Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier: Ot09YEjIh5NHuR5V6IMJHX7goS2VMp1nUllWJ6hjYeE=
Subject key identifier: BE:86:31:C8:00:5E:D9:70:5D:35:1A:1B:4C:96:89:DE:73:5D:AD:3E
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 01A140160CD893BB75ECE3DBE3F1594E0331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 15:02:29 +0000
Manifest this update: Thu 15 Oct 2026 15:02:29 +0000
Manifest next update: Fri 16 Oct 2026 15:02:29 +0000
Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: 5248ofr6BGDaDkCtLnP5rWfqPq4jcyuYwYLVmjzLUNY=)
2: OHiJ9XzBUi42gNdFbFSonns_rq0.roa (hash: 5izRR616Szlh4ynpWzSXWkX0E9KgDJBqg2wIQA5yWeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:16:0c:d8:93:bb:75:ec:e3:db:e3:f1:59:4e:03:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: Oct 15 15:02:29 2026 GMT
Not After : Oct 16 15:02:29 2026 GMT
Subject: CN=be8631c8005ed9705d351a1b4c9689de735dad3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e7:e7:0f:73:44:7a:34:22:f7:8e:f9:aa:22:
b7:41:13:e4:12:e5:84:b3:07:14:be:2c:3c:42:22:
e0:2c:b0:8f:08:0b:fc:f1:f6:76:07:cf:f6:41:b5:
0a:76:53:ba:c0:69:3e:f7:7c:3b:8d:1c:2c:cf:e0:
48:a3:fb:6d:2c:d4:75:66:d4:12:f2:fe:3c:9d:ab:
ea:ec:38:1a:88:b2:0f:f4:b5:71:cb:5f:5c:92:8c:
77:03:61:37:93:1b:f0:ea:7d:37:3c:b6:07:c9:8d:
cd:33:83:76:5e:f2:fd:8c:db:fb:40:67:fc:53:9e:
5f:99:f9:84:f5:d0:bf:6d:b4:17:32:55:c4:9b:55:
5c:49:02:ba:cf:4f:7a:36:55:9b:bf:94:06:b9:26:
1a:34:d4:0b:1a:59:49:14:b4:a0:ca:34:a3:9b:0f:
de:b6:a7:75:9d:4d:78:8b:5a:e2:3a:02:ca:f3:95:
a3:da:93:70:3f:d6:6a:bb:7f:06:5d:72:30:40:8d:
37:5b:b1:db:6d:3b:17:3a:6f:82:67:57:5a:27:47:
de:d2:66:cb:8d:50:7d:5d:6f:86:0d:a7:8d:52:93:
fc:81:6d:08:e1:a8:5d:1c:21:ac:d9:9d:19:1f:41:
56:dc:20:6c:de:77:a7:ef:da:7a:da:48:6a:51:dc:
f3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:86:31:C8:00:5E:D9:70:5D:35:1A:1B:4C:96:89:DE:73:5D:AD:3E
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:82:02:99:cc:b1:9f:0d:03:96:de:4f:77:d5:4f:c5:fb:54:
08:c4:4c:a4:57:1f:f4:38:0e:66:cb:3a:d5:0a:a3:c3:83:80:
8b:d7:0e:86:8a:de:57:7c:17:37:8d:d2:52:23:7f:44:86:56:
51:a4:39:13:b7:03:ca:17:63:6d:45:95:03:17:8a:46:cb:13:
b7:78:d7:99:11:22:97:95:c6:83:fb:51:46:cc:f3:91:e7:2c:
b3:59:04:e0:ce:d1:06:fd:ba:22:18:3c:b0:f1:fb:9a:6e:98:
08:23:ad:2e:8a:df:68:a1:76:94:d7:93:65:07:5e:c8:82:fc:
7a:d5:45:cd:93:43:91:6c:ef:45:64:c3:eb:eb:24:5e:90:14:
d3:94:9f:a9:3a:cf:b5:31:07:c2:7e:6e:3f:96:5f:84:d5:6a:
fb:68:ae:35:8f:5f:53:31:89:6b:dd:6d:fc:b8:bb:4d:a5:8c:
5c:42:74:c2:44:75:a1:72:c1:47:d1:7e:52:78:9a:03:98:b2:
85:b0:d3:49:01:bf:87:59:a2:60:f9:22:f3:69:30:44:7b:0e:
64:65:19:60:96:cb:7b:a9:34:8a:f9:56:13:ba:67:be:7b:e1:
08:69:84:ce:2b:25:a0:4f:83:01:71:2f:80:77:04:6c:4a:6a:
33:57:29:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:56:28 2026 by rpki-client