Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
File: cCjsnM1thh9fGv2tAEbzPJEDugY.mft (raw, json)
Hash identifier: x8B+3IoQ0iWm65BHwjyiX0pNod2UHmFn+KAYQml3Cgc=
Subject key identifier: 7A:D5:1C:E5:6E:00:9A:CB:C8:C2:4B:B9:F1:AA:5A:69:92:A2:C7:45
Authority key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
Certificate issuer: /CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Certificate serial: 019DB2B4584BA261405E9DA068C0F5B0C2B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
Manifest number: 0A42
Signing time: Wed 22 Apr 2026 01:00:56 +0000
Manifest this update: Wed 22 Apr 2026 01:00:56 +0000
Manifest next update: Thu 23 Apr 2026 01:00:56 +0000
Files and hashes: 1: HF20xwiU_OmVlYn7AG5yVbrP7VQ.roa (hash: 0b37VardXMFgSQteic5rkAQqorX7ea/QfI9Oz3cEctk=)
2: cCjsnM1thh9fGv2tAEbzPJEDugY.crl (hash: XNfzubyjFk5jUN05yj/SfYXDgW9Ok3+gXacJKhrCIOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:b4:58:4b:a2:61:40:5e:9d:a0:68:c0:f5:b0:c2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Validity
Not Before: Apr 22 01:00:56 2026 GMT
Not After : Apr 23 01:00:56 2026 GMT
Subject: CN=7ad51ce56e009acbc8c24bb9f1aa5a6992a2c745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:18:4c:4e:ad:32:ec:64:90:af:ac:c5:61:18:
ca:a5:bb:10:6d:4b:99:1f:da:8a:e0:4d:31:40:a4:
42:95:5d:2a:7b:7b:bc:a4:3b:cc:6e:67:a6:43:e4:
c8:3b:c0:ce:fb:fc:55:a5:7b:5b:99:74:e6:20:77:
c3:cf:4b:31:03:47:67:40:4a:6b:a6:ea:66:25:6e:
4b:2d:94:e9:a1:88:e9:79:ba:1b:5b:c7:64:5a:93:
a6:4f:14:84:1c:de:01:6a:0d:d5:a9:88:4f:c1:99:
dd:6d:0b:77:45:47:b7:24:64:a8:3b:64:c3:1f:e9:
60:4e:b1:8e:e3:e2:54:48:91:66:a2:d6:f8:61:bf:
62:04:c4:37:44:be:bb:4c:f6:d4:08:0d:80:7c:29:
16:0d:26:3b:1e:39:8c:95:34:c9:29:13:c0:61:21:
f6:b6:7f:7d:bc:5f:4d:f9:29:96:ab:8a:6a:37:55:
74:a8:88:f3:53:85:15:e4:62:73:20:5a:e8:51:45:
61:4a:2d:d0:6f:d7:77:95:7c:15:5d:70:15:74:b9:
5c:60:1d:c7:93:a5:39:dd:25:5d:68:48:d1:2b:c9:
36:99:81:22:f8:c0:83:6f:fa:d8:74:ff:64:d1:64:
e4:55:80:49:8a:00:bc:ff:b4:28:b7:6f:7a:32:c3:
96:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D5:1C:E5:6E:00:9A:CB:C8:C2:4B:B9:F1:AA:5A:69:92:A2:C7:45
X509v3 Authority Key Identifier:
keyid:70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d1:9b:59:d5:5c:c9:06:14:32:76:81:39:71:0d:c8:65:d1:
b7:8b:98:4b:db:40:e5:9e:64:aa:64:13:20:e6:e2:1f:f2:53:
e7:ff:ec:05:3b:09:4b:b3:86:7d:6d:77:7b:4d:cb:83:45:a5:
58:fe:ec:51:1d:ee:31:ca:47:4d:75:b7:00:ce:ec:d8:b0:f4:
02:1a:c1:1b:44:1a:85:e6:66:b8:32:3c:9c:19:f6:e7:25:71:
51:8f:a9:dd:da:c8:17:af:f1:3e:b7:a9:f8:36:87:ba:00:f2:
92:fc:9d:22:bb:aa:15:96:bc:15:9e:21:0b:85:cc:f6:7f:b0:
a5:2a:36:d1:6c:6a:3e:10:d5:59:59:5b:64:1a:7a:80:be:7d:
6f:19:0b:91:96:86:0b:eb:6d:5f:0d:ff:5c:d7:f5:b4:14:9f:
3a:63:18:fe:7c:0b:a3:c3:2e:9c:06:08:29:ed:28:b1:0f:af:
b7:f4:c4:af:b6:7c:a2:11:d6:22:ed:f6:01:e7:91:04:81:24:
52:c2:11:3e:72:12:f9:27:3e:73:cb:35:68:83:e7:fa:86:1a:
1e:f1:59:a8:fb:64:57:14:4c:90:6b:b4:bf:48:a1:a3:e6:9e:
6e:f6:bd:31:bb:66:72:65:b6:a0:bd:89:ba:09:c5:9b:44:83:
dc:07:21:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 09:12:08 2026 by rpki-client