Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
File: CjTa4xWrmAkiVnFV55LRr0QeAEE.mft (raw, json)
Hash identifier: VjgJNT+cb7oBN3VkiPWadjKTkuobLeK+3tPCv3Y9mk8=
Subject key identifier: 7E:51:ED:1F:ED:4B:67:A3:D8:CA:52:D5:7F:99:EE:19:59:2E:96:F9
Authority key identifier: 0A:34:DA:E3:15:AB:98:09:22:56:71:55:E7:92:D1:AF:44:1E:00:41
Certificate issuer: /CN=0a34dae315ab980922567155e792d1af441e0041
Certificate serial: 019D32D09D7C113DF1B2F352879B27BC7D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjTa4xWrmAkiVnFV55LRr0QeAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
Manifest number: 53
Signing time: Sat 28 Mar 2026 05:00:25 +0000
Manifest this update: Sat 28 Mar 2026 05:00:25 +0000
Manifest next update: Sun 29 Mar 2026 05:00:25 +0000
Files and hashes: 1: CjTa4xWrmAkiVnFV55LRr0QeAEE.crl (hash: DNra6pnsI3bS+DKTkRC9S8DqahuQMO8YetawuDw/nZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjTa4xWrmAkiVnFV55LRr0QeAEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:9d:7c:11:3d:f1:b2:f3:52:87:9b:27:bc:7d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a34dae315ab980922567155e792d1af441e0041
Validity
Not Before: Mar 28 05:00:25 2026 GMT
Not After : Mar 29 05:00:25 2026 GMT
Subject: CN=7e51ed1fed4b67a3d8ca52d57f99ee19592e96f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:93:73:7b:74:14:e9:bb:02:b5:70:3c:6b:
7c:87:66:d0:28:00:d8:8c:21:9c:ff:21:bb:85:da:
8b:54:2f:04:ea:b5:1c:b1:18:57:77:45:ab:0e:35:
da:49:0f:a8:65:ab:41:ad:51:20:96:8a:d7:8d:6d:
3c:6b:9f:b0:f8:ac:a6:d2:c9:e1:8a:fc:e7:45:24:
db:94:57:29:ed:33:43:4b:80:05:c4:16:21:0b:2f:
eb:94:6b:2b:1b:64:e9:a8:e3:77:af:05:90:74:e1:
1c:ea:93:6b:c1:26:5c:b1:5e:48:c6:2c:cb:81:9d:
75:1a:66:31:f5:3a:a8:62:0f:7f:8f:d5:50:4c:33:
06:ae:96:17:5d:6b:13:c0:e8:c5:48:76:d2:a2:e4:
27:b5:c2:fe:1e:dc:49:67:e7:75:8e:21:66:84:bc:
d3:56:c2:00:72:ba:80:d7:b4:1b:61:0e:38:a1:ae:
9d:f4:a0:75:3e:56:17:0b:dc:6f:df:2e:64:d2:4c:
bb:ee:f3:70:9e:c8:cf:6d:71:bc:ba:4c:c7:b0:93:
8c:fe:c7:2d:e9:06:bf:93:01:41:8e:7e:06:e4:f3:
83:a6:b7:84:c8:e6:53:9f:a1:e9:25:b2:97:ea:68:
fc:a7:58:0e:2e:00:00:e9:1d:63:32:66:0b:53:bc:
57:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:51:ED:1F:ED:4B:67:A3:D8:CA:52:D5:7F:99:EE:19:59:2E:96:F9
X509v3 Authority Key Identifier:
keyid:0A:34:DA:E3:15:AB:98:09:22:56:71:55:E7:92:D1:AF:44:1E:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjTa4xWrmAkiVnFV55LRr0QeAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3f:ba:7f:19:bc:c7:65:ba:a9:eb:90:44:b5:87:ad:4b:75:
