Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
File: CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft (raw, json)
Hash identifier: 8AX/4FHIWU5zbcgUFp9knqtWwcUXZjam9HvTyYYNtoo=
Subject key identifier: 0A:AF:DE:C6:42:AC:9C:33:D1:2F:E5:FB:58:F2:50:96:8D:26:8F:91
Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Certificate serial: 019E1F7F32F71C8207E1AEB7BC822771701F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 04:01:30 +0000
Manifest this update: Wed 13 May 2026 04:01:30 +0000
Manifest next update: Thu 14 May 2026 04:01:30 +0000
Files and hashes: 1: CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl (hash: 3068wLYB6ojxUjax6HE2osL7AzFSae4Y4ZA3kmYWeLg=)
2: NWLF3cZVQRzG-V44eTdelLvm4lo.roa (hash: 6bvdrFIc+ZqxQD9wly/w0Ts0CN7dJNjTlyrqxS7Rwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:32:f7:1c:82:07:e1:ae:b7:bc:82:27:71:70:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Validity
Not Before: May 13 04:01:30 2026 GMT
Not After : May 14 04:01:30 2026 GMT
Subject: CN=0aafdec642ac9c33d12fe5fb58f250968d268f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0a:66:3e:bc:fd:8b:7d:67:2b:66:13:7d:30:
5e:b7:60:30:28:89:85:49:e1:b4:b2:7c:9f:1f:9d:
9a:1e:dc:ed:c7:99:d3:e3:56:08:91:60:ac:31:d5:
1b:99:5e:fe:fd:1e:0c:42:cc:ff:d1:4a:ce:ee:86:
8c:70:8a:34:68:5f:c1:35:9f:ba:a1:08:e5:e9:20:
2b:5e:ed:24:fa:0a:76:8f:ee:0d:1e:14:15:18:48:
fb:c0:47:55:e1:40:14:d0:61:92:c1:51:09:1d:09:
11:cd:eb:64:cf:3e:7e:3b:dd:5c:84:3e:88:e7:33:
c2:c4:8f:55:5e:e9:f3:32:49:69:25:43:07:57:49:
5a:ec:85:01:5f:bf:be:85:04:6d:55:0a:47:fd:64:
3f:85:fc:e4:30:60:b2:7c:b8:04:8e:e4:b5:45:a1:
87:8f:c6:7c:9b:5b:e5:83:1f:56:2b:5a:63:a8:2d:
28:b6:cc:88:25:f0:37:7b:cd:2c:c8:46:ef:96:70:
8e:d2:f5:12:18:73:9c:6b:09:b4:94:83:40:66:c6:
1f:29:b2:cb:38:c0:d6:d7:e0:ed:47:b9:2a:85:c3:
aa:58:fe:b4:49:c5:0d:a8:42:bd:c2:5e:f7:c0:d8:
ac:9f:7a:36:27:0d:be:9e:c6:3c:cc:a0:64:00:57:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AF:DE:C6:42:AC:9C:33:D1:2F:E5:FB:58:F2:50:96:8D:26:8F:91
X509v3 Authority Key Identifier:
keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:71:95:e5:12:7f:d2:38:18:f7:0b:42:f0:fe:5f:f7:c5:9d:
3e:15:24:c7:88:52:62:93:65:fa:b0:ed:c1:f8:1e:eb:3c:b9:
5f:5b:cf:a7:d7:79:7f:cc:9d:9f:71:cd:c7:33:54:3b:5b:c3:
7e:4a:98:0e:fe:a9:f7:d4:a7:98:6d:87:eb:e4:6e:88:3a:86:
c1:dd:9c:59:44:1c:49:47:5f:72:d2:fa:ce:83:e5:25:9f:ef:
d9:c2:ca:aa:60:75:88:d5:d5:e1:5f:51:ad:24:e9:2a:fb:13:
72:27:c9:07:dd:de:b1:d8:e4:36:22:b6:d3:44:9e:34:e9:44:
e7:4c:81:4b:ab:ef:63:c8:43:88:eb:a2:85:0f:c9:f5:f7:90:
94:86:34:3c:a2:07:26:16:c4:cd:26:9b:e8:45:37:5e:32:f0:
be:9e:93:e5:6e:d2:3a:c4:a2:58:18:43:a2:fc:e1:ce:34:39:
fd:bf:6d:d9:b2:04:1c:6f:29:16:64:72:7e:77:73:f4:ae:3c:
b0:ba:44:15:b3:5a:66:7c:b9:61:9b:15:c2:85:e9:86:2c:53:
08:97:3c:63:d0:ba:db:c4:c5:cf:be:8a:35:fc:c4:63:99:a0:
b1:90:76:7e:e7:e5:cb:ba:c3:a0:81:3c:4a:26:2b:23:f3:eb:
b9:9c:ef:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:23:49 2026 by rpki-client