Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
File: CNJ4u-X8LfcyAyzbI1li26vg9kE.mft (raw, json)
Hash identifier: rJgDCG3w1udYtTgcQZKsPfmCQKZMCT1CPpuHKJ9vfuc=
Subject key identifier: C6:EE:D2:3F:DF:87:29:7C:27:07:DC:A5:16:E6:8B:22:00:16:87:D2
Authority key identifier: 08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
Certificate issuer: /CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Certificate serial: 01A17D73B4C23FE848B02E9D880F00ED8343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
Manifest number: 1AC4
Signing time: Tue 27 Oct 2026 13:01:37 +0000
Manifest this update: Tue 27 Oct 2026 13:01:37 +0000
Manifest next update: Wed 28 Oct 2026 13:01:37 +0000
Files and hashes: 1: CNJ4u-X8LfcyAyzbI1li26vg9kE.crl (hash: yOQ7pLVa+XlGYJGV55qAKIAFaA3J48jt5mEy+7PCBEw=)
2: cqRNRYld8xc0CoCi2GIRdSN1pec.roa (hash: UvIZReHdG2/zwr7aSyXObjS9yFZjBI/EHczHCt3scrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:b4:c2:3f:e8:48:b0:2e:9d:88:0f:00:ed:83:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Validity
Not Before: Oct 27 13:01:37 2026 GMT
Not After : Oct 28 13:01:37 2026 GMT
Subject: CN=c6eed23fdf87297c2707dca516e68b22001687d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:26:54:2c:73:ea:c0:b3:53:9c:72:51:45:
53:7e:4c:d4:1a:5a:76:4c:79:0f:9a:bf:cc:c9:86:
ca:26:d6:70:ce:7e:7d:2f:8d:b5:9d:c4:d8:f3:93:
28:79:63:5b:a9:61:84:16:f2:02:12:23:93:35:01:
5a:89:7b:20:34:94:f6:ad:ff:6a:3f:1e:e9:33:f4:
96:d2:21:8d:d4:c5:08:ae:52:97:93:4b:a9:fa:4f:
12:29:fd:90:b9:43:1e:31:28:2f:e4:f9:59:fe:2d:
e8:74:b8:9a:9a:1c:ec:c1:fe:bd:1c:ae:1e:57:54:
48:05:d3:f9:de:13:38:b7:66:92:fa:19:e4:28:cb:
6f:95:d4:37:76:f8:51:af:b1:9c:b7:e0:cb:d5:f7:
b1:28:71:4a:3e:21:0b:62:08:f1:b9:20:b5:81:fd:
98:26:85:29:a1:fa:4d:e5:7e:71:49:3b:5b:7a:48:
8a:6d:84:6f:29:90:92:58:aa:87:49:c6:ab:26:56:
b0:4e:97:85:b3:56:81:5c:12:e8:dc:e8:76:00:d4:
3b:67:10:63:f4:94:9e:f2:fb:b8:63:3b:a1:08:56:
bb:fb:5b:3e:f2:ba:3f:df:00:24:be:8d:e1:58:30:
66:3b:27:12:79:9a:8d:fd:ba:38:81:dd:a7:bc:3e:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EE:D2:3F:DF:87:29:7C:27:07:DC:A5:16:E6:8B:22:00:16:87:D2
X509v3 Authority Key Identifier:
keyid:08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b1:95:eb:ec:64:b9:c7:d5:19:20:44:c1:cb:91:8a:7f:14:
c0:01:81:5b:ef:7a:14:86:76:34:03:48:a2:02:23:d9:ab:91:
2e:04:5e:0b:7c:76:de:b1:0d:a8:dd:00:fe:02:55:f1:c0:f0:
83:1a:29:d8:1e:90:33:2c:25:e0:ad:fe:c0:d6:e8:8c:61:e0:
57:01:aa:78:47:b4:03:38:7b:35:2e:95:53:b9:25:70:9f:36:
e1:f1:f2:ca:80:3d:d4:9a:ed:85:5f:ed:85:b1:94:db:5c:35:
9b:f6:00:d2:3e:42:c4:ab:68:e9:40:94:24:ba:08:85:71:41:
20:31:33:0a:84:08:2f:ee:73:fe:55:9c:2d:72:81:23:3d:19:
9b:ff:92:72:52:7a:d5:b9:87:69:c6:87:7c:c5:06:10:0a:74:
ea:62:fb:68:3c:15:e2:f9:a2:97:09:b4:13:7b:9e:17:25:05:
da:0b:1a:12:03:14:fe:9f:bb:ba:2f:f7:e1:24:b8:b7:6f:ec:
04:24:ca:2e:02:75:d9:c8:81:4b:10:b5:e2:45:53:e2:63:77:
0b:60:0a:2d:bd:be:0d:9d:f5:32:5d:06:16:0c:71:25:51:c5:
08:62:39:f4:83:bc:5a:0e:cb:d5:f5:17:e5:6f:5e:d8:24:9a:
47:31:4a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:51:04 2026 by rpki-client