Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
File: Cj4I7z11S8avqR-mwQAg9YUFwWE.mft (raw, json)
Hash identifier: sKRUn1sb0ug3J0zeX87NecU/QjARUQedSsskITOQovg=
Subject key identifier: 47:62:E7:41:42:72:CE:3B:79:8F:BD:A6:13:5C:82:67:9E:87:D5:B7
Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
Certificate issuer: /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Certificate serial: 019E1C7DF9D77BF3C79D1A00160E9C10E4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
Manifest number: 058C
Signing time: Tue 12 May 2026 14:01:18 +0000
Manifest this update: Tue 12 May 2026 14:01:18 +0000
Manifest next update: Wed 13 May 2026 14:01:18 +0000
Files and hashes: 1: Cj4I7z11S8avqR-mwQAg9YUFwWE.crl (hash: 1gr5prtEMHsGzfggfEKiCfCahg5K2GATeIUbzI7ctds=)
2: I09YHj-xMtJyOqy1S5-_QiKKHCM.roa (hash: Dl6s19nphOIYoXAZFraR2mc7LjS/EY8yRFQ8t5aHIJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:f9:d7:7b:f3:c7:9d:1a:00:16:0e:9c:10:e4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Validity
Not Before: May 12 14:01:18 2026 GMT
Not After : May 13 14:01:18 2026 GMT
Subject: CN=4762e7414272ce3b798fbda6135c82679e87d5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:df:48:de:49:f8:67:d5:65:64:86:42:95:
fb:f1:1e:fe:cc:d4:7e:ee:6e:67:c5:92:6f:2e:de:
b6:0f:35:1d:2e:fd:8a:89:0a:22:4a:42:20:4d:56:
c0:76:60:17:db:8b:65:32:f0:67:16:93:1e:dc:0f:
6d:a6:ba:3a:f1:6f:08:02:2c:68:08:b5:77:4b:cb:
4a:a2:cb:77:18:1b:d6:d8:86:b3:e2:83:e8:30:5d:
96:7c:38:ed:54:7e:ae:fc:53:a9:1c:4a:79:3e:c0:
37:7a:2a:b8:29:7e:26:a8:cd:14:d1:e0:a4:99:79:
2c:07:ba:a2:05:73:49:57:fb:54:f3:2d:98:6d:08:
6a:57:41:c3:f2:b3:9f:7a:b8:d3:bd:06:d0:04:e2:
5a:62:90:c3:22:44:23:01:b0:f8:8c:32:59:ec:f9:
66:8c:64:d2:89:eb:a1:a6:60:9e:9c:05:3d:2a:c1:
ac:62:d8:c1:9c:c7:4a:31:37:43:bb:5e:da:51:cc:
d5:f6:87:0f:39:0f:b5:b4:54:b5:d9:0c:76:b9:70:
36:a3:f0:5b:aa:9b:a1:1b:6a:d0:1b:3f:be:e2:5e:
67:47:89:c4:09:ef:93:f9:f1:cf:bd:07:d8:8f:5f:
20:02:9e:3e:43:c6:16:db:45:32:14:76:15:cc:db:
e8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:62:E7:41:42:72:CE:3B:79:8F:BD:A6:13:5C:82:67:9E:87:D5:B7
X509v3 Authority Key Identifier:
keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:7a:7d:ed:51:4e:57:5a:52:50:64:57:f5:f9:d3:ff:e6:51:
ed:94:41:d6:36:d6:dc:cc:2c:37:d9:e1:aa:82:bb:6c:c0:71:
97:65:3f:dc:04:51:8c:f2:6d:98:6f:ee:b0:25:43:53:7b:22:
44:1a:2d:e4:31:1a:19:08:0e:c6:39:a0:19:68:85:e3:13:52:
b2:f6:6d:65:4b:b5:04:98:1e:96:cd:14:52:0d:81:e7:f5:6d:
9e:5b:07:ef:90:98:ee:7c:5f:5c:6c:e9:15:5d:36:b3:6d:32:
36:d0:71:d5:3e:15:d9:38:20:de:8d:51:2d:63:72:08:97:ac:
59:cf:70:b3:f5:86:e4:6c:9b:29:f3:37:f4:e1:1c:34:c8:7c:
ae:0f:18:ac:8a:73:9e:4d:fe:05:b2:d1:f9:4f:09:71:5d:5a:
93:2a:88:ed:b8:c5:8f:6b:48:5e:38:ca:a9:89:0b:ee:3a:49:
72:01:1f:5d:1b:3d:3a:d3:5b:e1:ab:5c:08:24:80:ec:c8:53:
7a:ef:c3:60:0f:47:61:3a:38:49:4c:56:66:dd:2a:38:e5:df:
90:43:75:39:7e:3a:7d:01:6b:52:ea:79:8b:7d:3b:33:5d:1c:
42:22:40:f5:64:95:1e:14:e5:ad:19:a8:17:61:d0:40:6d:e1:
42:8d:d9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:00 2026 by rpki-client