Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
File: CjTa4xWrmAkiVnFV55LRr0QeAEE.mft (raw, json)
Hash identifier: 2MeNUaBLFYbeQurtWuxDDTFp+mHf2VVeZy6DAd/YBQA=
Subject key identifier: D9:D1:4D:B0:00:FE:D7:58:CE:91:42:91:F2:AE:00:A7:D2:C8:0A:79
Authority key identifier: 0A:34:DA:E3:15:AB:98:09:22:56:71:55:E7:92:D1:AF:44:1E:00:41
Certificate issuer: /CN=0a34dae315ab980922567155e792d1af441e0041
Certificate serial: 019D3A8A9EA11961B81310BFB16EBBBFADC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjTa4xWrmAkiVnFV55LRr0QeAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
Manifest number: 57
Signing time: Sun 29 Mar 2026 17:00:56 +0000
Manifest this update: Sun 29 Mar 2026 17:00:56 +0000
Manifest next update: Mon 30 Mar 2026 17:00:56 +0000
Files and hashes: 1: CjTa4xWrmAkiVnFV55LRr0QeAEE.crl (hash: B9/9wVQkmH2mLCxry/wzDgWvN6rrn4D8q0Xgr0oGEtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjTa4xWrmAkiVnFV55LRr0QeAEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:9e:a1:19:61:b8:13:10:bf:b1:6e:bb:bf:ad:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a34dae315ab980922567155e792d1af441e0041
Validity
Not Before: Mar 29 17:00:56 2026 GMT
Not After : Mar 30 17:00:56 2026 GMT
Subject: CN=d9d14db000fed758ce914291f2ae00a7d2c80a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:15:0e:8b:a4:a8:3b:7f:62:2b:ed:8a:38:d8:
33:cc:78:75:a0:69:2d:b5:cb:d8:96:a5:13:3e:74:
44:2c:60:0f:5d:bf:42:76:07:eb:0c:7c:52:1d:bb:
0a:07:7a:26:d7:13:ce:90:98:7a:74:d0:8e:b4:62:
35:38:ef:3c:ff:b7:fa:f5:29:38:08:05:d2:8a:f9:
61:2a:fd:99:28:3a:df:55:0e:e2:b3:a8:b6:13:63:
13:bc:b8:63:7b:34:c9:bc:ca:df:de:bf:13:88:bb:
c9:1f:2f:de:f3:24:dc:cd:94:74:fd:a8:56:0f:9b:
f0:a2:fe:ec:a0:8e:91:bb:5f:48:69:06:cc:f9:63:
96:d7:4b:e1:cc:9c:10:20:b7:81:fd:78:93:35:e3:
8b:a5:da:39:10:0f:7e:6b:04:f7:88:01:ac:ca:f7:
ce:ef:18:0b:12:c5:7d:b2:6c:97:97:d9:4f:9a:87:
1b:44:6e:2e:46:35:27:3f:25:96:80:43:6f:c2:a7:
6f:01:10:a9:7e:c1:f9:77:c1:ba:45:cc:96:f2:61:
93:ea:14:30:1c:d0:c2:3e:db:e4:41:26:7c:24:3e:
13:d1:25:51:65:13:26:15:23:3d:ad:d1:53:09:39:
22:92:89:7a:d0:e9:33:b1:ab:1e:06:ba:09:70:b8:
b9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D1:4D:B0:00:FE:D7:58:CE:91:42:91:F2:AE:00:A7:D2:C8:0A:79
X509v3 Authority Key Identifier:
keyid:0A:34:DA:E3:15:AB:98:09:22:56:71:55:E7:92:D1:AF:44:1E:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjTa4xWrmAkiVnFV55LRr0QeAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9b0bbc-2c41-4448-b158-eb24507ac641/1/CjTa4xWrmAkiVnFV55LRr0QeAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:28:a8:3d:52:86:c9:43:a5:3b:a1:47:10:e7:9c:56:35:98:
30:6e:a4:37:b9:b6:3c:87:4e:1e:65:69:7e:45:8b:cb:43:bd:
ba:db:7f:ac:b7:77:7b:3e:d0:55:29:39:91:82:ca:95:27:3b:
ed:a5:5b:c4:a5:c6:f2:a4:4b:12:ab:d4:f3:87:60:86:60:3e:
92:8a:b7:6a:95:9f:f6:b5:7d:52:af:04:a7:f3:2b:2c:c5:c8:
8e:6c:6a:47:fa:26:ca:1b:26:52:55:4f:09:8b:44:1c:87:89:
1c:ba:66:65:be:74:c8:5f:f5:cb:84:fc:fd:10:d2:4b:65:71:
5a:ba:39:ef:06:ae:47:d2:98:8a:78:a7:7e:38:81:1f:5d:21:
db:25:1b:7c:6e:a8:92:e1:26:ec:4e:15:a2:60:97:3c:cf:c3:
50:54:0f:d8:bb:74:b9:6f:ac:a3:ca:a3:45:c3:dd:8e:31:d3:
7b:90:6e:c3:b3:97:3e:6c:0c:a9:1b:e0:5f:ea:da:86:04:00:
6c:a4:d2:f0:2e:46:03:2f:1b:ae:19:2e:63:84:04:55:84:70:
87:88:f5:c9:88:ca:73:7b:8f:a7:0b:1d:39:a5:f9:55:ab:35:
e8:05:25:4d:9e:a6:e3:98:ad:c8:b2:94:a9:16:32:2d:d5:83:
8a:a2:72:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:23 2026 by rpki-client