Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
File: CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft (raw, json)
Hash identifier: E3G0WzomS5sktdX+XqYS580kc8dW/7UM307lPPasnRE=
Subject key identifier: 5A:1E:B6:7C:AB:B3:1A:7D:BC:70:2D:ED:79:21:55:9B:31:0F:6E:5C
Authority key identifier: 08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
Certificate issuer: /CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Certificate serial: 019F197A7A2B2F131C0F0E7DF312EFC42E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
Manifest number: 0CE8
Signing time: Tue 30 Jun 2026 17:01:24 +0000
Manifest this update: Tue 30 Jun 2026 17:01:24 +0000
Manifest next update: Wed 01 Jul 2026 17:01:24 +0000
Files and hashes: 1: CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl (hash: DW0mA+jS7ENULSiZ5U2rqkrlsDnsDBiLi8c8qMHPW3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:7a:2b:2f:13:1c:0f:0e:7d:f3:12:ef:c4:2e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Validity
Not Before: Jun 30 17:01:24 2026 GMT
Not After : Jul 1 17:01:24 2026 GMT
Subject: CN=5a1eb67cabb31a7dbc702ded7921559b310f6e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:26:dc:a3:b9:81:f6:79:6a:8a:47:39:94:01:
a6:18:b5:25:f9:56:1f:5a:3a:ee:dc:08:a8:73:ed:
56:ec:b7:b4:a4:d4:df:0f:d5:18:1c:1a:16:31:60:
3b:1a:9b:f4:9a:b3:25:27:e4:3c:43:34:fa:b6:ea:
d1:d9:f5:1d:0d:34:5d:e0:db:a7:56:ae:5e:da:1b:
45:7f:f0:44:6c:12:b9:32:af:44:eb:91:b5:90:f5:
72:8d:59:ca:3c:5e:a0:23:92:9e:27:31:79:e1:e5:
a3:6f:b8:1f:1c:ef:b5:3d:31:98:8f:58:97:8f:bd:
fa:94:83:fb:67:23:fe:48:4b:46:ab:a3:68:6f:a5:
9b:3b:0b:6c:33:7e:f2:30:e2:69:d4:9b:c9:63:73:
d5:b8:da:a7:4b:47:ed:6c:ff:48:1f:d8:59:c0:c7:
63:ee:ed:8e:15:f4:bb:a4:7a:35:97:6e:1a:2a:29:
13:d7:27:d0:b6:d4:0a:7a:14:2e:1c:d7:e1:0e:93:
ca:1d:f7:58:96:64:e3:d1:23:66:45:2b:bb:7a:fb:
21:44:ce:e4:09:61:c6:b3:b4:d9:b2:d1:cb:50:d3:
6c:f3:16:73:8a:d8:96:b5:99:ab:98:95:eb:5a:2c:
df:fc:e3:f6:e6:0f:36:7e:11:f8:f9:bd:57:6e:a9:
86:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1E:B6:7C:AB:B3:1A:7D:BC:70:2D:ED:79:21:55:9B:31:0F:6E:5C
X509v3 Authority Key Identifier:
keyid:08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7a:4a:a2:0a:a0:c1:a1:36:d0:29:51:ee:4f:5e:86:b7:98:
0c:a9:04:35:11:ad:76:fb:67:3a:7d:d3:fe:15:97:c3:de:9c:
30:53:b1:30:e6:85:d0:23:a2:dc:af:b8:cf:9e:e1:09:50:ab:
5f:65:22:16:9b:f9:22:fe:87:1b:f5:6f:22:d2:3b:c0:54:65:
a5:f0:0a:6a:3c:f0:e8:ec:6b:c3:90:35:8d:2c:6b:1d:df:7b:
78:89:f3:7a:41:db:99:6d:e9:c6:19:d5:88:56:84:bc:54:51:
ae:d7:36:bf:8c:fa:2a:55:b9:d3:74:c9:56:f7:25:6a:33:67:
17:fa:07:b9:f2:b4:01:7f:e6:06:67:3b:e1:a5:74:8e:f0:41:
ef:83:8f:56:23:71:45:e7:f3:42:34:a0:18:c4:e0:5e:a1:fd:
92:e2:a3:91:68:30:42:8f:e7:4f:4e:9d:0b:3c:2e:ef:07:de:
a8:7a:db:fc:1b:21:3d:85:73:ba:5c:26:1e:3b:d6:7a:78:70:
80:2f:da:c4:45:1e:fa:13:94:56:4e:5b:40:cb:c2:28:cc:1d:
7a:43:6b:d5:5b:b3:5e:1f:6e:d2:42:7b:71:10:f9:75:6a:fa:
c1:0d:96:10:84:90:83:91:de:7d:25:4f:63:19:55:4d:75:14:
aa:43:cf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:23 2026 by rpki-client