Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier: +r4L7zNoHxH4kSWZVIVCxm1zeXIPx4XWR2JJrH1vL/g=
Subject key identifier: 99:55:05:A9:13:11:9D:66:B5:8A:FE:F9:F5:5D:FF:7C:6D:0E:39:05
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 019D38D2D3E475CCFF2908A5C5C92903EE96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:00:33 +0000
Manifest this update: Sun 29 Mar 2026 09:00:33 +0000
Manifest next update: Mon 30 Mar 2026 09:00:33 +0000
Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: gTX0gmPCKFdJaL2I1swX9Se1yoU5KGWeTU//VjolhLI=)
2: OHiJ9XzBUi42gNdFbFSonns_rq0.roa (hash: 5izRR616Szlh4ynpWzSXWkX0E9KgDJBqg2wIQA5yWeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d3:e4:75:cc:ff:29:08:a5:c5:c9:29:03:ee:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: Mar 29 09:00:33 2026 GMT
Not After : Mar 30 09:00:33 2026 GMT
Subject: CN=995505a913119d66b58afef9f55dff7c6d0e3905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e5:e0:9d:1f:df:08:d8:c9:e9:d0:2b:4c:e2:
fa:63:7e:ce:f8:94:a9:4a:bf:7c:7c:1f:cf:d7:eb:
89:85:a1:25:6f:84:72:4f:42:f6:fa:7e:1c:f4:4f:
3e:88:c9:17:ff:1a:a2:1b:10:14:96:84:09:15:de:
43:f2:07:81:ab:36:ed:bd:09:eb:04:aa:42:ad:e9:
a7:08:2d:89:b3:7c:47:c9:e1:93:dc:b8:8f:98:b8:
78:49:e5:5a:33:d1:11:49:1d:be:3a:f4:d8:cb:80:
5b:8c:ec:66:c7:34:84:2c:94:f8:0d:48:f8:76:6a:
f3:00:d2:25:f2:0b:bc:cb:1a:0d:ed:75:6b:9a:54:
0d:8f:65:17:7b:73:61:d2:8a:e0:38:80:0f:fe:e0:
a2:e2:7d:72:26:8f:2b:3f:d6:ea:13:b5:81:20:fb:
4c:04:c9:46:e3:e6:b6:21:b7:fa:92:16:40:0a:e0:
90:84:2e:76:b1:96:12:b5:2b:10:3e:e1:90:fc:64:
d2:fc:18:6f:96:8c:3f:f5:d8:a7:62:b7:d9:94:db:
92:4a:6c:e3:4d:b5:e3:26:04:61:7b:b8:42:b1:19:
69:57:f3:7a:73:47:d1:0e:6a:5b:af:0f:b2:72:e0:
5b:97:6a:44:4f:8c:3d:d8:f0:e3:e2:71:fb:90:85:
c1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:55:05:A9:13:11:9D:66:B5:8A:FE:F9:F5:5D:FF:7C:6D:0E:39:05
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ad:3c:a1:ac:44:b7:87:55:f0:87:56:af:81:5e:6c:12:fa:
22:d0:ca:26:01:66:4d:c2:b6:99:71:56:54:44:07:c4:c7:8a:
50:51:0a:bb:fe:9d:34:ce:0a:67:1c:e6:1e:c0:3a:7d:3b:84:
58:b1:c7:02:f9:c5:31:82:8f:bc:0c:b4:0b:06:5b:9d:83:83:
15:fc:bc:7c:bd:be:69:05:12:d5:51:12:d8:71:76:1e:30:d5:
0a:ea:04:d2:7e:92:0c:61:d9:ef:c2:f6:7d:fe:74:a8:47:bd:
c7:8f:81:c8:e4:f0:d2:a5:b6:d0:eb:e9:ca:cc:42:b6:54:c6:
00:cd:49:0e:be:79:62:a8:46:9a:e4:9e:20:99:2c:fc:4d:66:
4e:e6:2f:4e:2a:61:11:1d:3e:9d:a9:b3:04:91:10:a7:8e:c8:
4f:40:83:da:1e:b0:3c:dd:7c:a1:7a:d1:7f:c8:bc:c1:c5:45:
40:ec:b6:73:d4:da:0a:c2:11:b3:1d:a5:f4:8b:44:2a:de:1e:
30:80:72:c2:70:50:7b:11:34:83:d8:4b:9e:ca:bd:76:38:f3:
a1:d4:af:56:fc:c2:66:18:4f:89:d4:0d:85:21:3f:9a:c0:0d:
6f:2b:d2:ea:72:fd:2d:b4:05:8a:fe:83:db:17:9f:f2:61:14:
49:9f:77:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:31 2026 by rpki-client