Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
File: CjTa4xWrmAkiVnFV55LRr0QeAEE.mft (raw, json)
Hash identifier: VVB3XaudGW5BmRb8eetgrLQ0suvTeM34NJvkYFz+Pls=
Subject key identifier: 21:85:A0:12:46:B5:F3:18:21:8E:71:A8:84:17:0B:3C:52:C4:84:32
Authority key identifier: 0A:34:DA:E3:15:AB:98:09:22:56:71:55:E7:92:D1:AF:44:1E:00:41
Certificate issuer: /CN=0a34dae315ab980922567155e792d1af441e0041
Certificate serial: 01A040F33466556B6A672E4C568EEFE33BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjTa4xWrmAkiVnFV55LRr0QeAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
Manifest number: 01E8
Signing time: Thu 27 Aug 2026 02:01:15 +0000
Manifest this update: Thu 27 Aug 2026 02:01:15 +0000
Manifest next update: Fri 28 Aug 2026 02:01:15 +0000
Files and hashes: 1: CjTa4xWrmAkiVnFV55LRr0QeAEE.crl (hash: IQ1GH7Da+jQnyUtjsl84ti+FT/2Fu0kt5haOZJ8m1Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjTa4xWrmAkiVnFV55LRr0QeAEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:f3:34:66:55:6b:6a:67:2e:4c:56:8e:ef:e3:3b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a34dae315ab980922567155e792d1af441e0041
Validity
Not Before: Aug 27 02:01:15 2026 GMT
Not After : Aug 28 02:01:15 2026 GMT
Subject: CN=2185a01246b5f318218e71a884170b3c52c48432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:1b:5b:9e:6c:fe:60:4b:42:87:3d:f3:67:
6b:ff:7c:1f:4a:c3:81:c2:d6:77:b3:dd:d3:47:d6:
54:79:67:c4:3f:48:ce:a1:fc:32:5a:f3:3c:61:dd:
08:f9:dc:d5:79:b1:d6:34:65:01:d6:02:fd:35:17:
3c:c3:df:c2:79:ad:46:aa:5e:76:18:c9:20:75:8b:
3e:b8:0f:ad:ab:5a:ca:17:81:cc:aa:32:f1:03:cd:
db:60:39:bf:41:58:f0:cb:c9:04:41:4e:85:42:2c:
b4:36:73:24:c0:1a:85:4c:ff:02:05:f4:f6:83:cf:
ae:cd:69:d4:96:7a:be:37:cf:44:22:78:5b:51:65:
66:1f:24:5c:d9:a6:f8:60:4d:b1:aa:3d:b7:4c:65:
80:07:ea:62:10:98:00:f4:6a:42:bd:9a:6e:13:81:
88:02:97:0b:c9:40:f1:a5:5a:f6:b4:24:ef:ae:15:
20:34:d4:fd:ae:1a:b7:d3:0c:a7:88:7b:cd:ca:bf:
cd:75:78:71:81:e6:78:c6:c5:8a:79:51:2a:37:21:
9a:de:b6:cb:9e:5b:d8:7e:a3:90:56:e1:57:f4:86:
0d:c2:64:d0:b5:95:cd:78:35:ae:e3:b7:eb:30:c4:
41:d9:f9:cb:90:ad:e8:51:b4:da:36:b8:2b:ef:80:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:85:A0:12:46:B5:F3:18:21:8E:71:A8:84:17:0B:3C:52:C4:84:32
X509v3 Authority Key Identifier:
keyid:0A:34:DA:E3:15:AB:98:09:22:56:71:55:E7:92:D1:AF:44:1E:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjTa4xWrmAkiVnFV55LRr0QeAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:09:f4:3d:a0:d6:17:87:87:74:92:09:16:22:4d:9d:4d:8d:
74:9f:aa:06:44:76:43:d7:34:59:2a:82:60:a3:a1:98:2a:67:
83:c4:68:25:ed:44:d9:85:8b:2f:5d:c2:3e:21:ac:24:85:d5:
76:fb:a6:5d:db:a4:31:fc:41:c3:e7:00:49:46:ad:b0:22:0f:
39:2a:8f:43:b8:60:d7:49:12:be:8c:62:18:d6:e8:f7:28:9d:
53:85:54:c9:04:d6:c7:6e:15:ee:aa:aa:61:5f:44:e2:2e:62:
d1:16:e9:c9:02:a8:6c:67:13:67:e8:34:55:3c:35:ca:bd:75:
97:c8:76:d5:d9:3e:7d:3d:e1:60:07:51:3c:20:56:88:07:12:
83:e1:88:21:6c:fe:4f:f8:71:85:01:71:76:ac:83:6b:fb:36:
72:77:e0:0f:a3:5d:30:86:b7:31:1c:db:df:3d:7f:91:c0:0d:
43:de:cd:53:ee:47:5a:e1:32:df:f4:a5:a4:00:9f:ac:80:b5:
95:80:22:78:86:49:8f:65:aa:e5:fe:61:a1:f1:bd:de:a2:7d:
bb:5c:01:2e:23:1c:2c:84:cc:bb:11:52:52:08:bd:ae:ee:f9:
66:bd:02:82:ba:29:24:e8:3c:ae:98:4f:b2:ab:f9:34:d4:2d:
4d:d7:6d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:45 2026 by rpki-client