Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
File: CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft (raw, json)
Hash identifier: XVTL0TaNQ+FXp7iDj05Nonm3hOwUQlQ/smviFCLR1KE=
Subject key identifier: EC:71:25:96:26:23:F8:C3:BD:0F:29:6B:DB:7C:23:12:F2:20:8A:F5
Authority key identifier: 08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21
Certificate issuer: /CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
Certificate serial: 019F90232B7C663E452FA265BAA0CD58E2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
Manifest number: 01E4
Signing time: Thu 23 Jul 2026 18:00:51 +0000
Manifest this update: Thu 23 Jul 2026 18:00:51 +0000
Manifest next update: Fri 24 Jul 2026 18:00:51 +0000
Files and hashes: 1: CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl (hash: YEDgUy1djroeldonlA2p6BrdPE0RoTzAdq/u9/wZqC0=)
2: Y1BBsDkkWgEF03wDI0HCnPosmio.asa (hash: IevDpGbfjZ+T3hHUsK1Etx0/ZUjksfcbztMdQzNnqY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:2b:7c:66:3e:45:2f:a2:65:ba:a0:cd:58:e2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
Validity
Not Before: Jul 23 18:00:51 2026 GMT
Not After : Jul 24 18:00:51 2026 GMT
Subject: CN=ec7125962623f8c3bd0f296bdb7c2312f2208af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:2b:5c:11:8d:e8:81:d6:f3:c8:e7:02:75:
3b:a5:be:84:2f:06:fa:bc:5d:20:d5:63:b0:9c:f1:
0e:f2:56:28:1e:2e:7e:a6:4b:c6:b2:1f:a6:03:41:
4f:c7:cb:2e:fe:4d:fd:51:ef:da:48:00:69:9b:7a:
66:5c:7e:b3:ac:ea:3e:b3:8a:bd:c7:7a:6d:30:97:
5f:b4:c6:c0:67:65:06:2e:22:67:7f:b5:5a:da:c8:
f2:a2:d2:f7:7c:21:80:4d:0b:5e:0d:01:a3:70:7b:
46:fb:ee:51:e2:b5:86:f0:06:24:1a:f8:0e:ad:4c:
e2:c3:8a:0c:8c:1e:55:2d:72:47:25:3c:f0:fa:63:
e3:87:bb:85:ce:a1:f6:20:c1:66:08:ea:70:e6:98:
d8:27:00:47:32:ea:3b:1d:5b:8e:d0:e0:29:22:cf:
e2:d2:60:ff:a2:ae:87:6d:54:13:5e:d0:d0:32:22:
4c:83:c7:bf:e5:29:e4:aa:ee:18:c4:c5:ac:52:4b:
ab:25:a7:92:25:ce:f6:28:79:10:a4:3e:cb:1c:e3:
d5:59:80:ee:09:25:28:56:31:32:f7:68:b6:cf:8c:
23:67:5d:82:83:b4:ab:f3:cd:51:37:7a:bc:8c:c2:
79:2c:9a:d7:36:cc:19:f7:77:37:b9:82:5a:91:28:
1e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:71:25:96:26:23:F8:C3:BD:0F:29:6B:DB:7C:23:12:F2:20:8A:F5
X509v3 Authority Key Identifier:
keyid:08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:28:e1:64:5f:9d:8e:63:c1:2d:22:9b:d7:07:aa:28:c1:32:
83:db:39:8e:91:0a:0c:75:18:6e:3c:32:bf:a2:5f:36:1c:f7:
