Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
File: CjTa4xWrmAkiVnFV55LRr0QeAEE.mft (raw, json)
Hash identifier: hoJg0m7xtQGNAkPqgPKm595RKzcbIYZYdn62N/uTmv8=
Subject key identifier: 9C:55:69:91:F0:0B:04:CA:95:04:37:46:16:77:55:E1:D2:38:D6:A0
Authority key identifier: 0A:34:DA:E3:15:AB:98:09:22:56:71:55:E7:92:D1:AF:44:1E:00:41
Certificate issuer: /CN=0a34dae315ab980922567155e792d1af441e0041
Certificate serial: 019F8F472DA851F1B6E37562235AA44C3B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjTa4xWrmAkiVnFV55LRr0QeAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
Manifest number: 018C
Signing time: Thu 23 Jul 2026 14:00:34 +0000
Manifest this update: Thu 23 Jul 2026 14:00:34 +0000
Manifest next update: Fri 24 Jul 2026 14:00:34 +0000
Files and hashes: 1: CjTa4xWrmAkiVnFV55LRr0QeAEE.crl (hash: q0IYWC3ez4QYOR057FIaiT83q1TyaAH80eS6RiK/gk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjTa4xWrmAkiVnFV55LRr0QeAEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:2d:a8:51:f1:b6:e3:75:62:23:5a:a4:4c:3b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a34dae315ab980922567155e792d1af441e0041
Validity
Not Before: Jul 23 14:00:34 2026 GMT
Not After : Jul 24 14:00:34 2026 GMT
Subject: CN=9c556991f00b04ca95043746167755e1d238d6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fc:c0:f5:a3:a5:ee:b7:73:bf:28:2d:8c:57:
9f:82:75:cc:87:76:3a:26:d9:d3:53:63:e2:66:32:
5f:e5:fd:76:a5:b8:33:d5:15:3e:4c:76:71:ab:47:
74:92:26:fb:90:96:fa:8d:0a:05:ed:5d:f0:84:cd:
06:73:2c:c2:9b:31:f4:f2:75:f4:c0:26:be:b6:78:
2c:e1:6c:10:3b:ec:83:49:b0:c3:0f:52:42:c0:66:
c5:df:8d:a6:04:f8:8f:9b:ec:75:4a:d2:05:27:75:
ff:56:73:9c:f1:3d:e9:65:37:59:b6:d4:d3:56:78:
93:47:6c:e2:5d:19:aa:59:04:03:c4:1f:09:e4:d9:
05:56:27:17:cf:e4:7e:3f:a1:b5:25:15:70:32:57:
1a:f4:c5:e9:9c:96:5f:bb:83:8b:6c:83:91:71:6d:
f7:7c:e8:2d:03:e5:db:17:08:32:8f:41:a4:d9:22:
a5:2f:02:77:06:7b:2e:d4:f4:a7:85:e3:34:63:7a:
8b:00:b8:95:ad:71:ed:af:2a:02:3b:10:43:55:44:
84:c1:69:35:ad:84:c2:e4:9f:5e:5b:38:0f:d6:13:
a8:6a:9d:08:11:14:48:9f:77:52:33:4f:10:48:1b:
8e:1f:b1:18:4a:1b:bf:6b:45:10:b0:a1:5d:88:07:
80:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:55:69:91:F0:0B:04:CA:95:04:37:46:16:77:55:E1:D2:38:D6:A0
X509v3 Authority Key Identifier:
keyid:0A:34:DA:E3:15:AB:98:09:22:56:71:55:E7:92:D1:AF:44:1E:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjTa4xWrmAkiVnFV55LRr0QeAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:95:c7:a4:8f:33:85:30:25:97:1f:44:7d:e7:9b:61:98:34:
60:4c:6b:6f:d4:95:cd:e5:41:a1:90:f7:67:b4:28:bf:55:0d:
18:50:d9:78:1c:9d:5e:c9:c5:58:d0:6d:42:9b:e0:75:e7:34:
6d:00:dc:91:27:00:3a:6e:65:ce:fd:82:b4:82:5c:05:46:1c:
e6:7c:e4:6c:e8:7b:76:e0:65:75:bd:9a:f4:ad:5b:ac:bb:8d:
3c:11:86:7f:28:64:73:46:f3:66:43:7c:37:94:36:ca:ad:ae:
94:1e:40:38:f2:2d:41:0a:1e:12:21:c8:50:7e:fb:fd:8f:cc:
d3:75:95:44:c2:26:69:c0:0e:29:fc:2e:91:37:be:cd:20:fe:
4c:b3:6d:bf:69:f5:bc:de:3e:7a:43:49:c5:4c:02:13:b3:2a:
75:d4:bf:a2:df:4c:ed:61:d6:fd:b1:5c:10:a4:52:b3:bf:cf:
62:d4:d3:78:af:8e:7c:98:84:1c:ef:1f:03:e2:4d:45:88:a0:
54:38:ba:a2:e1:24:e7:31:d2:e5:7a:c7:24:36:17:31:40:e8:
67:e0:3b:2d:b7:fc:7a:b2:73:51:b4:c1:a6:7b:35:53:1c:f3:
5c:91:c7:cf:30:33:77:78:df:03:01:00:0b:a8:9c:c5:f9:44:
c3:ea:22:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:20:31 2026 by rpki-client