
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
File: Cj4I7z11S8avqR-mwQAg9YUFwWE.mft (raw, json)
Hash identifier: sBRW4rJAR+yt01k8OVkR7Vgu7lDUjOdiIxdnABZLrn0=
Subject key identifier: 8A:C8:35:F5:1B:DC:0A:3C:63:DA:98:CE:CB:22:E6:88:9B:BA:7E:32
Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
Certificate issuer: /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Certificate serial: 019F8F474C57CAFBDF69B5C37A96201D831D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
Manifest number: 064C
Signing time: Thu 23 Jul 2026 14:00:42 +0000
Manifest this update: Thu 23 Jul 2026 14:00:42 +0000
Manifest next update: Fri 24 Jul 2026 14:00:42 +0000
Files and hashes: 1: Cj4I7z11S8avqR-mwQAg9YUFwWE.crl (hash: MQHolbBbVd1ypkK5S/7OSOwjVGjBuKnE3RLx37KnSfY=)
2: I09YHj-xMtJyOqy1S5-_QiKKHCM.roa (hash: Dl6s19nphOIYoXAZFraR2mc7LjS/EY8yRFQ8t5aHIJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:4c:57:ca:fb:df:69:b5:c3:7a:96:20:1d:83:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Validity
Not Before: Jul 23 14:00:42 2026 GMT
Not After : Jul 24 14:00:42 2026 GMT
Subject: CN=8ac835f51bdc0a3c63da98cecb22e6889bba7e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4f:d8:28:bb:c8:09:96:05:ae:72:47:2f:19:
4f:9d:9b:c7:04:87:da:79:3c:eb:cd:d3:b8:d8:a2:
2a:ff:5e:91:cf:a8:44:fd:17:da:1d:e3:1c:a9:32:
02:25:c9:79:9c:cd:6a:7e:e1:43:49:b9:53:86:23:
3a:f5:28:24:17:c5:9f:63:72:ca:6f:59:e1:63:cc:
82:16:12:47:71:7d:a9:7c:b5:ae:49:b5:a5:1b:ec:
a6:16:78:42:b3:21:8a:cb:86:b5:23:15:52:df:fe:
01:a5:19:38:d5:e9:f1:a4:bd:51:06:29:88:26:8b:
da:f2:b3:4d:0d:4f:c5:56:9b:30:85:2d:3c:43:41:
f9:3e:e5:2c:9a:d7:c2:5d:83:dc:c8:2b:c4:a8:05:
fe:69:63:22:a2:94:94:64:d6:55:30:06:1e:90:09:
16:15:b6:8a:63:4e:a5:86:8a:48:b4:f8:73:29:3e:
2a:82:22:66:11:ba:f5:ef:da:7f:f7:7d:17:d9:d6:
0a:4f:60:8e:06:99:48:d2:9d:8d:e2:a1:da:fd:6b:
c7:1d:85:ec:13:41:12:8d:ed:a5:a0:0e:38:5d:01:
b9:60:4b:cf:be:7f:73:66:9d:95:cb:52:83:18:e7:
5a:52:e3:58:ca:26:e5:86:7d:2b:b0:4d:c0:37:c2:
ee:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C8:35:F5:1B:DC:0A:3C:63:DA:98:CE:CB:22:E6:88:9B:BA:7E:32
X509v3 Authority Key Identifier:
keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:95:ca:79:76:65:9b:db:ae:cd:ac:ed:29:8c:e3:f5:0a:fd:
e8:8c:e4:29:7b:c2:38:02:76:d6:f9:3d:fa:cf:2f:08:05:91:
bb:8a:b2:13:c4:82:0d:ca:ce:d7:65:e1:da:2c:c3:1c:c8:2b:
1f:84:ad:8c:87:96:09:df:0c:98:31:59:ed:31:4b:49:b5:d1:
dd:0c:fa:98:36:a2:99:d4:0b:a2:66:36:e0:5e:7f:fe:2f:a5:
21:fe:c8:fd:40:26:18:65:db:c3:b8:1c:82:4b:64:91:c6:6e:
7a:5b:54:b0:2a:38:f4:44:2b:5d:39:66:c6:b4:33:1d:68:55:
1c:31:8f:69:ad:e1:ee:e3:d1:b2:b8:07:5c:d3:0e:8a:98:6a:
e2:5e:f0:4c:bd:dc:c3:71:e7:34:0c:d6:59:6a:26:bb:58:d8:
4d:b0:a3:ad:10:6c:06:bb:44:d7:3b:76:77:29:1a:ba:f4:2a:
90:9f:66:aa:21:03:0c:30:7f:70:e2:ba:5c:07:3f:b7:db:d4:
07:a1:56:a6:4d:a4:7c:56:e6:ea:ce:03:e6:73:9d:57:10:36:
43:eb:77:01:42:e7:0a:09:c5:99:fd:85:c3:af:1d:e5:73:f1:
f5:aa:18:16:53:86:d0:9a:e9:5f:4d:be:5d:6b:5c:b7:2a:45:
29:ae:50:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:39:28 2026 by rpki-client