Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
File: CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft (raw, json)
Hash identifier: EhDwGaR8FXL2+SwYlFZX9SFA1KuzuRv2CUWXOhw9+Wo=
Subject key identifier: 88:33:6E:D5:D5:0A:47:85:C4:8E:35:91:83:68:8F:C5:C6:71:0A:CF
Authority key identifier: 08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21
Certificate issuer: /CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
Certificate serial: 01A0CEC800B1FD0051AD9AF00328E0A93644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
Manifest number: 0289
Signing time: Wed 23 Sep 2026 15:00:08 +0000
Manifest this update: Wed 23 Sep 2026 15:00:08 +0000
Manifest next update: Thu 24 Sep 2026 15:00:08 +0000
Files and hashes: 1: CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl (hash: XrJDvswgSh4q2nte81f3GSaOUUrNMaXi3Rlwx4FqXNM=)
2: Y1BBsDkkWgEF03wDI0HCnPosmio.asa (hash: IevDpGbfjZ+T3hHUsK1Etx0/ZUjksfcbztMdQzNnqY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:00:b1:fd:00:51:ad:9a:f0:03:28:e0:a9:36:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
Validity
Not Before: Sep 23 15:00:08 2026 GMT
Not After : Sep 24 15:00:08 2026 GMT
Subject: CN=88336ed5d50a4785c48e359183688fc5c6710acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:1d:bb:fd:f3:73:e8:31:ef:75:20:85:61:
71:7c:86:6e:91:a9:7b:e0:e1:3b:98:f7:cb:db:ed:
d6:4b:6e:3e:bd:2f:a7:20:b7:95:4d:6c:50:10:42:
3b:70:94:fe:05:e5:83:7d:c5:eb:67:93:f6:8c:0c:
d7:a9:0e:7a:e1:59:cf:75:18:14:7f:3d:fc:ea:d2:
74:27:d0:a2:47:8f:0f:58:b7:23:d1:00:a4:15:ff:
10:ce:04:fd:99:5b:ae:82:e1:a8:19:2c:54:21:d7:
8c:f4:3e:b5:36:0a:6c:bd:79:7b:e3:5f:6b:9d:50:
d2:d7:a6:af:50:0e:d6:a4:25:35:0c:2e:aa:2b:be:
1a:11:1b:27:92:cf:9e:dc:b5:92:a2:cf:8b:06:7d:
d6:21:fb:14:63:b2:94:c6:72:11:f6:72:be:a4:7d:
3f:82:64:8c:87:a2:eb:df:d9:ae:6e:8c:14:81:df:
79:32:fb:f2:d1:86:20:28:d9:d4:5d:f9:58:34:db:
85:ea:2d:06:06:4b:0a:a3:0b:dd:a3:6a:4f:6a:94:
27:f2:ad:23:20:9d:2f:c5:8a:29:cf:d0:d1:a9:41:
95:d6:8a:8a:95:7f:3f:f4:c5:46:2c:e2:cb:8a:7b:
93:74:0d:01:0f:7f:fd:fc:32:33:79:b3:93:b1:1d:
3f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:33:6E:D5:D5:0A:47:85:C4:8E:35:91:83:68:8F:C5:C6:71:0A:CF
X509v3 Authority Key Identifier:
keyid:08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5a:da:7c:0a:11:9c:92:3d:f6:50:2f:ff:a3:50:40:d0:47:
1f:7d:96:45:df:c5:ef:d1:7e:c7:0b:86:05:00:3f:3a:1b:4e:
40:e0:e4:3b:37:60:8e:78:b5:70:6c:21:0b:08:be:c4:cd:57:
b3:3c:77:8a:90:a1:93:de:ad:a8:72:7a:fe:f8:31:08:8e:43:
ba:ad:3a:72:ca:47:31:17:8c:5c:c2:2a:e8:87:41:26:64:6a:
35:0d:d3:d1:ab:5e:e1:e8:52:26:33:d9:5e:d0:9f:9e:82:20:
9c:26:c5:85:8f:4b:75:fc:c5:26:ae:df:9c:a4:ea:59:ac:41:
23:e8:1e:96:40:0d:d8:36:88:28:b1:0f:a4:1f:eb:f5:bd:89:
c9:90:70:bf:43:68:9b:4f:1e:61:60:8c:df:6d:31:d0:a8:6b:
65:1d:89:a9:87:a1:6b:0d:1b:13:0a:03:b5:fd:f9:34:34:d1:
37:48:95:c4:50:4f:ac:83:d3:35:8b:d4:e1:94:2d:02:95:14:
11:b0:e3:0f:bb:c3:5d:db:f1:0a:be:15:49:7e:6e:44:bd:61:
2c:fd:bc:a9:ec:a0:1e:1d:a0:1b:04:4f:1e:13:ec:18:a9:46:
fc:18:64:ce:95:07:e9:65:d7:4e:a0:78:f7:82:55:8f:ab:63:
8a:d8:4f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:06:01 2026 by rpki-client