Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
File: CFl4byJsttSQv7VClOYRp9Uajx4.mft (raw, json)
Hash identifier: b6hV+31iPnDgS35V27PAfFZRBLpTDZ/iST2Cx5O+noU=
Subject key identifier: CD:07:7C:FB:F9:ED:4C:E9:73:0F:7C:C1:9A:A2:A8:6F:EE:AD:39:19
Authority key identifier: 08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
Certificate issuer: /CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Certificate serial: 019D3789A36732F2FD1F90211E38D89A0A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 03:01:00 +0000
Manifest this update: Sun 29 Mar 2026 03:01:00 +0000
Manifest next update: Mon 30 Mar 2026 03:01:00 +0000
Files and hashes: 1: CFl4byJsttSQv7VClOYRp9Uajx4.crl (hash: GPhlpgAz83QAOz0uPRY9dAzRRYi5BdOGUpf/+dIt3Wk=)
2: Ut0-uMPrTscTaYNN4M5f0UoNfFM.roa (hash: Q8bHgGbUawg5ahVwAK4zt6L7o0niif+XBKxRalI2OOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:a3:67:32:f2:fd:1f:90:21:1e:38:d8:9a:0a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Validity
Not Before: Mar 29 03:01:00 2026 GMT
Not After : Mar 30 03:01:00 2026 GMT
Subject: CN=cd077cfbf9ed4ce9730f7cc19aa2a86feead3919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0c:86:77:14:26:04:67:b7:e3:2b:57:7a:27:
a7:e1:0b:77:9e:5d:7c:de:ad:b9:9e:a2:e9:aa:c8:
ec:71:71:d3:9b:ed:7b:04:8f:58:1e:0e:ef:a7:58:
fa:40:e6:ee:8a:4d:bd:e6:e9:02:5d:7d:95:1c:4c:
41:fe:21:65:ae:98:54:c4:7e:10:af:b5:10:a4:58:
02:31:55:88:78:8a:cd:45:e9:8f:5b:f9:41:79:91:
59:eb:da:e0:80:90:cb:15:a4:47:61:17:5d:8b:31:
36:c9:3c:76:49:7a:c2:b5:c5:ab:c6:4e:1e:f0:03:
35:a7:02:07:7b:94:7c:5b:14:8d:28:d1:e5:e3:28:
55:f3:18:2f:5a:c4:34:3a:8b:46:ee:89:2a:7b:bc:
ed:b6:12:78:7c:af:8d:8d:6e:f4:f9:6e:57:cd:e2:
2d:f1:a0:a3:a1:50:46:05:d1:0f:45:c8:65:31:11:
7d:b6:2a:bc:de:3b:02:dc:31:27:11:fd:e7:04:fb:
fc:7e:d0:68:23:ec:23:cf:e2:fc:cd:d1:1e:5a:a6:
8f:88:e6:42:94:20:d3:5b:d6:62:f2:fd:fc:2e:8d:
23:ad:d5:a1:2f:44:c5:c1:e5:8d:5d:65:8a:c9:2a:
5e:7d:b1:26:b2:83:be:38:e2:f2:dd:6d:30:7e:79:
7e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:07:7C:FB:F9:ED:4C:E9:73:0F:7C:C1:9A:A2:A8:6F:EE:AD:39:19
X509v3 Authority Key Identifier:
keyid:08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f5:b2:83:fd:64:a1:c3:af:4e:98:4c:5e:34:b2:0e:76:db:
7e:eb:25:b3:c8:29:bc:30:b8:88:d6:d9:6d:a9:db:de:82:c8:
60:4e:4d:27:b7:f8:9f:01:b2:80:fc:ca:e4:fb:08:a0:5c:72:
f6:50:ef:4f:56:ac:b5:30:bc:2b:35:12:53:94:a1:aa:24:39:
7a:b1:15:13:11:37:49:b3:b0:71:3c:95:89:eb:54:09:a1:89:
d2:43:a9:9f:e5:2d:0d:ac:14:32:b0:95:41:db:54:68:1f:e5:
b6:e2:fa:41:f6:04:d8:cd:f1:39:c9:16:8d:6e:43:71:08:6c:
1b:13:8f:85:b4:59:e2:f2:07:3a:38:f0:1f:9f:b9:e0:09:7b:
b8:9b:b8:82:ca:ab:d9:1d:91:1b:b3:c6:b0:3e:a0:25:96:9a:
74:35:85:74:ea:7e:c3:c3:06:5f:15:ff:49:47:32:5f:ce:93:
a2:8e:b0:f9:12:c6:49:0b:84:27:9e:18:ef:02:60:85:83:fc:
54:fe:1a:4e:bd:e4:f6:15:ff:1b:06:f7:2c:7a:4f:01:1c:0b:
1a:29:3a:fc:eb:be:70:97:db:9c:51:90:d0:06:41:47:49:7b:
c6:91:d8:be:07:57:2d:80:ff:3c:5f:d3:2f:fe:a5:1d:0f:75:
e0:96:62:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:49 2026 by rpki-client