Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
File: Cj4I7z11S8avqR-mwQAg9YUFwWE.mft (raw, json)
Hash identifier: z2SDyL4Vlj9WUjsb/kzzRL4FokkhuSvPaQlPqzxPHH4=
Subject key identifier: 08:21:D3:63:B0:A7:B2:5C:00:57:EA:D3:BE:25:69:E0:7A:F4:8F:A0
Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
Certificate issuer: /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Certificate serial: 019D2929A0B732008430111A2502CF69F737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
Manifest number: 050E
Signing time: Thu 26 Mar 2026 08:01:26 +0000
Manifest this update: Thu 26 Mar 2026 08:01:26 +0000
Manifest next update: Fri 27 Mar 2026 08:01:26 +0000
Files and hashes: 1: Cj4I7z11S8avqR-mwQAg9YUFwWE.crl (hash: u7gRumE716pREL3jyctBA/8U331z12LDrpiuvStdC1w=)
2: I09YHj-xMtJyOqy1S5-_QiKKHCM.roa (hash: Dl6s19nphOIYoXAZFraR2mc7LjS/EY8yRFQ8t5aHIJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:a0:b7:32:00:84:30:11:1a:25:02:cf:69:f7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Validity
Not Before: Mar 26 08:01:26 2026 GMT
Not After : Mar 27 08:01:26 2026 GMT
Subject: CN=0821d363b0a7b25c0057ead3be2569e07af48fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:69:b9:0d:0b:06:31:ad:4d:f6:c9:17:80:c6:
14:2c:60:d2:16:2d:d9:a3:7e:56:3a:14:5e:fc:da:
7c:4f:f3:1d:02:2e:03:44:94:09:0e:68:dd:50:6c:
fc:88:7c:a3:5a:4a:8a:20:7d:dd:93:c7:d3:8e:e6:
b0:0b:03:c8:d0:a2:ce:27:8b:ab:67:78:21:f1:df:
96:55:98:6e:f4:65:4a:e4:02:aa:b8:9a:25:88:75:
20:3c:f8:91:d8:bc:d7:91:1f:6d:35:fb:f8:5c:fe:
92:c7:6f:0f:20:e6:4d:4e:82:42:66:39:3b:b0:d7:
39:a9:73:b6:c5:3b:17:b1:b5:08:30:2f:e7:71:db:
22:41:42:5a:7c:d7:59:e1:1e:06:2c:ab:e3:0b:40:
10:35:f7:12:b9:7f:01:74:4d:a6:a1:45:c1:b5:1d:
73:cd:be:17:9b:8a:cb:ff:5a:44:d0:7a:ea:f8:c7:
17:6b:3e:87:03:a2:7d:05:c0:d6:a3:28:75:2b:7e:
ce:c0:e8:6d:3a:7c:79:eb:5e:8d:42:86:db:7e:ac:
f5:0a:19:52:5f:eb:37:ff:14:54:e1:8c:cc:86:df:
82:30:90:5b:1f:f9:cb:c7:ef:54:fa:54:ef:01:ff:
a3:a9:a8:00:a4:a4:25:15:34:9a:27:19:ac:e3:00:
b3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:21:D3:63:B0:A7:B2:5C:00:57:EA:D3:BE:25:69:E0:7A:F4:8F:A0
X509v3 Authority Key Identifier:
keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:66:37:9d:1b:cd:99:1e:c9:92:92:1a:72:9b:43:8a:ac:81:
d0:07:9b:db:6a:d2:69:ef:a5:5e:e3:66:c3:7d:3b:9b:8c:4c:
13:86:f3:ea:f7:4c:0e:8a:5f:a5:1c:2d:3c:ba:ba:1c:07:b7:
84:c1:3a:db:c9:2c:a9:ce:90:a0:be:aa:6a:3a:10:76:ae:4c:
a1:8e:18:bf:da:d6:3e:03:0e:4d:2d:77:33:92:aa:bf:7f:70:
b4:d3:aa:6e:fe:e0:60:84:49:bc:ed:6d:be:84:3c:f9:b8:ac:
fb:12:99:d9:1c:6d:76:78:2f:ab:6a:7e:c1:33:f3:c6:55:d5:
be:ab:db:af:0e:f6:60:a5:61:d4:4c:72:9e:50:30:48:fc:e7:
1d:fc:bd:c1:10:3d:ab:bd:a5:ab:fd:5c:b9:85:83:e5:94:22:
b0:80:91:a6:0c:36:3f:65:e7:66:62:e2:09:11:09:a6:27:c7:
51:c5:18:36:e8:eb:e3:37:67:bb:d5:33:33:ea:dc:33:b2:eb:
c3:63:19:3d:0c:e8:24:0a:a4:5f:9b:45:80:cd:92:49:48:33:
80:6e:06:37:2f:00:dc:60:2c:8e:73:7a:19:c1:8c:29:ec:50:
b5:7e:7e:d9:c1:1e:9e:8d:51:b7:17:c4:fd:46:23:e2:6f:fb:
98:28:2a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:57:57 2026 by rpki-client