Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
File: CjTa4xWrmAkiVnFV55LRr0QeAEE.mft (raw, json)
Hash identifier: 3xWX5ZY/Hvs4rn30eZw7RPjNXouDaNKN2KKGsxchbGw=
Subject key identifier: 3D:C0:7B:95:EC:64:99:FE:0D:DA:F2:00:C3:9E:0E:54:EE:91:D7:B7
Authority key identifier: 0A:34:DA:E3:15:AB:98:09:22:56:71:55:E7:92:D1:AF:44:1E:00:41
Certificate issuer: /CN=0a34dae315ab980922567155e792d1af441e0041
Certificate serial: 01A0D5A6E227F691DF2D81F3DB5A360EFDF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjTa4xWrmAkiVnFV55LRr0QeAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
Manifest number: 0235
Signing time: Thu 24 Sep 2026 23:01:18 +0000
Manifest this update: Thu 24 Sep 2026 23:01:18 +0000
Manifest next update: Fri 25 Sep 2026 23:01:18 +0000
Files and hashes: 1: CjTa4xWrmAkiVnFV55LRr0QeAEE.crl (hash: HiwH12CtmvYZqh/7lo4ssm0IxzYkEXL/BCEV1pCePmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjTa4xWrmAkiVnFV55LRr0QeAEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:e2:27:f6:91:df:2d:81:f3:db:5a:36:0e:fd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a34dae315ab980922567155e792d1af441e0041
Validity
Not Before: Sep 24 23:01:18 2026 GMT
Not After : Sep 25 23:01:18 2026 GMT
Subject: CN=3dc07b95ec6499fe0ddaf200c39e0e54ee91d7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c7:ba:5e:aa:c5:5b:87:97:08:67:33:f2:99:
34:2c:e0:95:37:79:99:21:24:7e:94:40:ba:7c:1d:
8e:09:1d:f4:0b:ae:d2:67:24:6a:8b:15:2e:7b:7f:
a8:f1:54:49:84:64:dc:da:be:2d:9d:11:e5:10:59:
78:b2:23:e1:cb:3e:16:a4:c0:a6:67:07:bb:54:b9:
bf:8b:02:4a:a6:9b:cc:b8:67:26:29:cf:6e:30:22:
ba:98:56:42:09:13:22:ab:2a:29:35:98:7a:e8:e1:
30:95:4c:49:83:eb:8d:a4:65:c2:e9:96:ad:dc:e0:
47:a5:94:3d:d3:a8:99:df:42:44:16:08:21:27:54:
4d:b7:4b:8a:e2:0a:94:d0:ce:8a:3e:71:b3:5c:b0:
1f:42:fc:fe:6c:a6:8b:37:0b:a0:5f:fd:b4:1d:d5:
cd:39:f6:38:de:4a:f7:27:6c:05:22:a8:c6:a6:4e:
9a:d8:da:72:a9:6a:47:5d:7d:c1:35:61:04:12:31:
33:80:0d:ea:54:76:3d:9c:88:4a:76:6f:b2:d1:7d:
19:67:b8:48:60:15:05:8b:28:3f:62:02:32:31:2c:
14:c5:65:4f:b0:fe:d5:a1:30:27:7a:61:34:db:ea:
3d:14:e2:f2:c7:4c:ef:25:65:a0:ee:7f:20:38:27:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C0:7B:95:EC:64:99:FE:0D:DA:F2:00:C3:9E:0E:54:EE:91:D7:B7
X509v3 Authority Key Identifier:
keyid:0A:34:DA:E3:15:AB:98:09:22:56:71:55:E7:92:D1:AF:44:1E:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjTa4xWrmAkiVnFV55LRr0QeAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ff:f3:37:6e:6e:aa:77:26:8c:e9:89:10:a5:c3:d0:ff:dc:
