
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
File: CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft (raw, json)
Hash identifier: 0xkoDp4qIgdI5Rlw7Asdvt5TKD/7TEZFt6bU7BTxJbM=
Subject key identifier: 5B:41:43:FC:05:7A:CB:94:09:0E:02:D8:DA:65:FC:E6:59:63:B0:CF
Authority key identifier: 08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21
Certificate issuer: /CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
Certificate serial: 01A03FE060A4A921650E9A2F8CDF49FFBCD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
Manifest number: 023F
Signing time: Wed 26 Aug 2026 21:01:04 +0000
Manifest this update: Wed 26 Aug 2026 21:01:04 +0000
Manifest next update: Thu 27 Aug 2026 21:01:04 +0000
Files and hashes: 1: CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl (hash: xwg6viyZdWKo8dVo3jhJOdLe8tnb7/lEkgYQfyrawUM=)
2: Y1BBsDkkWgEF03wDI0HCnPosmio.asa (hash: IevDpGbfjZ+T3hHUsK1Etx0/ZUjksfcbztMdQzNnqY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:e0:60:a4:a9:21:65:0e:9a:2f:8c:df:49:ff:bc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
Validity
Not Before: Aug 26 21:01:04 2026 GMT
Not After : Aug 27 21:01:04 2026 GMT
Subject: CN=5b4143fc057acb94090e02d8da65fce65963b0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4d:6d:fb:75:e5:a3:3f:18:6e:3e:99:c8:9b:
13:98:27:4a:23:a9:2a:9d:bb:6f:5b:3d:61:c3:fe:
8b:39:f8:bf:e0:5a:61:47:ac:6b:55:0b:e3:3d:43:
56:d0:fd:07:68:63:5b:06:eb:00:eb:3f:39:25:ca:
9e:82:eb:52:2b:c2:69:95:ba:e9:b1:67:e5:a4:01:
7a:c9:58:fa:32:8b:4a:99:c5:f8:6c:1c:34:e8:4e:
92:59:a6:48:c9:3f:e7:51:05:bd:a5:ab:c0:1f:02:
28:49:e1:aa:9c:ce:3e:0b:d9:de:7e:af:7a:3d:65:
8a:e7:48:8b:8a:2a:27:6b:08:97:b2:60:dd:11:36:
95:93:51:7b:57:49:a2:4d:0e:35:49:3d:7a:b1:c3:
f7:82:65:69:2f:76:c4:a1:ac:d0:fa:83:17:19:20:
ba:25:14:50:31:02:39:d9:30:17:e4:6c:f0:69:61:
fc:c7:fa:b4:2c:b7:6a:6d:4d:9c:c5:a8:d7:bb:32:
54:64:98:7f:dc:aa:a7:4e:f4:c6:4a:bb:2b:cf:9e:
23:77:e6:e7:ab:40:53:bf:a3:d2:33:82:a5:d7:8c:
7c:be:27:98:4d:0d:4f:22:38:ab:c1:89:1a:65:bc:
ed:ea:15:2d:6d:0c:8d:5f:e0:6f:e6:88:2f:a2:e4:
f1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:41:43:FC:05:7A:CB:94:09:0E:02:D8:DA:65:FC:E6:59:63:B0:CF
X509v3 Authority Key Identifier:
keyid:08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:65:26:e6:0f:69:61:0c:5a:bc:3d:2c:1f:48:8d:3d:e5:6b:
26:ac:e4:55:9d:fb:a3:1f:e0:16:55:17:1a:b1:c4:f8:71:c7:
e3:73:51:34:6a:71:8d:5d:d5:f0:87:27:f1:91:a2:46:47:a4:
21:8a:6b:5a:4d:54:e9:90:c6:59:79:00:6c:c7:ce:9d:35:49:
0d:f8:ab:b0:5c:6a:b3:2f:9d:09:42:6e:35:2d:de:4e:3c:23:
31:90:00:57:b5:7c:44:d5:81:ce:23:eb:a0:3f:7c:cd:9e:be:
33:d3:e9:65:90:3c:14:b5:42:c9:fc:72:da:0f:d0:ee:81:ee:
23:7b:19:48:e3:d5:e4:97:6b:a8:c2:fe:f8:ef:e5:e9:e2:9e:
a3:df:b9:15:9a:f2:6e:3e:f5:62:3f:d6:ea:8b:19:b6:30:e1:
2d:73:0a:0f:ad:75:4e:ba:22:71:b5:c2:d8:33:7f:04:f7:ce:
b4:a2:05:82:f2:16:cd:ba:2a:2f:8b:8e:27:bc:23:18:f6:f5:
ef:ea:a9:46:69:c1:98:2b:7b:fd:13:8d:bd:0c:6f:37:6a:25:
00:d8:de:99:cc:55:54:70:f4:94:fd:35:d8:b1:75:26:a1:e5:
a1:fe:7b:35:f0:a8:84:14:35:35:46:8b:17:ad:47:66:12:1b:
f1:e8:1a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:55:29 2026 by rpki-client