Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier: DnWDwM1Gh4JJqRK/ecI7YlQN2CgzOW5TrdkVz5eroHM=
Subject key identifier: 87:1C:17:95:07:8E:EB:74:51:B1:51:74:2A:2D:E8:47:48:BF:DA:55
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 019E9101819B8422D14B20B523B09CC8E4C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number: 0C85
Signing time: Thu 04 Jun 2026 05:00:55 +0000
Manifest this update: Thu 04 Jun 2026 05:00:55 +0000
Manifest next update: Fri 05 Jun 2026 05:00:55 +0000
Files and hashes: 1: RpRVr86nrmR4pLP_o-Dkxgygl-I.roa (hash: dYMAWblY0LPrzbeqEQ3uJpDKV9wamvkF6WdwjSusrRI=)
2: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: dnCauxQHn261Ay3BQ6UKHTzEzSWIGGk2JuWGx4EIUN0=)
3: exmQSDmoNH_azOiipU8IusPL-zE.roa (hash: tOEc7EoupcuUU99+9kHSEhJIEOT6G42NFE+0vNPQoj4=)
4: zLLpSlai4j_BckMwzN3FZevoFJI.roa (hash: X+bvA7vFedjj2qlLm3vDJgVyiO2iqldPs11sP4fxghM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:01:81:9b:84:22:d1:4b:20:b5:23:b0:9c:c8:e4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Jun 4 05:00:55 2026 GMT
Not After : Jun 5 05:00:55 2026 GMT
Subject: CN=871c1795078eeb7451b151742a2de84748bfda55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:8a:2e:6a:38:14:d5:06:04:bc:88:19:f3:
e4:e9:bb:9a:b2:13:52:77:e4:3b:d7:47:c7:d4:f4:
6c:6d:66:b8:83:1e:cc:b0:1a:7d:78:de:bf:59:e7:
4d:c4:a8:d7:74:70:be:e3:07:76:b2:e2:4b:a9:3f:
a3:02:61:b0:c4:46:c1:d4:a7:45:da:c2:a8:be:c6:
c9:41:8a:27:73:b7:cf:89:64:d6:16:44:51:b6:0b:
14:b3:6d:09:f7:24:76:6c:6e:b3:d7:ed:52:1d:e5:
74:86:3f:6c:e0:a9:81:96:16:7f:ac:d8:3e:a3:ed:
d4:89:10:75:62:e8:d6:06:ba:66:1d:61:22:75:39:
02:19:cf:6f:8f:39:1b:a5:7a:11:13:f5:0a:a7:34:
a3:c9:d5:89:3a:fc:7f:48:e3:38:74:a6:62:2b:70:
22:0f:d8:58:3d:9b:44:d8:c3:8d:bb:46:c9:fb:6f:
22:55:28:b3:bc:38:1d:22:98:a7:8d:a6:10:9c:8f:
2a:6e:71:56:dc:e1:b4:90:44:4e:cc:cd:fc:b0:e6:
58:39:bd:44:34:c9:ad:d7:97:c3:a2:78:29:3e:27:
6a:2b:8a:da:ae:06:9b:39:75:f6:08:94:ff:68:ff:
e8:22:00:c3:e7:b7:58:b6:91:c5:57:7b:05:c4:a4:
e7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1C:17:95:07:8E:EB:74:51:B1:51:74:2A:2D:E8:47:48:BF:DA:55
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:36:be:aa:57:3e:5f:a1:0c:95:af:37:77:ba:ce:54:19:1b:
bf:34:ff:6a:b7:a0:04:6a:1f:29:4f:d9:8f:e3:1e:e3:fe:6c:
9c:45:c7:84:a4:f3:da:a4:de:53:01:16:96:f9:63:d3:fa:aa:
7e:20:76:48:af:8e:30:20:2b:79:da:ef:c9:d3:c8:e9:7f:59:
f5:ce:fe:62:1c:82:88:7d:48:d8:45:d4:10:d2:ea:4f:f8:57:
3d:c2:7b:33:4e:2b:a2:d0:d6:d4:87:d1:41:e6:a8:98:ec:38:
65:cd:18:79:15:04:8d:59:1a:3c:fd:b1:4c:0c:37:90:18:71:
5f:3c:a9:ef:8a:68:80:10:8f:f3:de:24:63:0f:ba:9e:e2:55:
28:66:e7:88:76:b8:36:da:d0:f7:d1:27:b0:ba:bf:c5:b8:57:
39:e4:41:cd:84:17:39:1e:55:3e:93:54:0e:1e:82:ce:39:e5:
1d:dd:d3:31:95:ba:c5:59:1a:10:a8:8d:fb:0a:97:78:a1:d7:
10:32:1b:d5:69:03:d0:9c:a3:e7:b6:61:96:b2:81:0f:cf:ed:
98:d1:56:ed:62:fd:c3:ac:d1:34:92:d5:fb:a7:48:51:91:79:
02:3f:b2:5b:8d:d0:fa:48:4d:26:7f:61:b6:4e:73:23:a8:8f:
42:1c:1c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:26:39 2026 by rpki-client