Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
File: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json)
Hash identifier: tstWULfFYS/YbsL94zHDzw+hG4wotmgAh38j+0uKc5I=
Subject key identifier: 01:05:F1:34:A2:D5:77:CD:BA:6B:23:87:25:0D:61:36:D3:16:48:10
Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
Certificate issuer: /CN=0a35575b9947ace25ce87774c82775f18977fd19
Certificate serial: 019D382E3AD479DFAB27B12962FDF5A044C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
Manifest number: 161C
Signing time: Sun 29 Mar 2026 06:00:46 +0000
Manifest this update: Sun 29 Mar 2026 06:00:46 +0000
Manifest next update: Mon 30 Mar 2026 06:00:46 +0000
Files and hashes: 1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: wCFRLSrtPWrT/YfHxfHiTo0RkRlv4j45Elz+cUP4ekA=)
2: Fr5UXfjdMrhEHYQ6Xdia0OdmNWk.roa (hash: 30Ofi4XCsm5vnfPYfxuSwPdN95VWJBJfoWiBcDk1LZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:3a:d4:79:df:ab:27:b1:29:62:fd:f5:a0:44:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19
Validity
Not Before: Mar 29 06:00:46 2026 GMT
Not After : Mar 30 06:00:46 2026 GMT
Subject: CN=0105f134a2d577cdba6b2387250d6136d3164810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:9e:df:d7:e4:7b:dc:db:24:b4:03:27:63:11:
49:2e:5c:a9:f6:82:38:f0:82:3a:43:d6:00:15:f7:
1e:a8:c6:cb:4e:56:5b:84:df:29:9e:96:4f:3c:af:
07:f7:cc:e6:6b:54:11:31:d6:a1:ba:b1:b6:42:79:
ae:1f:f0:28:3a:3e:86:f5:aa:ae:a0:92:07:3a:66:
be:7f:cf:b0:c5:1f:1f:cc:ef:74:46:ca:d9:bd:b3:
fc:ce:cd:a1:30:a9:e2:cc:e5:4a:7a:eb:b3:14:0b:
63:15:73:07:27:58:b4:48:f1:76:a8:61:81:7e:9f:
69:8f:1d:86:14:e3:8a:bb:b6:e1:e5:af:b0:51:41:
7f:41:18:cd:1a:19:13:bc:31:77:8b:36:37:8c:a3:
6d:62:04:49:b2:c3:c7:02:43:f9:ee:c4:6c:ae:ac:
71:6d:38:72:7a:7a:89:9b:c0:5b:f5:51:75:fd:c2:
2d:d6:fb:98:c1:26:58:5e:c9:ec:9e:cb:9c:ef:c2:
db:a6:70:a4:ee:47:93:1f:14:62:bf:cd:d0:1c:24:
76:b6:64:27:b8:b9:ce:00:b5:f0:5f:55:61:48:6a:
d1:09:ae:d6:5c:14:4a:96:66:c9:14:63:8f:09:9c:
2c:54:91:d8:9a:90:71:fb:16:5a:dc:6e:89:6d:01:
0d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:05:F1:34:A2:D5:77:CD:BA:6B:23:87:25:0D:61:36:D3:16:48:10
X509v3 Authority Key Identifier:
keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b1:af:38:31:ef:28:53:ca:b7:e4:96:72:4c:c8:0f:fe:d5:
c5:86:83:2e:86:67:d1:e3:97:e1:ed:c8:9a:95:b7:db:44:8d:
48:0e:94:8e:03:36:6d:6b:dc:30:9c:57:ee:c0:5b:c0:32:c7:
98:07:d5:85:bb:34:58:0f:d5:eb:6a:b9:c9:a0:c6:cd:91:02:
f4:93:76:33:9a:63:c5:4c:5e:86:c4:4a:d5:8c:c9:0e:8c:9b:
5e:83:1d:a4:26:83:b3:a9:c7:7b:0b:6a:e5:3b:48:ad:b0:09:
22:34:89:ea:92:44:b4:04:63:6c:e8:af:c2:b7:b6:e3:31:74:
56:c5:f8:e7:7b:e7:c5:9a:a5:4a:5f:e6:12:5f:c2:10:57:ae:
e1:92:0c:21:77:cb:96:e0:d8:80:cd:9a:24:1c:dd:bc:28:69:
cb:21:2e:4e:b1:77:d2:ca:2f:fa:eb:9f:62:8d:c6:ff:c8:fb:
f7:8f:a0:9c:a7:b8:6f:98:a5:0c:e2:a4:c1:6a:e0:c4:0c:ce:
97:d6:71:ec:e2:70:de:07:a7:2f:f1:45:0b:9a:d0:6d:39:47:
63:fc:c3:c2:59:d0:50:03:e6:e1:e9:ef:a6:39:f0:01:48:e4:
ca:5f:13:6c:23:36:9e:8d:48:9d:b9:c0:de:21:d8:5c:9b:98:
a0:5f:f4:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LjrUed+rJ7EpYv31oETDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzU1NzViOTk0N2FjZTI1Y2U4Nzc3NGM4Mjc3NWYxODk3
N2ZkMTkwHhcNMjYwMzI5MDYwMDQ2WhcNMjYwMzMwMDYwMDQ2WjAzMTEwLwYDVQQD
EygwMTA1ZjEzNGEyZDU3N2NkYmE2YjIzODcyNTBkNjEzNmQzMTY0ODEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+p7f1+R73NsktAMnYxFJLlyp9oI4
8II6Q9YAFfceqMbLTlZbhN8pnpZPPK8H98zma1QRMdahurG2QnmuH/AoOj6G9aqu
oJIHOma+f8+wxR8fzO90RsrZvbP8zs2hMKnizOVKeuuzFAtjFXMHJ1i0SPF2qGGB
fp9pjx2GFOOKu7bh5a+wUUF/QRjNGhkTvDF3izY3jKNtYgRJssPHAkP57sRsrqxx
bThyenqJm8Bb9VF1/cIt1vuYwSZYXsnsnsuc78LbpnCk7keTHxRiv83QHCR2tmQn
uLnOALXwX1VhSGrRCa7WXBRKlmbJFGOPCZwsVJHYmpBx+xZa3G6JbQENlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEF8TSi1XfNumsjhyUNYTbTFkgQMB8GA1UdIwQY
MBaAFAo1V1uZR6ziXOh3dMgndfGJd/0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wZjJkYTktZjNkNS00YWI0LWJhYmUt
NzlkOTFlZjgyN2NlLzEvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wZjJkYTktZjNkNS00YWI0LWJhYmUtNzlkOTFlZjgyN2Nl
LzEvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObGvODHv
KFPKt+SWckzID/7VxYaDLoZn0eOX4e3ImpW320SNSA6UjgM2bWvcMJxX7sBbwDLH
mAfVhbs0WA/V62q5yaDGzZEC9JN2M5pjxUxehsRK1YzJDoybXoMdpCaDs6nHewtq
5TtIrbAJIjSJ6pJEtARjbOivwre24zF0VsX453vnxZqlSl/mEl/CEFeu4ZIMIXfL
luDYgM2aJBzdvChpyyEuTrF30sov+uufYo3G/8j794+gnKe4b5ilDOKkwWrgxAzO
l9Zx7OJw3genL/FFC5rQbTlHY/zDwlnQUAPm4envpjnwAUjkyl8TbCM2no1InbnA
3iHYXJuYoF/0Iw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:08 2026 by rpki-client