8d:4a:28:82:a5:dc:02:4b:fd:09:66:aa:db:19:56:66:ff:69:
b4:90:8b:89:b6:43:93:99:0a:08:f0:64:05:2e:55:ad:c1:77:
90:06:e0:12:6a:f0:f4:25:78:34:41:06:ef:a5:02:e9:1a:cb:
7e:b7:5a:e9:6e:87:b5:8f:30:d5:68:ed:44:4d:de:9e:bb:4a:
ca:74:fe:de:1d:a5:a0:8b:bd:16:b0:01:ce:be:dd:4c:bd:a2:
61:35:66:bf:41:25:84:3f:d2:20:fa:ce:fb:e7:7d:ff:dc:fa:
84:a2:a0:45:c3:e3:d6:62:d8:14:23:77:b9:b1:cc:ab:44:60:
6b:a5:a2:87:75:00:c7:19:c4:0a:9d:81:5e:0e:59:6b:00:c6:
43:43:f9:f4:36:0e:69:01:86:a5:a1:61:cd:b1:42:8f:02:21:
77:9b:27:29:67:ee:a0:70:ce:ba:8e:ed:a6:eb:5e:66:29:e6:
63:da:69:d9:00:a6:00:a0:fe:91:03:ee:3b:6b:52:af:44:15:
38:93:b5:8a:9f:cd:a3:7f:12:90:92:85:c2:81:b1:dc:42:97:
49:81:9c:c2:a0:d4:e8:22:64:75:24:98:a2:21:61:e8:5f:7d:
19:9f:1a:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVpuIn9pHfLYHz21o2Dv33MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzRkYWUzMTVhYjk4MDkyMjU2NzE1NWU3OTJkMWFmNDQx
ZTAwNDEwHhcNMjYwOTI0MjMwMTE4WhcNMjYwOTI1MjMwMTE4WjAzMTEwLwYDVQQD
EygzZGMwN2I5NWVjNjQ5OWZlMGRkYWYyMDBjMzllMGU1NGVlOTFkN2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0se6XqrFW4eXCGcz8pk0LOCVN3mZ
ISR+lEC6fB2OCR30C67SZyRqixUue3+o8VRJhGTc2r4tnRHlEFl4siPhyz4WpMCm
Zwe7VLm/iwJKppvMuGcmKc9uMCK6mFZCCRMiqyopNZh66OEwlUxJg+uNpGXC6Zat
3OBHpZQ906iZ30JEFgghJ1RNt0uK4gqU0M6KPnGzXLAfQvz+bKaLNwugX/20HdXN
OfY43kr3J2wFIqjGpk6a2NpyqWpHXX3BNWEEEjEzgA3qVHY9nIhKdm+y0X0ZZ7hI
YBUFiyg/YgIyMSwUxWVPsP7VoTAnemE02+o9FOLyx0zvJWWg7n8gOCf9DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3Ae5XsZJn+DdryAMOeDlTukde3MB8GA1UdIwQY
MBaAFAo02uMVq5gJIlZxVeeS0a9EHgBBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2pUYTR4V3JtQWtpVm5GVjU1TFJyMFFlQUVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85YjBiYmMtMmM0MS00NDQ4LWIxNTgt
ZWIyNDUwN2FjNjQxLzEvQ2pUYTR4V3JtQWtpVm5GVjU1TFJyMFFlQUVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS85YjBiYmMtMmM0MS00NDQ4LWIxNTgtZWIyNDUwN2FjNjQx
LzEvQ2pUYTR4V3JtQWtpVm5GVjU1TFJyMFFlQUVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE//zN25u
qncmjOmJEKXD0P/cjUoogqXcAkv9CWaq2xlWZv9ptJCLibZDk5kKCPBkBS5VrcF3
kAbgEmrw9CV4NEEG76UC6RrLfrda6W6HtY8w1WjtRE3enrtKynT+3h2loIu9FrAB
zr7dTL2iYTVmv0ElhD/SIPrO++d9/9z6hKKgRcPj1mLYFCN3ubHMq0Rga6Wih3UA
xxnECp2BXg5ZawDGQ0P59DYOaQGGpaFhzbFCjwIhd5snKWfuoHDOuo7tputeZinm
Y9pp2QCmAKD+kQPuO2tSr0QVOJO1ip/No38SkJKFwoGx3EKXSYGcwqDU6CJkdSSY
oiFh6F99GZ8abA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:45:58 2026 by rpki-client