Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
File: CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft (raw, json)
Hash identifier: kc+43zMt7NK7FBVO8SrBXTLqBeypejaEy+DrzBA0YMc=
Subject key identifier: 36:73:9E:C3:EF:95:A6:40:D1:7F:2D:1E:A7:1D:94:DD:7F:24:80:01
Authority key identifier: 08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21
Certificate issuer: /CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
Certificate serial: 019D2704490991010351EB751C89C6575E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
Manifest number: A4
Signing time: Wed 25 Mar 2026 22:01:25 +0000
Manifest this update: Wed 25 Mar 2026 22:01:25 +0000
Manifest next update: Thu 26 Mar 2026 22:01:25 +0000
Files and hashes: 1: CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl (hash: WtIYyvyV5tL9iLt38lozIkDHQYTtWfZZtXKuOeEnMxs=)
2: SE7WHQ_t5xTvIw5RVXqHMUCzyhw.asa (hash: IGvw1+pEk3vTnCru3aJqTEvcp914nnvX2nmQCu0ykb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:49:09:91:01:03:51:eb:75:1c:89:c6:57:5e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
Validity
Not Before: Mar 25 22:01:25 2026 GMT
Not After : Mar 26 22:01:25 2026 GMT
Subject: CN=36739ec3ef95a640d17f2d1ea71d94dd7f248001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ed:0e:de:f1:99:d5:4c:00:24:50:68:d6:0a:
d2:15:f8:c8:cf:cf:03:3a:8b:c3:f9:17:c5:08:0f:
e5:8b:78:f8:ed:34:21:7b:c4:26:2d:e2:07:84:16:
6c:7f:f8:77:5f:37:1c:03:f8:e9:56:ff:9f:bc:b2:
3f:80:48:24:6c:bb:2b:65:3c:23:7f:6e:57:47:38:
3e:0e:d8:55:5c:8e:41:aa:dc:78:9a:7c:af:a9:93:
f7:e8:d8:8e:f2:a9:68:39:11:c3:28:a0:40:35:d9:
03:77:3d:fc:b8:ce:79:c7:f4:bd:eb:b3:be:8b:0e:
7c:8d:1e:d6:72:54:1d:39:d4:26:2d:1b:c7:10:4f:
90:0e:12:b0:78:b7:55:f7:bf:d4:b0:92:76:cb:ed:
34:c2:5d:5f:a1:04:ab:97:a3:b5:d2:0c:0c:d4:b3:
48:c5:32:30:76:af:a0:2c:01:f2:99:94:f2:d1:5a:
15:86:48:9a:18:8e:3d:08:9c:f4:d1:e1:ac:c6:5c:
c5:8c:93:d1:83:f5:87:1c:89:b3:02:89:f2:22:cc:
d6:d7:3e:a2:25:98:40:7a:f4:1c:cb:1f:f0:ac:ce:
e2:b0:bd:48:b7:68:ff:08:5b:31:10:9a:f0:eb:a3:
e5:e4:79:74:a0:7a:bf:77:9d:ca:fc:ef:21:62:15:
62:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:73:9E:C3:EF:95:A6:40:D1:7F:2D:1E:A7:1D:94:DD:7F:24:80:01
X509v3 Authority Key Identifier:
keyid:08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c2:18:a9:f4:c1:ce:8e:bc:f3:47:63:34:ba:75:ca:df:02:
26:33:22:1b:54:18:2b:17:2b:f0:6f:22:12:f3:53:65:7d:ca:
f6:eb:54:f0:28:2e:a7:ec:71:00:a3:01:ee:07:3f:84:63:3b:
35:a8:eb:c0:9a:eb:ef:1e:ca:18:dd:c8:a1:52:e5:ff:15:da:
49:27:75:5f:82:d3:e8:24:06:c4:af:b3:e9:4a:80:e7:56:b9:
00:33:fd:a9:d0:98:12:d2:61:b7:66:3c:e7:c9:90:de:49:40:
12:a2:17:b5:dd:91:c8:af:a5:eb:d0:06:03:96:78:18:d5:74:
ff:39:e5:d0:8e:03:f9:e0:67:0d:06:b5:4c:3d:e1:bd:a1:d1:
c5:15:15:d3:3d:1b:e4:79:b0:67:cf:33:94:ae:95:fc:e9:b1:
b4:63:1a:da:7d:c7:8e:1f:71:26:ae:f6:c0:20:a6:3a:93:56:
32:b3:89:10:18:7a:ae:ac:4c:5b:ae:37:67:f0:4d:d9:71:63:
7a:a1:d6:63:e9:cb:fc:59:d6:87:29:e9:0b:d9:84:a7:72:66:
70:1f:da:50:9a:44:4a:11:d5:84:63:9c:88:9e:c6:71:36:38:
0f:2a:7c:d5:6b:9e:ed:35:f1:d5:56:77:89:da:8d:86:18:5a:
75:db:db:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:13 2026 by rpki-client