Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier: ir3UcaFOSKR6oEXpmRAw0LOjZ/fdtq71tdL5fknoaQA=
Subject key identifier: 6C:E0:7A:9A:F9:B6:8E:1D:D3:54:6B:ED:F7:87:AE:35:99:04:BB:E1
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 019F17C2FA69A0DAD0966E09E9B916C0F8A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 09:01:21 +0000
Manifest this update: Tue 30 Jun 2026 09:01:21 +0000
Manifest next update: Wed 01 Jul 2026 09:01:21 +0000
Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: 9nzsfqNwWmG9Z7C1FZH3TEm11SMW+J5saKWnHAes9eM=)
2: OHiJ9XzBUi42gNdFbFSonns_rq0.roa (hash: 5izRR616Szlh4ynpWzSXWkX0E9KgDJBqg2wIQA5yWeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:fa:69:a0:da:d0:96:6e:09:e9:b9:16:c0:f8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: Jun 30 09:01:21 2026 GMT
Not After : Jul 1 09:01:21 2026 GMT
Subject: CN=6ce07a9af9b68e1dd3546bedf787ae359904bbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:dc:40:3a:0c:47:59:78:31:27:48:6d:e4:df:
ea:e2:15:0c:33:a9:d2:f3:24:a7:3d:99:bc:37:ca:
17:c9:78:5b:4d:a7:be:c1:c5:dd:17:8f:56:39:29:
ad:e0:59:22:89:2e:19:79:03:8e:04:56:da:54:45:
52:94:58:28:c8:d4:17:53:23:2a:f3:e6:c7:fa:29:
48:d5:83:32:ef:d9:e1:0a:7e:62:66:f2:d4:88:14:
e1:7c:92:83:63:59:3b:fd:0e:bc:1d:49:25:83:f7:
9c:f4:38:a1:5f:c4:d9:74:24:b0:bf:eb:c3:9d:4f:
fe:e0:5d:b9:aa:09:b2:19:a5:65:c7:b0:62:ad:b6:
a4:67:d5:f1:b9:cf:19:9d:a5:9c:fe:df:f4:eb:e5:
bb:13:87:35:7f:c5:cc:63:73:a4:2e:0d:b6:35:c1:
0a:4c:73:82:89:6d:4c:33:29:44:c6:72:00:bc:85:
c8:42:b1:68:d1:72:23:d6:07:39:22:1a:06:1b:47:
1d:66:4e:b6:8d:2c:b5:65:d7:70:92:6d:5d:cc:57:
a9:70:f1:c5:e9:d7:fc:95:41:4e:a9:68:7a:59:24:
21:9d:47:7b:5a:c4:f4:fd:6c:0d:c3:c3:01:3b:49:
bb:44:b4:a9:14:f6:36:bd:6c:60:41:30:00:1e:d6:
91:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E0:7A:9A:F9:B6:8E:1D:D3:54:6B:ED:F7:87:AE:35:99:04:BB:E1
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e6:78:7d:a4:c9:7d:bd:5f:62:0d:8a:95:14:59:1d:a7:7e:
8e:2d:63:23:dc:e3:af:2c:5a:9a:02:e7:01:e4:4c:e7:c0:a7:
b0:20:fd:5e:e3:3c:7f:ae:68:09:32:9b:ea:76:16:bb:de:ef:
f9:b4:ec:dd:5a:b9:e7:4a:e5:a1:9a:24:fd:ef:38:55:b9:b5:
80:17:92:ef:fe:73:45:4d:d9:9f:35:58:c6:a0:00:f4:12:d7:
50:c6:af:96:5a:1f:8b:bd:22:89:7d:9a:e1:79:27:88:8b:cc:
b5:97:4f:81:ac:cb:7e:8c:b7:62:73:d3:b5:89:e9:d3:58:03:
92:09:52:02:e6:ac:a7:08:8d:eb:02:11:92:97:f3:9f:a9:5a:
0b:da:3d:04:5c:84:27:e6:12:ab:25:b7:2b:ac:0f:1b:b5:97:
11:5f:09:86:9b:cc:b9:d0:8c:17:50:a7:ac:39:e5:0f:e5:25:
dd:c0:14:2d:c5:1d:a2:e5:97:0f:6d:97:c0:01:54:6d:0d:56:
4f:0e:e0:aa:26:ad:17:01:d0:e6:71:67:63:f0:e9:09:64:95:
39:4d:9a:0c:b5:ea:e3:e6:94:d5:b6:3f:79:dd:82:36:36:66:
9e:ed:a6:88:56:26:f7:b6:b4:79:1a:91:3f:72:e1:b1:9d:9a:
b2:46:ba:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:34:21 2026 by rpki-client