aa:c1:b7:65:b9:1a:4b:39:b7:20:6b:77:50:34:87:16:bc:f0:
cb:2a:77:e4:a2:42:65:14:40:f8:3c:02:85:58:4b:2d:fb:a8:
48:07:aa:0f:0d:3b:07:c8:f5:b9:bf:fa:4f:a0:15:46:3b:f5:
45:10:b1:db:5c:cf:4a:c2:a9:70:3d:bf:28:06:65:f4:71:fe:
44:ae:74:a6:8a:5d:a4:b1:a7:58:1e:fa:6f:97:86:18:2d:dd:
74:3d:e0:59:15:61:b4:bc:23:6a:3b:88:04:08:86:ce:cc:f2:
e2:62:c0:64:31:41:a6:21:17:3a:3d:ff:a4:90:a7:fc:93:85:
0a:11:9d:5a:11:44:6c:c0:20:0e:3f:a8:b9:ce:55:83:66:d7:
11:75:0a:8a:57:50:07:33:c8:9d:e1:9e:ee:8d:77:b6:fe:83:
8e:34:28:66:b3:18:a8:c8:17:90:4e:db:6a:80:50:ca:ed:4e:
2c:c7:81:83:af:7c:48:81:3e:62:5d:a3:06:40:fb:eb:7a:0c:
17:a9:90:82:1c:c4:98:ef:07:90:91:2d:89:4b:f5:43:b5:48:
17:a8:9a:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIyt8Zj5FL6JluqDNWOLKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OWI0ZDZmN2EwYTMzYjAxODA0MTFlZDc0Zjg3YTdjZmVk
OTY1MjEwHhcNMjYwNzIzMTgwMDUxWhcNMjYwNzI0MTgwMDUxWjAzMTEwLwYDVQQD
EyhlYzcxMjU5NjI2MjNmOGMzYmQwZjI5NmJkYjdjMjMxMmYyMjA4YWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArycrXBGN6IHW88jnAnU7pb6ELwb6
vF0g1WOwnPEO8lYoHi5+pkvGsh+mA0FPx8su/k39Ue/aSABpm3pmXH6zrOo+s4q9
x3ptMJdftMbAZ2UGLiJnf7Va2sjyotL3fCGATQteDQGjcHtG++5R4rWG8AYkGvgO
rUziw4oMjB5VLXJHJTzw+mPjh7uFzqH2IMFmCOpw5pjYJwBHMuo7HVuO0OApIs/i
0mD/oq6HbVQTXtDQMiJMg8e/5Snkqu4YxMWsUkurJaeSJc72KHkQpD7LHOPVWYDu
CSUoVjEy92i2z4wjZ12Cg7Sr881RN3q8jMJ5LJrXNswZ93c3uYJakSgecwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxxJZYmI/jDvQ8pa9t8IxLyIIr1MB8GA1UdIwQY
MBaAFAibTW96CjOwGAQR7XT4enz+2WUhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0p0TmIzb0tNN0FZQkJIdGRQaDZmUDdaWlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wOTcwMzQtMDk1My00YWI2LTkxYzIt
YzUwMDlhYjFmZGFmLzEvQ0p0TmIzb0tNN0FZQkJIdGRQaDZmUDdaWlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wOTcwMzQtMDk1My00YWI2LTkxYzItYzUwMDlhYjFmZGFm
LzEvQ0p0TmIzb0tNN0FZQkJIdGRQaDZmUDdaWlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAijhZF+d
jmPBLSKb1weqKMEyg9s5jpEKDHUYbjwyv6JfNhz3qsG3ZbkaSzm3IGt3UDSHFrzw
yyp35KJCZRRA+DwChVhLLfuoSAeqDw07B8j1ub/6T6AVRjv1RRCx21zPSsKpcD2/
KAZl9HH+RK50popdpLGnWB76b5eGGC3ddD3gWRVhtLwjajuIBAiGzszy4mLAZDFB
piEXOj3/pJCn/JOFChGdWhFEbMAgDj+ouc5Vg2bXEXUKildQBzPIneGe7o13tv6D
jjQoZrMYqMgXkE7baoBQyu1OLMeBg698SIE+Yl2jBkD763oMF6mQghzEmO8HkJEt
iUv1Q7VIF6iaPg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:06:02 2026 by rpki-client