Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
File: CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft (raw, json)
Hash identifier: mlOl/v3CS5v/dTbZ9DIsUxEZZrfEZzo63RAKOV8W+7I=
Subject key identifier: CA:C5:D0:69:39:76:F6:8C:35:BA:02:05:84:CC:13:5C:AE:63:BC:57
Authority key identifier: 08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21
Certificate issuer: /CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
Certificate serial: 019D38662A971CA2D6535270F33BD48AD605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
Manifest number: AD
Signing time: Sun 29 Mar 2026 07:01:52 +0000
Manifest this update: Sun 29 Mar 2026 07:01:52 +0000
Manifest next update: Mon 30 Mar 2026 07:01:52 +0000
Files and hashes: 1: CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl (hash: EnqE8qD0M6+9RwGTX/nXmY6uEgC5rt381O4N4e994Yo=)
2: SE7WHQ_t5xTvIw5RVXqHMUCzyhw.asa (hash: IGvw1+pEk3vTnCru3aJqTEvcp914nnvX2nmQCu0ykb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:2a:97:1c:a2:d6:53:52:70:f3:3b:d4:8a:d6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
Validity
Not Before: Mar 29 07:01:52 2026 GMT
Not After : Mar 30 07:01:52 2026 GMT
Subject: CN=cac5d0693976f68c35ba020584cc135cae63bc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:f4:3e:fa:0d:c0:0b:40:39:c8:6f:46:96:
ae:4b:d1:5d:95:99:61:ee:e9:b4:78:09:8f:cf:c0:
17:8a:55:4c:36:1c:a2:4e:af:f1:7b:ff:44:f2:44:
8d:ae:65:1e:e6:7b:cd:53:dd:54:21:6c:52:a3:62:
2a:ed:ec:af:8c:4d:63:a7:8d:75:af:39:10:76:c6:
5b:e7:85:91:ed:6b:b8:d2:61:7f:fc:45:59:ef:47:
38:c0:a8:20:0f:37:a0:2a:7e:08:06:a8:f9:47:1e:
df:f3:1a:bd:81:e5:de:33:f4:16:f6:8a:63:72:f0:
56:af:00:d3:ba:9b:fb:3d:57:f5:d4:0c:d9:6d:91:
79:cc:21:07:89:2c:e9:c9:e1:2a:91:38:fe:b1:1d:
00:eb:da:91:f3:ee:be:24:c8:80:b7:ee:70:1a:5e:
1c:a8:67:ab:04:c7:dc:61:c4:88:d8:4f:5e:eb:7d:
ac:56:e9:e8:6c:4b:a7:50:63:92:a6:0f:be:fd:f3:
45:24:0a:63:2f:0b:45:d0:12:fc:95:70:63:6b:2c:
42:94:59:c2:6a:f9:4d:6d:86:31:d3:63:b4:84:d8:
a9:4d:d2:8e:87:2f:2b:55:a7:66:c8:55:a1:8f:05:
11:3d:c1:35:14:f0:f2:eb:51:7a:22:f4:bd:fa:34:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C5:D0:69:39:76:F6:8C:35:BA:02:05:84:CC:13:5C:AE:63:BC:57
X509v3 Authority Key Identifier:
keyid:08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:be:8f:94:0f:50:2e:a4:10:89:0c:52:a6:ee:b3:55:3a:94:
e3:91:6b:77:32:7c:4d:b0:e4:27:e7:e1:c6:b1:48:36:93:55:
