Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
File: CNJ4u-X8LfcyAyzbI1li26vg9kE.mft (raw, json)
Hash identifier: EINwS7udR6d2n538FASrtF3Ad1iEG2ceXP+AA9ZQi4U=
Subject key identifier: 9D:33:0D:8B:05:48:5E:81:58:8D:5B:1B:05:1F:F8:AE:47:16:6F:AE
Authority key identifier: 08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
Certificate issuer: /CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Certificate serial: 019FA44E7F678F14CC57EF3815B13DC6ECDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 16:00:35 +0000
Manifest this update: Mon 27 Jul 2026 16:00:35 +0000
Manifest next update: Tue 28 Jul 2026 16:00:35 +0000
Files and hashes: 1: CNJ4u-X8LfcyAyzbI1li26vg9kE.crl (hash: toYJNUP8OUScZWfNcL4i5eCz0BekKdS+pfkSnFugZO4=)
2: cqRNRYld8xc0CoCi2GIRdSN1pec.roa (hash: UvIZReHdG2/zwr7aSyXObjS9yFZjBI/EHczHCt3scrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:4e:7f:67:8f:14:cc:57:ef:38:15:b1:3d:c6:ec:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Validity
Not Before: Jul 27 16:00:35 2026 GMT
Not After : Jul 28 16:00:35 2026 GMT
Subject: CN=9d330d8b05485e81588d5b1b051ff8ae47166fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:54:56:13:eb:ed:2b:3c:8b:52:4e:9a:49:
3e:7c:64:23:7c:e8:36:48:07:cb:21:2c:58:f1:fd:
63:bb:39:01:c6:9c:a7:a7:a7:aa:eb:63:5b:90:c9:
aa:92:72:a6:54:55:45:88:0d:cd:a4:43:a0:66:f5:
76:e8:12:3d:cd:aa:9f:12:e3:3b:a2:c0:ac:8d:5c:
25:0e:f5:cb:fc:82:67:04:d4:70:14:1a:c3:36:63:
db:0e:82:38:05:f4:14:97:29:6d:44:57:21:c9:e9:
cd:66:1b:03:58:d5:db:d4:70:f4:67:19:1f:29:f2:
63:f4:ee:c5:3b:b1:50:6a:1a:43:74:33:4e:cf:c2:
87:ef:a2:98:ed:d0:59:39:a4:83:33:f6:e0:fc:f1:
41:c7:eb:a3:29:17:b7:5e:ca:ab:e6:a2:39:7f:d1:
2a:fa:0d:1e:12:f9:84:1f:a7:c5:ea:6b:d9:b5:88:
de:74:3c:ee:8a:e4:74:da:b3:f7:99:47:1a:39:0d:
26:85:d3:38:2f:8d:9a:8b:65:ad:08:b3:ff:42:41:
df:f0:f4:bc:e7:75:f5:e2:b5:f2:7f:c2:f4:df:87:
96:53:d0:24:5e:b4:0a:b9:89:7d:0e:b6:77:27:89:
38:90:16:aa:ab:40:53:ed:30:5e:e7:69:1a:bb:f3:
31:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:33:0D:8B:05:48:5E:81:58:8D:5B:1B:05:1F:F8:AE:47:16:6F:AE
X509v3 Authority Key Identifier:
keyid:08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:dd:62:e5:39:64:14:a3:7e:fd:e2:bd:af:8c:d9:ce:81:ea:
ca:78:ce:c9:af:8c:ce:4e:19:61:29:ac:c2:7f:b7:95:d0:de:
99:ce:b1:04:ab:83:fb:70:ff:62:fe:28:23:33:ad:61:f5:47:
c1:7f:90:b9:bc:6a:34:13:f0:fb:ef:63:00:80:f3:72:c4:fc:
3b:50:06:b1:54:e6:7d:af:e5:0d:5f:ff:ac:eb:4b:e2:98:9f:
ec:30:54:99:30:70:94:29:74:52:01:dd:95:2a:5d:46:6f:f9:
f1:94:28:70:15:f9:78:64:a6:ef:81:31:89:2b:54:30:f4:ce:
0a:b4:2f:52:c4:f1:c2:da:ef:7e:2e:db:a4:76:96:0b:68:f5:
ad:52:08:1b:67:d2:24:98:ed:f6:42:95:2f:55:5c:93:de:f8:
b1:67:6e:98:15:7e:d7:bf:c1:b9:2d:a6:2f:2d:74:90:c4:87:
4c:18:66:5c:09:33:7f:7d:e3:f8:d2:34:a2:14:42:6b:10:ce:
06:64:ff:1a:3b:47:ec:17:d4:2e:e9:2e:6d:ae:6b:b9:87:47:
1a:03:ef:d6:e2:7c:a7:33:9b:18:c1:04:06:20:97:c3:52:06:
b7:e1:6c:8d:76:3a:1e:b6:c5:80:fb:1b:10:a3:51:ef:cc:d3:
66:c5:fe:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:29:47 2026 by rpki-client