Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier: C3JOYZT7SusfpUZ9cGzdwP7yyUxHkNepb4kpF0nVbfQ=
Subject key identifier: 99:D3:41:83:98:AC:E8:B2:97:20:87:D9:55:CF:36:7C:83:94:58:3A
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 01A001703110EAE361505D7859E25F7EE639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 18:02:04 +0000
Manifest this update: Fri 14 Aug 2026 18:02:04 +0000
Manifest next update: Sat 15 Aug 2026 18:02:04 +0000
Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: 6WecdI8wxeR4b2PzvRMv+JvGOm1SK5zLTzHI3bXzisE=)
2: OHiJ9XzBUi42gNdFbFSonns_rq0.roa (hash: 5izRR616Szlh4ynpWzSXWkX0E9KgDJBqg2wIQA5yWeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:70:31:10:ea:e3:61:50:5d:78:59:e2:5f:7e:e6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: Aug 14 18:02:04 2026 GMT
Not After : Aug 15 18:02:04 2026 GMT
Subject: CN=99d3418398ace8b2972087d955cf367c8394583a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:af:96:57:b3:e5:6b:06:4d:13:9c:74:50:
92:b7:c2:0e:5d:80:f8:d4:ba:48:cb:4b:48:06:e5:
46:84:63:d3:0b:3f:ed:45:6e:ae:91:14:59:e9:9e:
4d:70:4c:d8:c1:b5:1f:d7:1d:97:38:fe:d6:59:73:
84:32:a5:6d:77:04:8e:83:04:2a:ac:a5:3c:31:d1:
e6:c4:89:8a:2e:34:58:c4:ad:ee:a8:5d:aa:91:c6:
83:1e:09:78:b0:41:ce:2d:52:22:f8:08:ca:21:ec:
27:ae:cc:e4:27:57:76:54:29:6c:c6:03:cc:f7:eb:
b9:19:b3:a3:35:e5:b4:1d:ee:15:ea:6f:4f:e1:42:
93:f5:c7:ba:db:04:23:6b:1f:d6:eb:a8:ab:9b:d0:
01:9e:88:2d:97:fb:e9:26:46:af:55:95:7d:1b:06:
d0:df:c3:f4:68:5c:ca:91:e3:83:6e:b1:1f:3e:95:
8f:26:73:51:fe:4a:0e:87:34:71:ee:21:e5:f8:c7:
ec:44:2d:6b:f2:14:df:0a:95:67:cf:1e:ac:05:d5:
c0:76:c5:f5:7e:b1:0d:9a:fd:f9:9a:70:18:f5:7b:
c2:2e:2c:ab:92:d6:2e:9a:71:89:50:03:02:cc:f1:
86:2a:a3:87:0d:fd:4f:a0:55:26:72:53:52:8a:b7:
95:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D3:41:83:98:AC:E8:B2:97:20:87:D9:55:CF:36:7C:83:94:58:3A
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:cd:f9:a4:c5:a5:f8:b6:14:88:4a:5c:6f:b7:e7:0e:7c:8e:
87:34:a4:74:f3:bf:f4:05:ef:bb:ca:da:47:d2:f9:8d:c8:90:
2d:e0:9a:86:b8:1e:02:68:cd:d2:90:7f:39:c6:73:02:4c:04:
a7:80:71:b2:5d:2f:a8:ae:73:93:eb:ea:9f:fa:5b:46:42:f9:
a6:1d:10:7f:b2:c3:c6:af:ab:8e:21:82:c3:a7:42:8d:bc:be:
98:13:58:97:0b:60:1f:75:a9:cb:4c:c6:92:3b:f4:ff:d0:1f:
2e:c5:bb:c8:bb:4c:4a:2b:af:aa:96:b8:8a:d8:82:e2:0e:78:
5b:c8:a0:77:6a:34:d4:e4:c8:03:55:0e:20:c8:f5:95:5e:c5:
76:0a:8a:01:2f:12:80:6b:6a:04:2e:8c:88:41:7c:b8:af:2c:
1b:0b:e9:d4:2f:4a:26:c9:63:4b:79:ad:9f:1d:d9:af:31:99:
7b:02:3f:20:ff:49:e9:cf:0f:cf:25:f6:71:99:dc:43:5a:fd:
da:52:c5:2e:ac:0f:93:5b:2e:0d:9d:c3:8f:9f:98:ce:3d:7c:
9e:31:25:ac:56:4b:9d:f9:07:6b:01:96:81:69:b2:1c:7d:39:
1d:09:5c:bd:99:93:ec:32:37:6d:30:c6:fa:a2:fb:76:10:0d:
67:25:dd:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABcDEQ6uNhUF14WeJffuY5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OWJiYjA5YTVmYmVmNjEzNWMyZDkyMGJmMjdiYjYxZjVj
MmUwOWQwHhcNMjYwODE0MTgwMjA0WhcNMjYwODE1MTgwMjA0WjAzMTEwLwYDVQQD
Eyg5OWQzNDE4Mzk4YWNlOGIyOTcyMDg3ZDk1NWNmMzY3YzgzOTQ1ODNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH+vllez5WsGTROcdFCSt8IOXYD4
1LpIy0tIBuVGhGPTCz/tRW6ukRRZ6Z5NcEzYwbUf1x2XOP7WWXOEMqVtdwSOgwQq
rKU8MdHmxImKLjRYxK3uqF2qkcaDHgl4sEHOLVIi+AjKIewnrszkJ1d2VClsxgPM
9+u5GbOjNeW0He4V6m9P4UKT9ce62wQjax/W66irm9ABnogtl/vpJkavVZV9GwbQ
38P0aFzKkeODbrEfPpWPJnNR/koOhzRx7iHl+MfsRC1r8hTfCpVnzx6sBdXAdsX1
frENmv35mnAY9XvCLiyrktYumnGJUAMCzPGGKqOHDf1PoFUmclNSireVOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnTQYOYrOiylyCH2VXPNnyDlFg6MB8GA1UdIwQY
MBaAFAibuwml++9hNcLZIL8nu2H1wuCdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0p1N0NhWDc3MkUxd3RrZ3Z5ZTdZZlhDNEowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC81Y2NiOGYtNTE0OC00NzA2LWEwNDAt
MmY5YjAwZmRjNWQzLzEvQ0p1N0NhWDc3MkUxd3RrZ3Z5ZTdZZlhDNEowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC81Y2NiOGYtNTE0OC00NzA2LWEwNDAtMmY5YjAwZmRjNWQz
LzEvQ0p1N0NhWDc3MkUxd3RrZ3Z5ZTdZZlhDNEowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoM35pMWl
+LYUiEpcb7fnDnyOhzSkdPO/9AXvu8raR9L5jciQLeCahrgeAmjN0pB/OcZzAkwE
p4Bxsl0vqK5zk+vqn/pbRkL5ph0Qf7LDxq+rjiGCw6dCjby+mBNYlwtgH3Wpy0zG
kjv0/9AfLsW7yLtMSiuvqpa4itiC4g54W8igd2o01OTIA1UOIMj1lV7FdgqKAS8S
gGtqBC6MiEF8uK8sGwvp1C9KJsljS3mtnx3ZrzGZewI/IP9J6c8PzyX2cZncQ1r9
2lLFLqwPk1suDZ3Dj5+Yzj18njElrFZLnfkHawGWgWmyHH05HQlcvZmT7DI3bTDG
+qL7dhANZyXdXA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:03 2026 by rpki-client