Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
File: cjM1sFB1VK5sbMKUdQdkyv0L1og.mft (raw, json)
Hash identifier: MUmHaWXV4DdAhs5gPVZjVdV/K0AVNqa/z6OZtpJ4ikY=
Subject key identifier: 49:34:85:8D:A2:4D:0E:BA:F4:50:3C:28:C7:5E:04:81:52:97:81:9F
Authority key identifier: 72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88
Certificate issuer: /CN=723335b0507554ae6c6cc294750764cafd0bd688
Certificate serial: 019DDE0C8B770EBE118F06A2F079879CB674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
Manifest number: 014D
Signing time: Thu 30 Apr 2026 11:00:57 +0000
Manifest this update: Thu 30 Apr 2026 11:00:57 +0000
Manifest next update: Fri 01 May 2026 11:00:57 +0000
Files and hashes: 1: cjM1sFB1VK5sbMKUdQdkyv0L1og.crl (hash: z7FF1BwlHc5//s/F2YDuF4k7vM0nJmLrnHqcP7PSFSI=)
2: cwaVlyUcrRob1yQGfrzbyd4SXY8.asa (hash: hxp7g2uf5EIcMdBETFCVoZR6vdDL2LqgNsCC4ZPPusU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:0c:8b:77:0e:be:11:8f:06:a2:f0:79:87:9c:b6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=723335b0507554ae6c6cc294750764cafd0bd688
Validity
Not Before: Apr 30 11:00:57 2026 GMT
Not After : May 1 11:00:57 2026 GMT
Subject: CN=4934858da24d0ebaf4503c28c75e04815297819f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:ad:9e:e7:b7:c8:40:89:ee:1b:ee:e0:32:
6e:00:6f:75:d7:03:65:32:3b:36:80:13:31:3f:09:
2a:be:1e:9d:da:a7:43:a5:38:d4:b1:81:66:a8:ca:
07:85:fd:50:38:5b:ec:bb:f3:57:22:8c:74:6d:56:
76:7d:af:0e:2e:c6:88:66:78:49:e5:fc:5e:f2:5e:
f9:41:89:e2:f6:27:11:a0:87:a3:99:bf:4f:6e:2c:
fb:5a:c2:7a:b6:96:7a:d8:b0:0b:86:23:f0:61:d8:
35:d4:80:94:22:1d:84:71:70:a1:03:69:5f:17:48:
e9:c6:e0:a7:3f:ff:a0:35:6b:db:58:b2:51:49:fd:
37:e5:86:42:3f:64:04:40:32:25:b9:90:8d:c6:d8:
d8:10:fb:86:d8:d5:b5:98:79:23:f9:22:df:c2:00:
fa:60:04:dc:26:b5:6d:6e:04:e5:a6:0e:66:8f:94:
66:c7:df:33:b8:f3:c0:41:3e:97:a8:c2:2c:5d:7f:
b4:61:2d:f1:f0:8a:4f:4f:18:40:21:68:6e:4a:3a:
45:a0:14:bd:fe:7b:3e:0f:12:70:80:86:eb:0d:05:
e9:ab:02:50:ee:bb:d1:55:d8:bf:f4:bf:1d:a0:ec:
72:e5:40:8a:be:95:1c:7e:c4:de:0b:f9:7d:19:d4:
95:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:34:85:8D:A2:4D:0E:BA:F4:50:3C:28:C7:5E:04:81:52:97:81:9F
X509v3 Authority Key Identifier:
keyid:72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:73:3e:c3:9e:aa:d9:0d:d1:d4:a4:7e:8e:54:50:b1:1a:29:
ce:3d:e1:93:8a:0e:c2:c6:3f:88:33:5b:3d:fc:8e:1f:ed:24:
