Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
File: CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft (raw, json)
Hash identifier: pvEAYAOnCb0VxekBlT/QYOkoTnxJHS5QQUaFs717X8A=
Subject key identifier: CA:86:BC:6A:B6:EB:AA:B7:F6:9D:4A:21:4E:E4:78:89:2C:7A:BA:E6
Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Certificate serial: 019D284E179F79A31E8695C5A5E385710EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 04:01:39 +0000
Manifest this update: Thu 26 Mar 2026 04:01:39 +0000
Manifest next update: Fri 27 Mar 2026 04:01:39 +0000
Files and hashes: 1: CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl (hash: TmwsFIhKEtO1UuCPDAEd40DVNc5GmUbA/NX5/bAL9AA=)
2: NWLF3cZVQRzG-V44eTdelLvm4lo.roa (hash: 6bvdrFIc+ZqxQD9wly/w0Ts0CN7dJNjTlyrqxS7Rwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:17:9f:79:a3:1e:86:95:c5:a5:e3:85:71:0e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Validity
Not Before: Mar 26 04:01:39 2026 GMT
Not After : Mar 27 04:01:39 2026 GMT
Subject: CN=ca86bc6ab6ebaab7f69d4a214ee478892c7abae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b6:01:7e:69:ba:7f:95:62:24:72:59:c9:f9:
af:2a:83:b2:c2:2b:91:42:9f:c2:28:28:23:f6:b3:
0d:a7:5c:4e:d7:ce:00:cf:77:ae:28:86:a5:bf:90:
2c:b8:90:88:1e:a1:25:1f:c4:a2:c9:20:61:13:09:
6c:9f:0c:63:d1:47:2b:71:3e:d0:05:38:26:6a:dc:
7e:69:3a:9f:25:36:98:39:1f:21:c7:f4:b6:4c:f9:
5e:8a:2d:63:c5:f5:e1:76:9a:ae:07:bf:97:16:22:
a6:2c:66:1d:88:09:e1:6c:9e:7b:75:8e:ec:98:ec:
49:44:61:81:04:2b:9c:89:d5:86:38:20:ff:95:e3:
9d:1a:bd:52:d4:f1:12:bd:da:b6:a9:ba:af:b0:48:
e0:f8:c8:f3:b1:2b:02:3e:21:ed:ab:c4:a9:fb:3d:
c4:47:a3:65:21:2c:fb:be:1c:c2:25:ef:2f:d7:ac:
1b:2a:a7:45:b2:4f:b6:fd:12:e9:de:b1:1c:0a:09:
cf:db:b5:97:83:a5:b0:9e:86:08:84:7a:33:03:7e:
7e:e5:9a:f0:44:10:fa:87:0b:2a:0e:9a:4a:e1:5c:
1f:4c:94:f2:44:3b:da:b0:e3:ae:2e:88:aa:40:98:
81:04:c2:17:c7:f8:b2:3b:a4:c8:57:55:c4:54:dc:
85:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:86:BC:6A:B6:EB:AA:B7:F6:9D:4A:21:4E:E4:78:89:2C:7A:BA:E6
X509v3 Authority Key Identifier:
keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e2:4e:ac:ab:29:7e:eb:59:bf:2e:6f:3b:f0:09:73:6a:90:
bc:37:4d:c3:54:29:8f:48:51:2e:39:00:70:29:e4:a0:41:d5:
23:33:95:e0:ef:c0:1c:f3:69:bc:e4:d3:8a:f5:6e:f8:1c:91:
3d:a6:57:c6:fc:29:de:11:a4:5f:e5:b4:21:7c:48:97:53:a2:
0e:b1:64:6e:e7:d2:42:3d:da:2f:7b:9e:40:7e:6f:a3:a9:5b:
aa:6a:80:25:12:94:c5:49:ac:71:dc:66:c8:11:c4:b1:48:36:
cd:de:d0:24:c4:23:6e:5d:73:ea:4c:e5:41:24:4d:b8:92:c5:
f8:6f:ab:7f:58:82:6f:e8:5f:db:f8:59:9c:23:80:9d:31:4d:
73:67:29:ff:bc:de:2f:4f:69:99:f9:c8:44:55:1e:17:83:65:
61:95:c5:f1:e9:dd:5f:96:04:ef:f3:41:3c:7a:41:91:2f:15:
ef:9f:15:f7:7d:74:14:da:ab:20:14:ba:61:f1:50:fe:73:65:
fd:cf:f7:04:86:3c:be:18:c6:c1:10:5a:cc:24:6d:96:64:9d:
28:6a:89:d4:95:f4:fe:13:22:ab:6c:99:d2:a9:14:5e:a1:05:
f9:2a:d4:ec:3c:00:1b:0b:cc:0e:c4:d6:ba:ee:7d:67:d6:35:
b6:34:6b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:49 2026 by rpki-client