd:40:dd:ec:ae:01:
ee:ca:a9:a1:f4:a5:1c:31:c7:8a:99:a6:0d:8e:e6:
04:0e:54:00:a5:2a:ec:db:e8:0f:2f:8e:86:d8:bf:
fb:3b:90:db:52:73:9f:0a:fa:da:37:e6:89:66:3d:
08:d7:62:a9:b0:b4:12:8e:8e:f4:05:0e:65:15:53:
b7:d3:e0:28:ae:d2:0a:78:4c:7c:e2:d5:ee:f5:7c:
a3:4d:82:44:45:6d:df:e5:f3:3f:60:c2:0d:6a:14:
11:13:40:27:22:8d:20:e3:fb:d7:02:d3:34:63:b1:
76:fc:1b:a5:26:4f:72:04:35:34:f7:b1:41:7b:e1:
f3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:59:5A:5C:50:EB:26:6B:BB:4B:9D:30:AF:C4:D6:1C:73:DC:55:6D
X509v3 Authority Key Identifier:
keyid:0A:34:DA:E3:15:AB:98:09:22:56:71:55:E7:92:D1:AF:44:1E:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjTa4xWrmAkiVnFV55LRr0QeAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1d:67:a5:0b:b9:12:88:89:f5:49:b4:33:f6:03:c9:68:ca:
1f:11:7d:98:b0:b9:d4:d2:5e:df:a1:57:a7:76:c8:95:6f:6f:
45:d0:ee:5d:de:c1:cc:6d:0c:55:2d:a4:50:c5:63:26:2e:0a:
57:b0:99:b9:79:62:1a:ec:2c:1a:e9:f8:81:de:89:87:e8:37:
66:0f:17:c0:5b:b1:59:f6:f2:46:b3:c1:f8:76:7b:f7:3b:ce:
1e:39:e7:3e:36:47:8e:ef:7a:27:6e:73:39:1c:ae:22:63:b6:
55:65:0a:48:9f:70:02:91:34:41:d9:53:f3:f2:fe:d0:d6:50:
78:1b:47:bd:02:42:8b:56:56:ad:49:40:6e:53:30:96:c9:48:
bc:6d:36:0f:ef:fd:ff:9f:77:71:7c:32:6d:f7:43:de:13:ce:
bc:66:92:24:ca:96:9c:26:df:be:5b:f7:93:bf:4b:b9:ce:8c:
0f:76:3f:45:0b:02:de:b4:44:8c:66:01:28:de:f8:f2:c5:58:
fe:19:9e:41:a8:4f:cd:c0:44:cc:5e:2b:8f:21:a0:1f:4d:2c:
d3:8b:20:c1:e8:59:90:a0:f5:54:7e:d6:ae:56:51:cb:a9:c9:
8d:63:e3:2b:f0:74:8a:17:ca:41:98:ac:40:29:97:eb:58:46:
3f:5a:73:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cfaWr/iOOg8cTDmdL6riKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzRkYWUzMTVhYjk4MDkyMjU2NzE1NWU3OTJkMWFmNDQx
ZTAwNDEwHhcNMjYwNTEyMTQwMDU2WhcNMjYwNTEzMTQwMDU2WjAzMTEwLwYDVQQD
EyhjNDU5NWE1YzUwZWIyNjZiYmI0YjlkMzBhZmM0ZDYxYzczZGM1NTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3dSCQWyXe1YjMoT/2yeqeL9nKHy
NbyFk/LiB8UmAFtxSTR4KFry/gFpJ/jzEpflYzSmSdwkU1PZ7ObdA7uBpm2ztGcx
f12gtzXBeVZWtLjzqbZZvJPo/7FYVd5oBGnrBQqynmHzMQ1KPSkWp/PQ5FoBa4RN
mXe2tu2cQPyB+izdQN3srgHuyqmh9KUcMceKmaYNjuYEDlQApSrs2+gPL46G2L/7
O5DbUnOfCvraN+aJZj0I12KpsLQSjo70BQ5lFVO30+AortIKeEx84tXu9XyjTYJE
RW3f5fM/YMINahQRE0AnIo0g4/vXAtM0Y7F2/BulJk9yBDU097FBe+HzgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRZWlxQ6yZru0udMK/E1hxz3FVtMB8GA1UdIwQY
MBaAFAo02uMVq5gJIlZxVeeS0a9EHgBBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2pUYTR4V3JtQWtpVm5GVjU1TFJyMFFlQUVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85YjBiYmMtMmM0MS00NDQ4LWIxNTgt
ZWIyNDUwN2FjNjQxLzEvQ2pUYTR4V3JtQWtpVm5GVjU1TFJyMFFlQUVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS85YjBiYmMtMmM0MS00NDQ4LWIxNTgtZWIyNDUwN2FjNjQx
LzEvQ2pUYTR4V3JtQWtpVm5GVjU1TFJyMFFlQUVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADh1npQu5
EoiJ9Um0M/YDyWjKHxF9mLC51NJe36FXp3bIlW9vRdDuXd7BzG0MVS2kUMVjJi4K
V7CZuXliGuwsGun4gd6Jh+g3Zg8XwFuxWfbyRrPB+HZ79zvOHjnnPjZHju96J25z
ORyuImO2VWUKSJ9wApE0QdlT8/L+0NZQeBtHvQJCi1ZWrUlAblMwlslIvG02D+/9
/593cXwybfdD3hPOvGaSJMqWnCbfvlv3k79Luc6MD3Y/RQsC3rREjGYBKN748sVY
/hmeQahPzcBEzF4rjyGgH00s04sgwehZkKD1VH7WrlZRy6nJjWPjK/B0ihfKQZis
QCmX61hGP1pzZg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:36:45 2026 by rpki-client