64:3b:ce:b9:46:65:b1:1a:c4:55:8e:bf:0b:1a:df:12:49:a8:
a7:ee:b0:75:77:de:cd:93:83:ce:b2:8d:d3:fc:e6:27:ee:df:
f3:1e:86:ee:87:27:de:51:4d:c9:9f:49:fb:08:19:20:2a:a8:
15:b8:02:cc:dc:c4:e2:50:86:50:f2:32:06:b9:02:8f:95:e7:
40:76:7b:fc:eb:a0:62:e2:b8:0c:4a:42:1d:0c:45:c7:d3:53:
17:d2:ac:44:ca:34:8a:6f:4a:21:55:a7:b1:96:39:fe:c8:96:
4e:71:6e:e7:fb:52:59:20:4e:c2:e5:2c:83:da:5e:cc:dc:84:
68:60:0a:7d:05:3f:bb:2b:fd:ab:9b:6a:4b:1a:61:90:db:0a:
e9:f6:32:c8:04:f5:b6:eb:98:99:50:c7:f2:6b:5c:97:fa:d5:
e9:94:9a:ab:99:ab:16:e8:b5:8d:d4:5e:05:6e:4b:35:25:6a:
b4:60:bc:44:6b:1b:2a:1e:2a:93:9d:89:0e:f8:da:29:b1:8e:
df:6d:1c:33:21:db:ca:bf:84:50:c2:81:72:46:b8:b6:e0:7e:
85:2e:f6:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZiqXHKLWU1Jw8zvUitYFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OWI0ZDZmN2EwYTMzYjAxODA0MTFlZDc0Zjg3YTdjZmVk
OTY1MjEwHhcNMjYwMzI5MDcwMTUyWhcNMjYwMzMwMDcwMTUyWjAzMTEwLwYDVQQD
EyhjYWM1ZDA2OTM5NzZmNjhjMzViYTAyMDU4NGNjMTM1Y2FlNjNiYzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFj0PvoNwAtAOchvRpauS9FdlZlh
7um0eAmPz8AXilVMNhyiTq/xe/9E8kSNrmUe5nvNU91UIWxSo2Iq7eyvjE1jp411
rzkQdsZb54WR7Wu40mF//EVZ70c4wKggDzegKn4IBqj5Rx7f8xq9geXeM/QW9opj
cvBWrwDTupv7PVf11AzZbZF5zCEHiSzpyeEqkTj+sR0A69qR8+6+JMiAt+5wGl4c
qGerBMfcYcSI2E9e632sVunobEunUGOSpg++/fNFJApjLwtF0BL8lXBjayxClFnC
avlNbYYx02O0hNipTdKOhy8rVadmyFWhjwURPcE1FPDy61F6IvS9+jRqYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrF0Gk5dvaMNboCBYTME1yuY7xXMB8GA1UdIwQY
MBaAFAibTW96CjOwGAQR7XT4enz+2WUhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0p0TmIzb0tNN0FZQkJIdGRQaDZmUDdaWlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wOTcwMzQtMDk1My00YWI2LTkxYzIt
YzUwMDlhYjFmZGFmLzEvQ0p0TmIzb0tNN0FZQkJIdGRQaDZmUDdaWlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wOTcwMzQtMDk1My00YWI2LTkxYzItYzUwMDlhYjFmZGFm
LzEvQ0p0TmIzb0tNN0FZQkJIdGRQaDZmUDdaWlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ76PlA9Q
LqQQiQxSpu6zVTqU45FrdzJ8TbDkJ+fhxrFINpNVZDvOuUZlsRrEVY6/CxrfEkmo
p+6wdXfezZODzrKN0/zmJ+7f8x6G7ocn3lFNyZ9J+wgZICqoFbgCzNzE4lCGUPIy
BrkCj5XnQHZ7/OugYuK4DEpCHQxFx9NTF9KsRMo0im9KIVWnsZY5/siWTnFu5/tS
WSBOwuUsg9pezNyEaGAKfQU/uyv9q5tqSxphkNsK6fYyyAT1tuuYmVDH8mtcl/rV
6ZSaq5mrFui1jdReBW5LNSVqtGC8RGsbKh4qk52JDvjaKbGO320cMyHbyr+EUMKB
cka4tuB+hS72rg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:47:58 2026 by rpki-client