Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
File: CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft (raw, json)
Hash identifier: qeVukLXULRQz90s8YDTa9ALJLyQyLErm0+gmgDnjoa4=
Subject key identifier: B6:6B:C8:AE:2B:89:C4:FD:7B:F6:9B:2B:C2:B3:35:7D:EC:8B:1D:13
Authority key identifier: 08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
Certificate issuer: /CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Certificate serial: 019D389C46423F88ACFCAC5549CAF3915BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
Manifest number: 0BEF
Signing time: Sun 29 Mar 2026 08:00:58 +0000
Manifest this update: Sun 29 Mar 2026 08:00:58 +0000
Manifest next update: Mon 30 Mar 2026 08:00:58 +0000
Files and hashes: 1: CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl (hash: UiSksh4S+fGLSUDrn9Y7kdVocle1koItbISHXkwNwhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:46:42:3f:88:ac:fc:ac:55:49:ca:f3:91:5b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Validity
Not Before: Mar 29 08:00:58 2026 GMT
Not After : Mar 30 08:00:58 2026 GMT
Subject: CN=b66bc8ae2b89c4fd7bf69b2bc2b3357dec8b1d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:79:87:ad:6d:08:f7:a2:72:d9:e7:34:49:3f:
aa:6c:16:6b:24:48:7b:77:2a:01:e9:bb:50:12:fa:
38:6d:1e:8e:1d:98:42:95:5d:4d:9e:b7:fc:25:e9:
b9:1b:96:35:0c:a5:7a:fc:f2:cf:34:6a:8a:67:69:
74:0c:57:c3:b0:7d:1b:c3:73:2b:42:35:84:ec:6a:
54:55:4e:c3:85:c2:59:43:2b:80:0c:5d:cf:1a:02:
15:5b:f6:ce:57:a1:96:f2:a3:ce:3c:75:09:81:11:
b4:9c:1f:3e:5a:89:3d:d5:ea:75:9d:97:1b:28:bf:
7d:a1:b3:5b:be:a4:d4:e8:e8:b6:c0:36:ae:a0:ac:
f9:3d:75:bf:ee:d7:70:46:8c:1b:a3:f2:b3:ac:fd:
7f:9f:25:e2:b3:57:fc:0d:0d:ec:a3:50:29:0e:94:
d9:64:4c:ba:ba:6a:6f:d4:f4:3f:ff:b5:9a:ab:30:
e0:89:27:ca:7e:cc:cb:61:43:36:82:69:42:84:f6:
d7:6a:c8:67:21:f3:67:48:a5:40:dc:bb:07:50:4d:
d3:74:81:00:cf:96:52:c3:c4:13:4a:1e:33:d5:09:
18:67:71:4a:4c:42:fd:9a:93:aa:2d:40:5b:fc:8f:
48:d7:85:33:39:56:2b:73:7b:e5:36:21:fc:87:37:
d0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6B:C8:AE:2B:89:C4:FD:7B:F6:9B:2B:C2:B3:35:7D:EC:8B:1D:13
X509v3 Authority Key Identifier:
keyid:08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8b:cc:a5:0b:e2:dc:4e:0a:6a:70:4d:51:ce:ce:af:ea:5a:
15:90:60:62:ce:c0:e0:95:f1:27:76:ba:41:65:52:ac:42:b6:
e4:25:7c:22:df:73:d2:a0:d3:72:be:4f:c0:e2:51:a0:30:3c:
f5:de:af:ad:a4:7b:5b:ab:1e:f5:09:07:ba:96:e6:f9:86:d3:
18:e3:d7:04:8d:c5:f5:69:52:bb:85:72:58:25:be:82:10:44:
4a:7e:c3:27:39:ca:00:a0:6a:03:25:3d:30:62:dc:de:10:07:
7a:fb:9e:5c:5a:b1:2b:a0:c1:9a:c8:f5:5a:76:05:12:a6:4b:
d0:cb:2d:3c:e7:e4:d0:53:bb:9e:ec:c9:f5:da:87:00:78:5b:
89:b5:ee:f1:36:46:22:b9:c9:44:57:f2:a2:c3:33:ce:56:0e:
f6:8d:bc:2f:24:7b:4f:d6:b7:8f:e1:58:0b:22:3e:56:a8:9c:
f3:23:91:a6:dc:c0:6a:38:ae:05:c7:2f:6f:9e:da:ac:a3:6c:
e4:60:98:ea:39:a9:55:72:1f:c4:d9:55:1e:f6:4e:80:aa:93:
b5:b4:af:3b:b6:50:df:58:20:0c:d9:8a:14:fd:3e:ce:fd:b5:
d9:f4:c0:04:dd:0a:39:d0:89:01:e6:23:8c:8d:f4:ec:0c:28:
fb:bd:cd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:38 2026 by rpki-client