Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
File: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft (raw, json)
Hash identifier: IjqdxfDHxKTYl/BXU5a0ZmoUrcuwHS7FKRDNayFmz2Q=
Subject key identifier: 89:1D:58:FD:B5:50:85:E1:F0:DF:50:E1:EF:D4:86:EA:31:43:57:AD
Authority key identifier: 0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
Certificate issuer: /CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Certificate serial: 019D382DE1A7E04872C4BA4AFD49EB6C4CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
Manifest number: 0605
Signing time: Sun 29 Mar 2026 06:00:24 +0000
Manifest this update: Sun 29 Mar 2026 06:00:24 +0000
Manifest next update: Mon 30 Mar 2026 06:00:24 +0000
Files and hashes: 1: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl (hash: 3ZYA9O1h5Qq7OuYH3xcwFMy8NICkkDnoqsPY2eDGgc8=)
2: HhyQ1xbfi1ZT4qXLErneHVnMZKQ.roa (hash: LTQHQ2QemVphT2OwaYY6pIObkofdkSf8QmySEt23OP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e1:a7:e0:48:72:c4:ba:4a:fd:49:eb:6c:4c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Validity
Not Before: Mar 29 06:00:24 2026 GMT
Not After : Mar 30 06:00:24 2026 GMT
Subject: CN=891d58fdb55085e1f0df50e1efd486ea314357ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:28:58:62:9b:5a:df:b9:38:74:a2:5a:5c:
eb:0c:d7:b2:0e:d9:c9:a6:c7:aa:b3:1e:7a:c3:ec:
d6:a6:01:66:2e:81:d0:35:8b:2c:b7:ec:b5:47:c6:
1f:a7:cf:35:c0:6a:a1:c2:9d:31:b8:6d:0c:6d:44:
5c:f9:86:f1:87:1e:97:a6:c3:9f:a0:f5:f6:ae:fd:
fe:d8:94:4f:ed:a6:c3:d5:49:1a:46:d3:3b:a7:9b:
20:1e:45:9a:a2:0f:f6:aa:b7:7b:ae:10:8b:ea:3d:
88:72:b4:3a:a8:5f:e0:54:e2:e1:73:b2:20:de:95:
c5:0d:a5:7c:8d:72:3d:85:3b:21:ac:d3:80:cf:fb:
1e:ba:b7:97:2a:af:e5:b7:f6:8e:7f:16:d8:96:53:
d6:cf:24:bd:a3:11:6d:fb:84:8e:d6:bc:92:90:ae:
ab:5e:fb:9a:df:82:2d:97:3c:3c:18:67:58:fa:95:
3f:74:a4:d6:45:af:ba:3c:ef:59:76:50:0c:59:22:
f5:6d:43:87:36:b6:73:77:27:04:49:0f:6c:a6:95:
fe:0b:a7:95:ce:51:bb:61:e1:d7:26:fd:e3:f8:d0:
f6:55:52:c3:ec:ea:1b:a9:53:36:20:55:3d:ab:2c:
3a:eb:e2:17:85:b0:00:86:3c:88:82:b0:14:64:a9:
0f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1D:58:FD:B5:50:85:E1:F0:DF:50:E1:EF:D4:86:EA:31:43:57:AD
X509v3 Authority Key Identifier:
keyid:0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:16:9e:13:09:73:9b:55:f2:61:21:eb:d8:f6:46:5e:79:2c:
4b:0c:2c:5c:16:96:65:47:3e:04:27:d5:44:b3:06:d2:10:6f:
ca:03:56:db:37:9b:9b:90:37:15:b9:4c:75:fe:14:57:70:d9:
45:48:c0:38:9c:91:03:24:f6:4d:a5:e1:83:a5:34:da:f4:8a:
3b:17:4b:b0:d3:d5:97:42:aa:bd:75:86:d4:33:77:1d:b9:a8:
fc:82:bc:cf:ad:49:e1:f4:da:58:0f:94:9a:05:b8:60:5a:51:
d5:3d:27:03:7a:5c:75:ff:b4:cf:0e:de:c3:17:94:ef:59:aa:
71:48:26:47:77:9e:6f:9e:89:3a:71:89:6e:16:5e:51:ae:f6:
74:62:97:7a:43:ad:43:05:d2:54:3e:06:6a:e9:41:05:29:43:
34:89:be:88:50:65:8a:93:a2:f1:b1:68:ff:1e:fb:a3:07:99:
14:ad:67:5e:6f:34:f5:db:4e:70:ed:57:30:d3:ee:3e:a4:1d:
6e:66:56:4c:8e:af:37:89:f3:3b:63:ab:62:34:65:72:6d:ff:
21:3e:e2:96:70:28:6a:ee:89:bd:6f:a0:d4:cf:d8:d7:4d:08:
57:75:c5:c8:00:0f:5a:2a:9b:97:f5:7e:75:af:40:67:5f:07:
31:05:a5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:12 2026 by rpki-client