f7:11:24:40:c8:1c:cd:49:5c:41:16:89:c9:85:5d:51:97:d6:
66:38:32:85:65:4f:5a:18:54:8c:df:d9:49:cf:3f:21:e3:d7:
c3:64:be:07:9e:a6:28:57:15:11:0f:4e:64:c6:b8:59:8a:c0:
e8:d2:b2:71:e4:05:b3:b2:b4:27:6b:64:2b:09:11:b0:51:b8:
c9:b7:d3:cd:cd:ad:86:c2:da:89:09:82:8b:e6:e9:11:0c:23:
28:cd:65:c6:33:96:a5:59:fa:74:7e:01:41:32:ed:f6:c5:8c:
2c:2d:f1:66:78:8c:e7:e8:37:eb:ba:32:cb:ed:cd:8e:6a:f7:
f8:96:3b:7d:aa:d6:67:f5:f1:bf:06:12:76:03:ca:f5:0c:ec:
15:57:37:8e:22:6a:74:a4:15:bd:64:07:ff:e6:33:16:5a:90:
44:8e:60:7a:7e:5d:ff:5a:11:be:2b:ad:cf:4c:10:d9:82:b3:
60:fc:3d:6b:cd:1e:98:50:b8:99:da:7c:32:cb:53:14:f0:d3:
c7:ac:e1:11:e9:28:cb:c8:f1:f3:8b:9f:57:8f:1f:e5:1e:94:
83:b7:8f:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3eDIt3Dr4Rjwai8HmHnLZ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMzMzNWIwNTA3NTU0YWU2YzZjYzI5NDc1MDc2NGNhZmQw
YmQ2ODgwHhcNMjYwNDMwMTEwMDU3WhcNMjYwNTAxMTEwMDU3WjAzMTEwLwYDVQQD
Eyg0OTM0ODU4ZGEyNGQwZWJhZjQ1MDNjMjhjNzVlMDQ4MTUyOTc4MTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9mtnue3yECJ7hvu4DJuAG911wNl
Mjs2gBMxPwkqvh6d2qdDpTjUsYFmqMoHhf1QOFvsu/NXIox0bVZ2fa8OLsaIZnhJ
5fxe8l75QYni9icRoIejmb9Pbiz7WsJ6tpZ62LALhiPwYdg11ICUIh2EcXChA2lf
F0jpxuCnP/+gNWvbWLJRSf035YZCP2QEQDIluZCNxtjYEPuG2NW1mHkj+SLfwgD6
YATcJrVtbgTlpg5mj5Rmx98zuPPAQT6XqMIsXX+0YS3x8IpPTxhAIWhuSjpFoBS9
/ns+DxJwgIbrDQXpqwJQ7rvRVdi/9L8doOxy5UCKvpUcfsTeC/l9GdSVpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEk0hY2iTQ669FA8KMdeBIFSl4GfMB8GA1UdIwQY
MBaAFHIzNbBQdVSubGzClHUHZMr9C9aIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2pNMXNGQjFWSzVzYk1LVWRRZGt5djBMMW9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYTU1OGUtNjA3NS00NWQ2LWJkYjYt
YzA4YjdiYjQ2MWE3LzEvY2pNMXNGQjFWSzVzYk1LVWRRZGt5djBMMW9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kYTU1OGUtNjA3NS00NWQ2LWJkYjYtYzA4YjdiYjQ2MWE3
LzEvY2pNMXNGQjFWSzVzYk1LVWRRZGt5djBMMW9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXM+w56q
2Q3R1KR+jlRQsRopzj3hk4oOwsY/iDNbPfyOH+0k9xEkQMgczUlcQRaJyYVdUZfW
ZjgyhWVPWhhUjN/ZSc8/IePXw2S+B56mKFcVEQ9OZMa4WYrA6NKyceQFs7K0J2tk
KwkRsFG4ybfTzc2thsLaiQmCi+bpEQwjKM1lxjOWpVn6dH4BQTLt9sWMLC3xZniM
5+g367oyy+3Njmr3+JY7farWZ/XxvwYSdgPK9QzsFVc3jiJqdKQVvWQH/+YzFlqQ
RI5gen5d/1oRviutz0wQ2YKzYPw9a80emFC4mdp8MstTFPDTx6zhEekoy8jx84uf
V48f5R6Ug7ePqQ==
-----END CERTIFICATE-----
Generated at Thu Apr 30 13:05:13 2026 by rpki-client