Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
File: cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft (raw, json)
Hash identifier: T3XyY+s+VTqHdxbqqOHCdg70XU5pcBlrZKoeJKtjGsM=
Subject key identifier: 10:78:B2:1E:CD:00:5F:50:27:C3:50:9E:32:E1:A1:BC:12:EC:A6:60
Authority key identifier: 72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
Certificate issuer: /CN=7238fbfea5768479c86300906e74eb254dcb5c69
Certificate serial: 019D2A04E02C124D9A1F72A3A22389743108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
Manifest number: 0D5D
Signing time: Thu 26 Mar 2026 12:00:55 +0000
Manifest this update: Thu 26 Mar 2026 12:00:55 +0000
Manifest next update: Fri 27 Mar 2026 12:00:55 +0000
Files and hashes: 1: HicIDZMbcNLp_sFaOT70NM1dk-A.roa (hash: oFoTMWe4jG5kyZXaz3ugU3TiaWlqRkipFfUCxRN/kLw=)
2: cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl (hash: 93MQM0cd5w4dCKC0ehMqZO2tliJUSM0L4dPUctxkshM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:e0:2c:12:4d:9a:1f:72:a3:a2:23:89:74:31:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7238fbfea5768479c86300906e74eb254dcb5c69
Validity
Not Before: Mar 26 12:00:55 2026 GMT
Not After : Mar 27 12:00:55 2026 GMT
Subject: CN=1078b21ecd005f5027c3509e32e1a1bc12eca660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d4:4f:be:57:35:72:ec:e1:c8:ea:1f:98:75:
46:2f:ea:e5:fd:d7:26:a0:7c:38:b3:06:d0:ab:47:
1e:f1:83:e7:a2:20:93:5f:74:b3:49:39:fb:25:07:
1d:8c:1d:4d:f9:ef:5c:95:10:f6:d6:6b:c2:67:7d:
68:f5:e6:dd:6f:73:c5:95:1d:83:31:ce:d9:7d:8b:
44:f9:ec:f7:d9:4c:7a:96:98:83:df:21:38:c3:c8:
f0:af:3f:ef:f0:72:16:7e:bb:cf:53:7b:71:a5:73:
32:dc:11:20:1f:63:8c:09:e7:ac:4b:f1:72:0e:d8:
88:bc:c8:5c:11:6f:28:2f:7b:d2:3b:c7:05:2b:03:
ca:a4:22:0e:2d:47:2c:ad:8d:d6:61:53:2c:17:a7:
10:55:f0:f9:59:35:cb:f4:ac:f0:a5:4c:f2:6f:a0:
08:c6:4d:c0:34:75:3f:66:9d:68:41:1c:0b:e6:25:
0a:52:59:6e:46:0f:7b:26:55:2d:ec:d5:43:59:79:
bb:40:85:c7:17:da:6f:dd:7e:42:e9:d1:c9:99:81:
30:16:ac:98:87:4a:6d:a8:7b:b2:50:7a:68:26:69:
8f:58:6f:f9:47:3f:17:1a:3e:39:76:e1:33:83:d2:
36:68:57:ba:6d:ac:45:d1:ea:b5:47:04:01:93:00:
1b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:78:B2:1E:CD:00:5F:50:27:C3:50:9E:32:E1:A1:BC:12:EC:A6:60
X509v3 Authority Key Identifier:
keyid:72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:ad:fa:4b:fa:76:a0:48:26:6d:d2:12:1e:4b:be:f1:76:e3:
