Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
File: cCjsnM1thh9fGv2tAEbzPJEDugY.mft (raw, json)
Hash identifier: DLhn5LKdeDIH3sg5C6XAPU6hkE/0HlPYhqvlwmF7TRs=
Subject key identifier: D6:37:C6:7E:92:67:24:6E:4D:9E:FE:AE:14:BF:FA:8E:D4:D7:EA:50
Authority key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
Certificate issuer: /CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Certificate serial: 019E9C60D66CB87ABC2755A111299F7C2172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
Manifest number: 0ABB
Signing time: Sat 06 Jun 2026 10:00:52 +0000
Manifest this update: Sat 06 Jun 2026 10:00:52 +0000
Manifest next update: Sun 07 Jun 2026 10:00:52 +0000
Files and hashes: 1: HF20xwiU_OmVlYn7AG5yVbrP7VQ.roa (hash: 0b37VardXMFgSQteic5rkAQqorX7ea/QfI9Oz3cEctk=)
2: cCjsnM1thh9fGv2tAEbzPJEDugY.crl (hash: XNKKy+CwXz/IIxgc9Wrqp0oqJd7pK5mIJ+hDpLMl7mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:60:d6:6c:b8:7a:bc:27:55:a1:11:29:9f:7c:21:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Validity
Not Before: Jun 6 10:00:52 2026 GMT
Not After : Jun 7 10:00:52 2026 GMT
Subject: CN=d637c67e9267246e4d9efeae14bffa8ed4d7ea50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:a6:f4:b4:68:cf:10:6a:38:86:ab:8e:d0:
78:9c:57:df:5b:df:45:ed:d8:8c:47:8b:26:e4:10:
74:a9:7d:cf:a6:70:f6:4d:f8:e8:41:2f:09:f1:57:
12:50:10:34:1e:dd:9f:db:5d:91:d5:8c:a8:3f:9a:
ed:3b:d8:e7:c1:c9:6b:cd:1d:5e:65:cd:5b:da:77:
25:cd:cc:c6:c4:72:0b:a3:ce:4f:ab:60:0e:77:7a:
0a:44:9a:14:ea:9b:70:7e:3f:b2:aa:ce:3e:6a:c2:
3c:a5:f8:2d:78:97:aa:b8:64:c2:9c:db:54:70:8f:
9a:59:d2:e3:15:eb:94:61:bf:2c:20:36:a9:a4:d2:
aa:09:9f:94:93:34:d7:91:3a:22:7e:bd:bd:c5:f2:
da:33:e1:f9:37:94:4d:58:87:ab:ad:7a:4d:92:ac:
d7:1e:89:1d:16:d6:58:2c:d2:05:56:f0:fd:b4:c7:
03:03:3a:13:06:f6:ef:4a:bd:65:6e:ce:07:32:48:
4a:5d:6d:84:5d:8d:e9:36:95:d1:a4:3e:63:56:79:
e3:ff:57:ec:14:9c:21:13:b5:88:27:61:44:d5:62:
96:f6:21:12:8f:0e:2d:93:c4:81:56:55:e8:0e:5e:
ce:52:66:46:e4:37:47:1e:58:77:cd:b4:af:03:f1:
7a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:37:C6:7E:92:67:24:6E:4D:9E:FE:AE:14:BF:FA:8E:D4:D7:EA:50
X509v3 Authority Key Identifier:
keyid:70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8f:8a:25:c4:80:84:db:2c:31:ca:dc:31:2d:06:5c:1c:46:
d6:24:97:0b:9d:2b:03:f7:02:e4:f5:3a:01:03:08:b4:db:55:
ae:4d:28:ff:e5:00:5e:10:3e:d3:1e:7a:8c:f7:00:39:4b:4d:
cc:86:a2:6d:b0:13:0f:d5:c5:76:67:93:18:cd:cc:43:fd:6c:
fd:cb:cb:b4:86:39:c0:0f:fe:87:8d:04:e3:97:59:e7:37:0c:
82:b9:b1:04:da:c0:92:65:07:65:ae:d4:34:d8:ec:d7:87:3b:
a3:05:0e:05:4d:bb:1f:5e:35:80:41:b6:d7:9f:20:13:3c:e0:
c2:15:dc:a0:59:f0:7c:c9:f0:87:09:33:4a:e5:15:9d:a9:18:
3b:7a:2d:e0:8b:aa:3a:11:35:00:17:56:a5:a5:59:33:3e:7d:
48:10:88:8a:02:98:0e:40:4c:78:65:89:f7:20:c4:72:86:cb:
45:3e:01:10:02:88:0e:1e:8f:6e:07:ae:a0:6c:45:98:e7:7d:
e6:8d:2c:71:fb:00:b7:7b:44:71:ee:61:cc:c7:61:74:96:82:
ee:86:f8:e1:1f:5e:30:e5:68:33:af:c8:87:ba:86:3e:cb:3d:
30:bf:4b:36:65:e6:43:d6:e6:32:d7:14:4f:b8:4c:0c:4c:36:
6d:9a:97:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:34:33 2026 by rpki-client