Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
File: CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft (raw, json)
Hash identifier: BTTFd6C8qR2KAaM8HwnavSd+mNjMmG9qs8hBAi5at9o=
Subject key identifier: 89:21:38:66:64:34:34:BC:7E:1F:50:A7:BD:83:A0:6F:DD:B3:9D:FC
Authority key identifier: 08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21
Certificate issuer: /CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
Certificate serial: 01A1AAF08DBB120B4EEF3AFAB8EE7D459A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
Manifest number: 02FB
Signing time: Thu 05 Nov 2026 09:00:53 +0000
Manifest this update: Thu 05 Nov 2026 09:00:53 +0000
Manifest next update: Fri 06 Nov 2026 09:00:53 +0000
Files and hashes: 1: CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl (hash: 8Yy4yMNWxA198CaU2qfN/fq/pPqYMlj15aweLNO7Qz8=)
2: Y1BBsDkkWgEF03wDI0HCnPosmio.asa (hash: IevDpGbfjZ+T3hHUsK1Etx0/ZUjksfcbztMdQzNnqY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:f0:8d:bb:12:0b:4e:ef:3a:fa:b8:ee:7d:45:9a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
Validity
Not Before: Nov 5 09:00:53 2026 GMT
Not After : Nov 6 09:00:53 2026 GMT
Subject: CN=89213866643434bc7e1f50a7bd83a06fddb39dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:70:00:cc:50:c5:c8:e6:42:2c:d3:28:8f:7d:
a2:2c:b2:0e:d2:ee:f4:98:bb:89:4b:23:db:9e:f0:
6f:ad:f1:ea:18:23:7e:c7:d3:44:76:4d:fd:d4:13:
cb:c8:b0:bd:b9:4e:c5:60:6a:30:2e:08:7d:f4:60:
d7:6a:80:22:5c:ce:e8:0a:ca:c2:ad:9e:90:c9:b2:
90:97:d6:e3:2f:4c:8e:6b:d0:86:3a:db:1b:dc:f2:
45:84:9a:d5:36:f0:a6:f5:22:2b:ae:09:f9:dc:53:
e6:cb:e1:df:47:df:1d:ac:05:98:98:b2:98:e2:e6:
c3:b4:6c:5a:2c:ed:f2:f3:14:4c:81:3a:9b:5d:48:
cd:d8:9c:69:e3:57:01:6c:78:b9:69:2c:2e:e3:48:
33:a4:c8:53:cc:36:5d:fd:63:7f:f9:a0:8b:1f:cb:
3c:03:76:6b:77:66:2b:83:ec:ec:c3:ed:81:80:d0:
75:74:cb:21:79:bf:db:8a:6d:0a:d5:b3:f3:02:98:
b3:54:a7:81:07:19:ee:01:95:7c:d9:51:78:8f:83:
01:34:cf:65:99:e2:90:f6:57:45:92:61:a3:b3:98:
85:bd:7f:67:f2:c3:0d:51:65:60:19:56:49:55:b3:
f3:b0:53:fd:98:a4:1d:e2:e2:dc:20:2a:4a:4d:4a:
28:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:21:38:66:64:34:34:BC:7E:1F:50:A7:BD:83:A0:6F:DD:B3:9D:FC
X509v3 Authority Key Identifier:
keyid:08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:99:ff:fe:3a:8d:ca:3e:c7:15:40:41:ed:51:6c:24:cd:88:
d3:fa:49:4b:f6:06:cd:88:fd:b3:ce:71:ac:e4:43:9f:9e:8e:
2c:d5:26:d2:a6:2c:b0:97:90:14:b0:69:44:6e:30:10:bf:34:
92:31:23:ce:ad:44:9c:c7:05:80:87:0f:c9:13:52:53:a8:84:
d3:98:6a:2f:ab:eb:f5:e8:be:ce:4a:92:e5:0c:9a:ba:72:d0:
b4:a4:3f:4a:6e:3f:f7:c6:a0:7d:39:8e:d2:56:11:b5:85:16:
8d:c7:d1:93:22:28:ed:95:da:08:93:ac:17:d5:07:69:64:55:
d6:35:9b:ca:df:30:1e:7a:64:62:37:83:ad:74:20:28:f8:3d:
7d:57:55:1e:2c:b6:e6:4f:97:92:77:31:f1:b4:1e:b8:98:f2:
aa:15:33:ec:a5:c0:8f:6a:b1:c8:47:a3:26:20:9e:2c:98:c6:
b9:7d:2c:a6:21:f3:e6:62:2f:69:ba:ca:11:7c:ad:e1:a4:9e:
32:f0:16:1f:ea:42:e8:50:95:78:ed:c6:cc:8a:90:1e:c4:b0:
8e:b8:43:a2:4d:7d:9f:43:0f:f4:19:5b:09:58:bd:8f:bd:2e:
7d:5d:81:70:b6:e3:6d:23:9e:8b:0e:e7:dc:08:51:10:e8:7f:
8f:8c:e7:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGq8I27EgtO7zr6uO59RZoLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OWI0ZDZmN2EwYTMzYjAxODA0MTFlZDc0Zjg3YTdjZmVk
OTY1MjEwHhcNMjYxMTA1MDkwMDUzWhcNMjYxMTA2MDkwMDUzWjAzMTEwLwYDVQQD
Eyg4OTIxMzg2NjY0MzQzNGJjN2UxZjUwYTdiZDgzYTA2ZmRkYjM5ZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XAAzFDFyOZCLNMoj32iLLIO0u70
mLuJSyPbnvBvrfHqGCN+x9NEdk391BPLyLC9uU7FYGowLgh99GDXaoAiXM7oCsrC
rZ6QybKQl9bjL0yOa9CGOtsb3PJFhJrVNvCm9SIrrgn53FPmy+HfR98drAWYmLKY
4ubDtGxaLO3y8xRMgTqbXUjN2Jxp41cBbHi5aSwu40gzpMhTzDZd/WN/+aCLH8s8
A3Zrd2Yrg+zsw+2BgNB1dMsheb/bim0K1bPzApizVKeBBxnuAZV82VF4j4MBNM9l
meKQ9ldFkmGjs5iFvX9n8sMNUWVgGVZJVbPzsFP9mKQd4uLcICpKTUoo/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkhOGZkNDS8fh9Qp72DoG/ds538MB8GA1UdIwQY
MBaAFAibTW96CjOwGAQR7XT4enz+2WUhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0p0TmIzb0tNN0FZQkJIdGRQaDZmUDdaWlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wOTcwMzQtMDk1My00YWI2LTkxYzIt
YzUwMDlhYjFmZGFmLzEvQ0p0TmIzb0tNN0FZQkJIdGRQaDZmUDdaWlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wOTcwMzQtMDk1My00YWI2LTkxYzItYzUwMDlhYjFmZGFm
LzEvQ0p0TmIzb0tNN0FZQkJIdGRQaDZmUDdaWlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJn//jqN
yj7HFUBB7VFsJM2I0/pJS/YGzYj9s85xrORDn56OLNUm0qYssJeQFLBpRG4wEL80
kjEjzq1EnMcFgIcPyRNSU6iE05hqL6vr9ei+zkqS5QyaunLQtKQ/Sm4/98agfTmO
0lYRtYUWjcfRkyIo7ZXaCJOsF9UHaWRV1jWbyt8wHnpkYjeDrXQgKPg9fVdVHiy2
5k+Xkncx8bQeuJjyqhUz7KXAj2qxyEejJiCeLJjGuX0spiHz5mIvabrKEXyt4aSe
MvAWH+pC6FCVeO3GzIqQHsSwjrhDok19n0MP9BlbCVi9j70ufV2BcLbjbSOeiw7n
3AhREOh/j4znpg==
-----END CERTIFICATE-----
Generated at Thu Nov 5 16:59:36 2026 by rpki-client