16:c9:b8:76:52:17:d4:33:70:da:95:67:a7:db:97:b6:9a:11:
cb:64:04:3e:a5:77:24:f4:f7:a1:86:d6:6a:a1:68:85:82:d8:
3e:ca:0d:26:af:e9:9b:26:8b:43:e4:28:24:e9:28:0f:fc:29:
e1:b8:dc:ab:96:92:15:ce:ae:45:0c:04:ba:92:8d:7b:d4:a0:
da:49:03:c0:0c:fc:b9:a7:02:a6:96:7e:19:dd:01:30:e5:57:
a9:d9:4b:b2:ca:6b:d9:9f:5a:89:31:45:30:ee:02:d2:07:2f:
1c:e8:53:31:cd:ca:f2:c9:4e:05:09:b3:9f:7d:78:4f:7a:07:
bb:5f:07:11:f4:a2:62:1d:e6:17:88:45:2f:8f:26:39:44:f5:
2b:3d:08:7f:bc:bc:46:14:e5:ef:3b:29:33:40:19:29:d3:65:
7c:7b:66:38:4f:06:f0:75:0c:3c:cd:71:1b:a6:e0:e9:de:f4:
ec:7d:d8:ee:eb:2d:d8:19:4d:d0:6b:50:f3:8a:88:14:3f:e5:
3e:91:45:53:71:2d:88:26:bd:39:cb:88:96:07:64:06:61:d7:
be:05:01:01:dc:cc:71:60:7d:2b:2c:fc:fe:58:03:f6:09:a2:
b8:93:4f:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBOAsEk2aH3KjoiOJdDEIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMzhmYmZlYTU3Njg0NzljODYzMDA5MDZlNzRlYjI1NGRj
YjVjNjkwHhcNMjYwMzI2MTIwMDU1WhcNMjYwMzI3MTIwMDU1WjAzMTEwLwYDVQQD
EygxMDc4YjIxZWNkMDA1ZjUwMjdjMzUwOWUzMmUxYTFiYzEyZWNhNjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdRPvlc1cuzhyOofmHVGL+rl/dcm
oHw4swbQq0ce8YPnoiCTX3SzSTn7JQcdjB1N+e9clRD21mvCZ31o9ebdb3PFlR2D
Mc7ZfYtE+ez32Ux6lpiD3yE4w8jwrz/v8HIWfrvPU3txpXMy3BEgH2OMCeesS/Fy
DtiIvMhcEW8oL3vSO8cFKwPKpCIOLUcsrY3WYVMsF6cQVfD5WTXL9KzwpUzyb6AI
xk3ANHU/Zp1oQRwL5iUKUlluRg97JlUt7NVDWXm7QIXHF9pv3X5C6dHJmYEwFqyY
h0ptqHuyUHpoJmmPWG/5Rz8XGj45duEzg9I2aFe6baxF0eq1RwQBkwAbLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBB4sh7NAF9QJ8NQnjLhobwS7KZgMB8GA1UdIwQY
MBaAFHI4+/6ldoR5yGMAkG506yVNy1xpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2pqN19xVjJoSG5JWXdDUWJuVHJKVTNMWEdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mYjIyYWItYjU0Ni00MDcxLWJlYjEt
YmUxMGU4YjRhMDBlLzEvY2pqN19xVjJoSG5JWXdDUWJuVHJKVTNMWEdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9mYjIyYWItYjU0Ni00MDcxLWJlYjEtYmUxMGU4YjRhMDBl
LzEvY2pqN19xVjJoSG5JWXdDUWJuVHJKVTNMWEdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx636S/p2
oEgmbdISHku+8XbjFsm4dlIX1DNw2pVnp9uXtpoRy2QEPqV3JPT3oYbWaqFohYLY
PsoNJq/pmyaLQ+QoJOkoD/wp4bjcq5aSFc6uRQwEupKNe9Sg2kkDwAz8uacCppZ+
Gd0BMOVXqdlLsspr2Z9aiTFFMO4C0gcvHOhTMc3K8slOBQmzn314T3oHu18HEfSi
Yh3mF4hFL48mOUT1Kz0If7y8RhTl7zspM0AZKdNlfHtmOE8G8HUMPM1xG6bg6d70
7H3Y7ust2BlN0GtQ84qIFD/lPpFFU3EtiCa9OcuIlgdkBmHXvgUBAdzMcWB9Kyz8
/lgD9gmiuJNP4Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:32 2026 by rpki-client