Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
File: CNJ4u-X8LfcyAyzbI1li26vg9kE.mft (raw, json)
Hash identifier: PdwUq9TLBM8Ve02DNzEasI7bV+UxGGb99WNSyRDv7w8=
Subject key identifier: 9A:FC:88:32:A7:9B:87:8E:A9:70:C5:49:3D:74:CE:39:89:8D:24:C0
Authority key identifier: 08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
Certificate issuer: /CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Certificate serial: 019CE55B42DBD89F86A56D66687D3942A467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
Manifest number: 1863
Signing time: Fri 13 Mar 2026 04:01:29 +0000
Manifest this update: Fri 13 Mar 2026 04:01:29 +0000
Manifest next update: Sat 14 Mar 2026 04:01:29 +0000
Files and hashes: 1: CNJ4u-X8LfcyAyzbI1li26vg9kE.crl (hash: Bf7W6OhUm5eXF93kAFcgrfqwVd5smUB5PYCAWsgsE/Y=)
2: cqRNRYld8xc0CoCi2GIRdSN1pec.roa (hash: UvIZReHdG2/zwr7aSyXObjS9yFZjBI/EHczHCt3scrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5b:42:db:d8:9f:86:a5:6d:66:68:7d:39:42:a4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Validity
Not Before: Mar 13 04:01:29 2026 GMT
Not After : Mar 14 04:01:29 2026 GMT
Subject: CN=9afc8832a79b878ea970c5493d74ce39898d24c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1d:e8:28:67:72:2f:0b:21:58:87:7c:40:af:
0a:1c:ac:c4:c5:f9:fe:da:8a:34:61:96:36:3f:dc:
78:9c:e3:39:14:35:da:b5:60:7f:bf:1b:d1:fa:c1:
7b:fe:53:c7:f7:16:f9:e6:39:83:af:46:bd:4c:49:
cb:b0:7b:ca:1b:40:00:66:fa:41:5d:2d:82:ac:99:
56:7f:58:81:79:5d:07:5f:52:9d:d3:2e:13:96:16:
7d:34:5c:d1:91:ad:05:d3:eb:34:ff:fe:8a:43:24:
f6:7b:d9:a7:3d:3b:01:83:f5:48:1f:6e:dd:65:81:
03:07:f9:a3:aa:31:fd:65:62:98:15:96:23:50:85:
79:2b:17:c9:2b:22:af:f0:bb:69:3f:f0:14:79:44:
ed:8e:06:6d:c7:36:a5:ea:f9:7c:1d:df:da:eb:72:
83:62:02:24:29:57:cc:08:38:24:3b:ec:d9:8f:f6:
a9:43:a5:67:b5:b5:a4:2d:b7:bb:62:8e:ba:42:dd:
b3:4b:86:b3:88:cc:ce:22:92:01:fc:5b:d0:cb:fd:
48:ca:9b:f4:08:c5:ff:10:dd:0d:44:14:9d:9e:45:
d5:73:0c:c0:2c:84:37:88:08:a2:dd:a7:11:30:6e:
e1:51:8f:ca:c5:d3:a4:f4:ed:c1:92:75:3d:1f:78:
90:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FC:88:32:A7:9B:87:8E:A9:70:C5:49:3D:74:CE:39:89:8D:24:C0
X509v3 Authority Key Identifier:
keyid:08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:95:5f:70:1e:cb:20:52:43:b9:89:de:c8:09:73:85:45:91:
ff:3c:85:7d:7b:b1:61:f1:a7:13:ce:f9:a2:29:12:e0:84:85:
29:22:42:fc:85:4f:ab:2f:fb:b0:46:be:ce:fa:de:14:df:b9:
95:b4:1c:30:f8:9c:c9:24:cc:a5:05:3e:a3:02:76:f0:75:23:
7e:ed:bc:95:81:cd:33:a2:26:9e:ce:1b:ea:42:95:ed:7b:00:
6e:23:3b:e5:74:c1:ac:00:9b:24:bf:9c:c9:be:0d:6c:30:c8:
c8:f1:57:25:27:a2:1c:41:5b:a8:87:2e:93:6c:5e:57:d7:1a:
f0:68:1b:b1:a2:e0:c9:41:63:ce:6e:a3:0a:15:0f:b8:b5:2b:
48:77:6f:0e:e0:b1:d1:45:a2:73:66:96:41:a8:ae:2e:87:65:
18:f5:6d:20:93:d5:32:32:fa:4b:fd:61:f0:03:9f:ef:16:75:
04:21:17:b7:a1:52:1a:bf:ff:32:c7:4d:fe:41:f2:ac:e5:b8:
a5:7d:c0:cb:6f:05:ab:93:af:3d:9e:c7:a2:4d:11:c5:90:85:
04:a6:22:d3:ec:eb:26:80:66:23:9d:fb:16:15:34:c3:51:32:
d3:a8:21:1c:68:4e:f6:5b:71:bf:eb:c0:28:3a:ba:74:19:ab:
26:ec:a8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:30:44 2026 by rpki-client