Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
File: CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft (raw, json)
Hash identifier: sUxcLSgl9S7Leah9dIY4pCIUyvuyIbrbFbqv3MDXsSo=
Subject key identifier: 52:70:3C:FC:0D:33:D8:B8:33:23:46:CD:84:8C:48:49:48:7A:01:40
Authority key identifier: 08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
Certificate issuer: /CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Certificate serial: 019FA0A8A86BF4A8BB7325BF2531574FA380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
Manifest number: 19D6
Signing time: Sun 26 Jul 2026 23:00:35 +0000
Manifest this update: Sun 26 Jul 2026 23:00:35 +0000
Manifest next update: Mon 27 Jul 2026 23:00:35 +0000
Files and hashes: 1: CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl (hash: w4dw9kJkF3FkTda8x/Mp5d5qVOAltxnzCpJ0TFJg4Ac=)
2: W-VoV17I_X3lPw0iDUZQHRelxBg.roa (hash: KAR3woHBe4DQ7VMg1DKXsXjsr/10HOtfObZUxwxzNb0=)
3: auvSz2lhlxmICy5UZfYtBa_ZANo.roa (hash: 1QPJodraJ3/LeONbiuOhWdG9AilrgvOVM/bkBbENKmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:a8:6b:f4:a8:bb:73:25:bf:25:31:57:4f:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Validity
Not Before: Jul 26 23:00:35 2026 GMT
Not After : Jul 27 23:00:35 2026 GMT
Subject: CN=52703cfc0d33d8b8332346cd848c4849487a0140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4a:f8:aa:38:ca:ad:4a:43:84:31:65:62:32:
1d:68:6d:57:21:90:75:35:c8:77:3c:13:1e:5e:80:
9a:60:7b:c7:3a:a2:98:b7:0c:f1:31:41:b3:fb:af:
7e:50:a5:e0:3f:6d:91:e4:49:c8:9e:1f:34:b0:aa:
04:16:6b:13:e9:e2:36:0a:c0:c6:17:45:58:a2:7b:
69:3e:91:be:79:4e:56:2e:6f:0c:61:90:79:26:be:
07:e6:38:86:b3:5f:2d:e4:b5:d5:47:0a:2f:f0:82:
28:63:5e:95:b8:b3:81:d6:96:8d:1f:f5:01:cd:81:
9a:fc:e9:6d:d5:17:ae:35:67:3b:d2:af:3f:08:96:
af:03:eb:cf:0c:59:bf:96:b2:f1:73:9a:4a:6e:a9:
5b:e8:60:d1:3b:f4:e7:29:6b:c1:c9:df:f9:f5:0f:
07:3b:d1:83:91:b5:bd:a7:1e:34:33:d4:33:8d:f4:
e5:8e:a6:38:fa:c6:f0:c2:4d:7a:cb:0c:8c:56:7a:
0c:37:92:0c:1a:8b:20:04:68:76:75:0f:db:38:ba:
ae:e5:98:33:89:82:02:27:be:57:08:ac:95:96:ef:
09:86:e8:a7:99:00:f6:3c:67:e1:2b:c1:2f:f5:6b:
07:99:70:0e:9a:f6:bc:5b:b1:57:f0:32:34:14:ef:
ab:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:70:3C:FC:0D:33:D8:B8:33:23:46:CD:84:8C:48:49:48:7A:01:40
X509v3 Authority Key Identifier:
keyid:08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:7e:95:60:e7:84:0e:bb:5c:f7:49:b4:5b:7c:7b:74:10:ee:
f1:1f:ff:2d:3d:1e:7a:45:78:69:a3:91:a2:81:d9:a3:1e:29:
19:02:82:92:ee:db:1b:6e:1f:c9:7b:1b:16:9e:84:ce:f1:54:
a7:1c:6e:40:74:1b:39:14:a0:d5:c3:92:ab:a2:61:56:df:93:
27:c8:ee:3d:52:bf:9b:97:c2:57:1f:94:68:07:00:06:45:c5:
ac:e8:a6:4a:a9:4e:32:d1:2e:95:1c:07:ab:a7:ab:70:29:24:
3c:1a:dd:18:2c:27:d7:01:c1:0d:88:5e:78:11:c3:45:85:c4:
21:3c:3b:d1:5a:85:a1:c7:82:42:ba:6c:64:a8:1f:9f:43:12:
ae:13:54:5b:8a:49:6d:5a:55:11:ad:4c:77:b2:60:6a:f9:13:
64:70:76:99:dc:a3:dc:a0:ee:80:1b:f3:d2:04:b7:0c:22:ec:
a3:60:ae:ef:22:8f:07:51:a2:47:f0:05:84:f9:5c:f8:a3:4d:
57:9e:83:19:4d:1f:a5:92:14:79:c2:78:6d:75:87:c0:56:55:
f5:d9:ef:dc:c9:00:1c:3a:72:39:25:be:62:6f:3d:e2:c4:bd:
92:18:a7:9f:7f:65:f1:31:cb:9e:0a:93:41:cc:96:d2:4a:5b:
4c:da:f5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:53 2026 by rpki-client