Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
File: CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft (raw, json)
Hash identifier: cPi62WfP8tGPJdHLe7bbOyRnE9HvArXpxtNb47HMWSI=
Subject key identifier: 90:43:AC:66:15:EC:77:2B:0C:CB:78:AC:75:DE:79:FA:E9:26:F2:BC
Authority key identifier: 08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
Certificate issuer: /CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Certificate serial: 01A13FDE8C29DD3E794364E567D399AE6267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
Manifest number: 0E05
Signing time: Thu 15 Oct 2026 14:01:51 +0000
Manifest this update: Thu 15 Oct 2026 14:01:51 +0000
Manifest next update: Fri 16 Oct 2026 14:01:51 +0000
Files and hashes: 1: CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl (hash: 00XDMdPCb2BYyFzD/HtPCAKHCMSFIYsBsBsDfcHbHvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 14:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:de:8c:29:dd:3e:79:43:64:e5:67:d3:99:ae:62:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Validity
Not Before: Oct 15 14:01:51 2026 GMT
Not After : Oct 16 14:01:51 2026 GMT
Subject: CN=9043ac6615ec772b0ccb78ac75de79fae926f2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f0:65:af:8f:db:93:39:35:7e:ee:9c:af:8a:
45:65:7e:80:dc:65:f0:f3:50:75:7e:09:50:13:87:
df:40:f3:02:98:da:8f:3d:17:67:8b:4b:18:32:6c:
17:80:f2:a9:62:25:40:ae:47:00:de:85:ac:f7:be:
cb:02:e4:7a:ce:a0:1f:ca:8a:d7:ae:2e:b1:be:ed:
40:97:5f:42:51:d0:3f:8d:e9:4c:a7:b2:dd:f6:3d:
56:92:98:a7:84:2a:4f:7a:99:0a:95:82:58:a4:6b:
c4:1c:82:dd:99:03:6a:64:bd:e8:21:4f:e7:66:0e:
83:2c:14:49:03:2f:39:b8:a3:59:26:da:7e:79:e0:
a7:27:c4:2a:65:91:a8:4c:10:b6:59:7f:ea:17:1a:
de:fe:5c:d4:58:be:9d:09:a5:ae:53:d8:eb:28:4c:
2a:bf:fe:35:68:ba:45:9e:a1:31:11:1d:46:7d:44:
d8:b7:e7:7e:14:0e:82:42:48:53:b7:11:ed:8c:b5:
ae:d5:78:62:3e:19:47:84:ff:f0:9e:40:9d:80:b9:
b1:f1:a7:54:ab:09:00:91:88:2b:41:a6:b7:f6:e7:
b4:2d:8d:51:f7:06:eb:cf:9e:e6:5e:72:a8:b9:c2:
7c:47:a2:37:90:53:fb:fa:22:84:54:54:36:0c:b7:
75:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:43:AC:66:15:EC:77:2B:0C:CB:78:AC:75:DE:79:FA:E9:26:F2:BC
X509v3 Authority Key Identifier:
keyid:08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:17:6f:37:0e:cc:cb:89:50:3f:be:a4:9e:cc:fd:e3:6d:cc:
e3:18:52:0e:02:3b:f2:2b:f7:23:9c:b7:55:66:31:e1:98:b6:
e1:96:4c:4b:a7:db:c9:ac:ea:77:9d:11:96:d1:00:6c:46:00:
40:b2:d0:3b:a9:6e:71:b5:e0:83:b9:11:d5:5c:26:ae:4e:67:
2f:e2:7f:20:ea:a4:30:ce:99:d4:ba:2f:b6:99:45:1e:b0:f2:
74:de:d1:bb:e4:b8:77:e2:b9:3b:84:ff:c3:85:ad:bc:c0:4e:
af:59:cf:1f:91:92:8f:60:97:3e:0c:92:36:35:77:fe:75:09:
e5:f9:cc:c1:61:ed:1c:8c:06:5b:ed:69:11:f8:cd:76:4c:28:
25:09:59:72:4c:c7:a5:35:06:ed:35:cc:75:49:5d:d0:a6:4c:
b7:99:36:13:a2:30:fa:db:41:f8:7f:09:cd:7d:63:3b:96:51:
79:4f:ce:e4:4e:71:33:76:dc:18:93:24:78:e4:45:b9:27:7f:
ea:90:1b:57:08:70:52:c6:8f:b2:74:24:b4:1b:40:df:59:7b:
dd:d7:7e:34:52:29:29:54:2c:e2:2b:11:55:6b:84:84:47:cd:
95:ba:f3:30:9e:9a:a8:90:26:aa:04:55:6f:f0:a2:5d:97:c3:
ee:69:4b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:46 2026 by rpki-client