Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
File: CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft (raw, json)
Hash identifier: QeOMxstXOpKE85S7v+tsn26i0CcTvdMris6PRbWD2Wo=
Subject key identifier: FC:0D:DA:C3:6E:4A:CF:D0:65:5F:0A:18:53:7E:50:18:2A:75:83:59
Authority key identifier: 08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21
Certificate issuer: /CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
Certificate serial: 019EE51FE3D3E6A8941F1BB60953BBED3351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
Manifest number: 018B
Signing time: Sat 20 Jun 2026 13:02:12 +0000
Manifest this update: Sat 20 Jun 2026 13:02:12 +0000
Manifest next update: Sun 21 Jun 2026 13:02:12 +0000
Files and hashes: 1: CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl (hash: b+aFycI/0J+tTe0FEx1hTbqk8Pr3yh4ID57U9Zlrbnw=)
2: SE7WHQ_t5xTvIw5RVXqHMUCzyhw.asa (hash: IGvw1+pEk3vTnCru3aJqTEvcp914nnvX2nmQCu0ykb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 13:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e5:1f:e3:d3:e6:a8:94:1f:1b:b6:09:53:bb:ed:33:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
Validity
Not Before: Jun 20 13:02:12 2026 GMT
Not After : Jun 21 13:02:12 2026 GMT
Subject: CN=fc0ddac36e4acfd0655f0a18537e50182a758359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ac:d9:05:74:64:a8:90:db:35:53:4e:4a:22:
72:98:76:00:62:78:ce:8d:f8:d2:1e:64:13:ce:91:
03:4d:f0:e1:d4:06:f1:f8:2e:55:ea:de:2c:6a:3b:
4f:54:e4:b0:0c:55:0c:ca:53:7c:90:d1:23:6c:fc:
7c:8c:f2:72:ac:e6:f1:76:9a:96:28:db:ec:16:83:
08:43:33:79:76:3b:90:51:97:5a:df:03:40:0b:85:
d2:fe:60:34:be:0f:6e:44:76:21:de:d2:9b:86:0c:
ee:ce:0f:b5:f1:79:b9:c7:f0:19:cd:9f:27:d5:ac:
27:da:7c:89:30:c2:ef:9b:7b:7f:07:a1:4c:a0:ba:
b2:4d:85:dd:1c:0e:f1:a2:8b:ac:dc:13:99:a9:b8:
7e:46:00:77:68:aa:85:d1:46:61:08:b4:77:d8:41:
e9:e1:f8:7b:39:f9:82:32:52:e0:f7:ce:b3:65:90:
1d:2f:7b:b6:c7:9a:c0:c3:b8:1e:8c:b3:3a:e8:dc:
f4:a6:90:72:aa:ae:ae:68:56:28:9d:76:72:c6:98:
65:be:73:d2:94:30:06:22:3b:3d:5a:76:9d:f7:17:
20:79:b3:58:e9:b2:a5:ab:43:18:8f:5d:96:a9:77:
b6:0a:4b:21:05:6b:9c:22:a3:62:14:e9:e2:1e:de:
92:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0D:DA:C3:6E:4A:CF:D0:65:5F:0A:18:53:7E:50:18:2A:75:83:59
X509v3 Authority Key Identifier:
keyid:08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:33:d0:12:f9:32:6a:28:82:d0:d9:d2:10:dc:53:32:36:62:
f3:a8:af:ea:7c:e2:23:5c:3b:bf:cb:65:54:38:c0:c1:28:2b:
03:c3:0e:0c:c2:92:42:0a:f1:95:15:26:05:e9:7b:e0:4e:c6:
8d:45:6c:39:35:f9:ea:06:ba:a8:7f:45:37:0a:46:be:93:ec:
bb:2b:2e:38:8b:60:d9:1f:97:42:01:da:58:94:6d:da:97:94:
b8:e0:1f:7f:34:06:d2:e3:ec:ef:74:44:03:5c:3d:d1:48:86:
15:8a:e0:50:55:9d:47:4f:15:7a:fa:17:8f:a2:cf:0e:d7:b9:
73:4e:0e:b7:63:16:03:7a:90:00:3f:95:0e:6c:14:07:2c:2d:
da:09:6b:a5:23:1f:5d:1d:41:14:19:ea:c5:7f:69:f5:92:e2:
67:cb:fa:2a:97:92:ed:cd:60:a2:c3:00:9d:29:22:da:ee:6a:
bb:6b:b4:6d:78:7b:dc:ee:48:be:ab:1e:b5:5f:c4:04:d6:e7:
36:ba:f8:c5:c0:46:cc:ab:ad:73:23:05:db:91:a7:c0:cb:ff:
9e:b5:1f:c2:46:d7:11:1b:bd:f9:11:b6:c0:00:38:a5:68:c7:
11:71:36:ec:45:db:76:ee:af:c6:18:1d:2c:97:09:e4:64:93:
0c:60:2b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 00:12:08 2026 by rpki-client