Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
File: CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft (raw, json)
Hash identifier: wkxYu0TY8HMc6lom9p0qTpEQ+ONOeHX4Cu2o2ECSnAQ=
Subject key identifier: FC:45:CE:20:FB:18:4E:E3:AE:15:13:A0:BA:51:00:9E:D1:FC:D0:6D
Authority key identifier: 08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21
Certificate issuer: /CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
Certificate serial: 019E1C473D75A4B536AE7AC25C3C59BEDC6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
Manifest number: 0123
Signing time: Tue 12 May 2026 13:01:31 +0000
Manifest this update: Tue 12 May 2026 13:01:31 +0000
Manifest next update: Wed 13 May 2026 13:01:31 +0000
Files and hashes: 1: CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl (hash: 7GUUCEp+6IC/RNwZUZ+AcPlE2uUN7tgxJjPInftFm+M=)
2: SE7WHQ_t5xTvIw5RVXqHMUCzyhw.asa (hash: IGvw1+pEk3vTnCru3aJqTEvcp914nnvX2nmQCu0ykb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:3d:75:a4:b5:36:ae:7a:c2:5c:3c:59:be:dc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
Validity
Not Before: May 12 13:01:31 2026 GMT
Not After : May 13 13:01:31 2026 GMT
Subject: CN=fc45ce20fb184ee3ae1513a0ba51009ed1fcd06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0e:2c:16:a3:0a:84:ef:80:ca:db:15:a2:74:
49:ef:f3:d6:2c:f1:41:aa:f7:dd:d5:2f:38:14:ce:
45:6f:5d:30:96:1a:1f:07:4f:df:57:ae:60:48:32:
ea:bf:b9:cd:b5:1d:f0:9f:a6:ea:81:f6:5f:3d:f4:
b0:ef:3b:96:e0:a2:35:ac:9e:01:34:4e:fa:94:bb:
d1:54:71:c0:69:91:c4:f5:0d:bf:ef:3c:47:49:39:
c7:6e:32:a4:8b:55:f2:5e:c1:e4:45:64:04:38:3c:
15:51:a1:33:b2:1c:54:04:95:95:5a:4f:e4:88:a5:
10:92:58:9d:5c:b7:38:4f:a0:3f:5e:ef:15:30:8b:
b5:22:19:67:1c:8f:4f:f0:16:68:ef:02:58:a3:8a:
c3:1a:e2:fc:4e:09:36:ba:d1:0b:5b:b8:f1:83:b3:
e0:af:03:3f:86:06:11:bb:21:c4:bd:c5:03:11:1b:
2e:fc:6a:be:c3:f8:23:14:49:71:84:37:8a:98:aa:
73:13:50:e4:09:87:67:51:1a:b8:ac:ce:8e:24:3b:
58:ce:c0:9c:35:53:ba:37:32:49:a2:dd:fd:d1:90:
6f:b6:85:71:b9:04:a0:de:2b:a2:8b:94:eb:48:93:
55:c1:33:da:25:29:3b:27:cb:8d:19:97:b5:60:07:
98:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:45:CE:20:FB:18:4E:E3:AE:15:13:A0:BA:51:00:9E:D1:FC:D0:6D
X509v3 Authority Key Identifier:
keyid:08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:de:f1:91:20:46:71:da:25:b9:71:8f:b0:46:8f:a4:b5:65:
b3:43:12:9a:b2:98:bf:89:d0:88:eb:ac:60:74:fc:e5:54:ae:
62:94:88:b3:ff:32:f1:8c:c2:a4:47:ee:97:4f:0b:cb:3d:1a:
12:06:84:21:c8:66:37:d6:cc:0a:b8:b5:21:57:5f:1b:5a:45:
2b:ad:e3:cb:dd:f0:66:ad:a8:45:92:58:e8:b2:5c:98:69:a5:
b3:23:a1:f0:41:ec:4e:de:7c:7d:ac:19:25:82:41:8a:16:5a:
24:77:40:76:11:ae:22:6e:65:1d:72:01:cb:11:a0:d7:5a:c3:
26:99:16:34:0a:d8:17:de:01:79:52:75:22:88:5d:b2:da:55:
88:1a:1e:12:91:c7:52:b2:68:2c:dc:54:29:a2:a9:d3:41:69:
fe:34:96:40:b9:a8:d8:df:8b:e1:b0:7e:21:d3:82:b0:85:93:
23:89:7c:1f:bc:aa:08:b5:68:b6:4d:4b:d0:8f:a4:c2:98:8a:
4b:b3:c7:d7:53:23:d1:0a:aa:91:68:41:82:71:10:39:75:e5:
63:48:fb:0d:65:75:6c:50:68:0a:9d:6d:29:9d:1e:f5:40:3c:
a6:32:fa:c6:e3:11:36:88:d6:d1:d2:cc:d0:ee:75:86:0f:86:
a3:77:62:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:26:26 2026 by rpki-client