Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
File: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft (raw, json)
Hash identifier: ovVgaVJIgKl5C+iauRfIDPQHDpbNcT9Ls0xQ8kYXUHk=
Subject key identifier: D2:29:E5:79:DC:FE:1F:73:B0:34:FB:58:0A:E7:7C:70:ED:3B:4E:81
Authority key identifier: 0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
Certificate issuer: /CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Certificate serial: 019E1C0FD20D204814ECBFD5CB65CDA34B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
Manifest number: 067B
Signing time: Tue 12 May 2026 12:00:59 +0000
Manifest this update: Tue 12 May 2026 12:00:59 +0000
Manifest next update: Wed 13 May 2026 12:00:59 +0000
Files and hashes: 1: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl (hash: EEMkr1Ctj4I19Ag/D657NyMyfE7fKZYGaDLSEE/M4HE=)
2: HhyQ1xbfi1ZT4qXLErneHVnMZKQ.roa (hash: LTQHQ2QemVphT2OwaYY6pIObkofdkSf8QmySEt23OP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:d2:0d:20:48:14:ec:bf:d5:cb:65:cd:a3:4b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Validity
Not Before: May 12 12:00:59 2026 GMT
Not After : May 13 12:00:59 2026 GMT
Subject: CN=d229e579dcfe1f73b034fb580ae77c70ed3b4e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e3:aa:12:7d:61:1a:14:ee:aa:aa:1a:d6:03:
f8:74:99:68:fe:58:e7:41:10:3e:c4:b4:d3:de:81:
24:db:8d:32:29:75:0d:f7:c3:ff:06:d6:ae:ee:0d:
69:98:a6:bb:de:42:ac:ec:cc:e0:9e:53:d0:6b:03:
01:b1:19:6c:28:2b:79:23:6a:d4:df:24:50:cc:10:
28:ba:e8:2b:ba:01:cb:30:8e:69:f2:1c:ce:23:2c:
28:85:bc:63:80:28:80:f3:e3:76:29:2a:b3:60:be:
c4:8a:46:9b:dc:2d:2c:84:05:59:35:eb:1f:36:fd:
ff:57:e1:f9:fa:5d:58:17:bf:2d:16:96:ae:b1:07:
04:07:22:3a:1f:10:5c:c0:6c:78:4e:d0:2a:5d:9b:
41:87:68:10:3e:a0:f6:1d:b9:47:6f:99:04:2d:47:
e3:95:22:d8:02:fb:a1:f2:d0:e4:d9:74:96:05:d6:
e8:a5:a6:72:46:35:cf:89:c2:7d:9e:90:65:e9:34:
2a:7f:53:ef:fb:51:12:73:0f:4f:ac:b6:3c:06:2f:
cf:53:47:42:2c:de:a2:b0:18:5b:c1:6f:b7:47:ac:
44:9d:f9:f6:26:c6:dd:56:d0:b0:69:ad:03:d1:4e:
52:1e:15:b0:24:49:dd:04:74:0c:c3:6b:be:7e:65:
3b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:29:E5:79:DC:FE:1F:73:B0:34:FB:58:0A:E7:7C:70:ED:3B:4E:81
X509v3 Authority Key Identifier:
keyid:0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:9b:4c:4a:10:1c:38:88:0b:1a:b5:45:27:fd:06:50:d1:82:
ae:78:b5:57:fa:0e:6c:69:35:1e:21:40:b3:6f:47:78:e1:9c:
5d:82:a0:45:fc:31:cd:17:f6:35:2f:12:03:7f:46:12:7c:de:
ce:8d:7c:d3:15:d6:9f:8f:26:bc:43:0c:71:6c:49:f8:88:2c:
7e:60:5a:29:d3:14:3f:f0:e0:db:b2:26:8e:10:10:28:2f:53:
ad:90:3d:07:c8:dc:99:b8:67:3f:28:4b:50:93:54:b4:d2:73:
6f:e0:c1:d4:15:72:c1:7b:3b:29:29:f3:f7:e5:f6:68:3b:ec:
94:f2:14:7e:f5:2b:eb:7c:93:59:79:e9:a8:97:dc:d4:80:37:
f5:6f:23:42:6c:35:dc:72:3d:f3:60:b2:8b:fe:63:e6:6f:20:
5f:20:6d:a6:d4:05:ef:8d:1a:56:b8:82:5e:eb:8d:fa:67:44:
51:dc:de:08:d4:7f:4c:ef:4e:02:83:29:77:9b:5f:39:9e:f7:
5e:bc:0a:c4:75:a0:71:8d:4c:dd:80:16:f1:f5:a2:3b:ab:1b:
91:1f:c5:79:0b:51:30:69:08:32:d0:b7:d4:cb:49:81:9a:34:
db:c8:5c:da:c2:4c:11:c2:5b:1e:a7:c4:91:29:80:61:93:d2:
a2:f8:e1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:38 2026 by rpki-client