df:9b:1d:bc:16:db:3f:5c:e2:71:97:6b:18:33:de:58:10:83:
fe:d0:69:22:3c:3b:8a:9b:25:f3:cd:d4:5f:b1:6c:63:27:f4:
24:c3:29:5c:fb:4a:85:d7:9d:79:0e:6a:49:02:65:c1:9c:6c:
fa:7e:7d:72:c3:3f:db:1b:ea:cd:77:47:44:c3:78:6c:c9:8a:
21:f0:15:16:46:b3:98:2d:0a:f1:d0:4a:a2:a3:f9:35:19:2f:
dc:af:38:7a:db:bc:3f:72:84:73:6e:6c:42:61:03:b6:8d:f1:
76:48:c3:73:4f:d5:22:fe:e4:ce:71:fd:2b:ac:78:0a:0a:3d:
c9:ac:9e:ee:37:40:bd:37:5f:3d:86:00:ad:a5:7b:df:2c:fc:
32:55:61:5d:ec:3f:90:92:0f:11:c2:6f:e3:ce:60:78:67:30:
df:c0:b8:4f:f4:69:2f:79:b9:94:da:9a:ef:ef:f8:51:87:65:
9b:5c:37:bd:1b:71:0a:39:82:48:d2:fc:44:41:71:7c:3f:fd:
25:e7:5e:f9:f4:9a:6d:ec:9d:e2:87:a4:1f:8a:f2:87:cf:09:
08:c6:44:34:d0:6e:d6:3c:88:bd:f7:37:02:7e:71:45:35:ca:
a7:19:cb:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0y0J18ET3xsvNSh5snvH2GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzRkYWUzMTVhYjk4MDkyMjU2NzE1NWU3OTJkMWFmNDQx
ZTAwNDEwHhcNMjYwMzI4MDUwMDI1WhcNMjYwMzI5MDUwMDI1WjAzMTEwLwYDVQQD
Eyg3ZTUxZWQxZmVkNGI2N2EzZDhjYTUyZDU3Zjk5ZWUxOTU5MmU5NmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7eTc3t0FOm7ArVwPGt8h2bQKADY
jCGc/yG7hdqLVC8E6rUcsRhXd0WrDjXaSQ+oZatBrVEglorXjW08a5+w+Kym0snh
ivznRSTblFcp7TNDS4AFxBYhCy/rlGsrG2TpqON3rwWQdOEc6pNrwSZcsV5IxizL
gZ11GmYx9TqoYg9/j9VQTDMGrpYXXWsTwOjFSHbSouQntcL+HtxJZ+d1jiFmhLzT
VsIAcrqA17QbYQ44oa6d9KB1PlYXC9xv3y5k0ky77vNwnsjPbXG8ukzHsJOM/sct
6Qa/kwFBjn4G5PODpreEyOZTn6HpJbKX6mj8p1gOLgAA6R1jMmYLU7xXTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5R7R/tS2ej2MpS1X+Z7hlZLpb5MB8GA1UdIwQY
MBaAFAo02uMVq5gJIlZxVeeS0a9EHgBBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2pUYTR4V3JtQWtpVm5GVjU1TFJyMFFlQUVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85YjBiYmMtMmM0MS00NDQ4LWIxNTgt
ZWIyNDUwN2FjNjQxLzEvQ2pUYTR4V3JtQWtpVm5GVjU1TFJyMFFlQUVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS85YjBiYmMtMmM0MS00NDQ4LWIxNTgtZWIyNDUwN2FjNjQx
LzEvQ2pUYTR4V3JtQWtpVm5GVjU1TFJyMFFlQUVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATj+6fxm8
x2W6qeuQRLWHrUt135sdvBbbP1zicZdrGDPeWBCD/tBpIjw7ipsl883UX7FsYyf0
JMMpXPtKhdedeQ5qSQJlwZxs+n59csM/2xvqzXdHRMN4bMmKIfAVFkazmC0K8dBK
oqP5NRkv3K84etu8P3KEc25sQmEDto3xdkjDc0/VIv7kznH9K6x4Cgo9yaye7jdA
vTdfPYYAraV73yz8MlVhXew/kJIPEcJv485geGcw38C4T/RpL3m5lNqa7+/4UYdl
m1w3vRtxCjmCSNL8REFxfD/9Jede+fSabeyd4oekH4ryh88JCMZENNBu1jyIvfc3
An5xRTXKpxnLOg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:19:06 2026 by rpki-client