Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
File: cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft (raw, json)
Hash identifier: LfJ+UgzK67AOhLTUq0Cx5U/W0maI9SMiADp3gd7DtSs=
Subject key identifier: 17:56:43:A2:A6:D3:AF:E7:47:96:F8:53:7F:DD:1A:49:6F:43:19:DF
Authority key identifier: 72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
Certificate issuer: /CN=7238fbfea5768479c86300906e74eb254dcb5c69
Certificate serial: 019D3977DD23B0388718656DC56A1266145B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
Manifest number: 0D65
Signing time: Sun 29 Mar 2026 12:00:49 +0000
Manifest this update: Sun 29 Mar 2026 12:00:49 +0000
Manifest next update: Mon 30 Mar 2026 12:00:49 +0000
Files and hashes: 1: HicIDZMbcNLp_sFaOT70NM1dk-A.roa (hash: oFoTMWe4jG5kyZXaz3ugU3TiaWlqRkipFfUCxRN/kLw=)
2: cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl (hash: OkKm6MnJBGQBA93OCCR8JHtFGf3jb1/eIQf5tWJyG1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:dd:23:b0:38:87:18:65:6d:c5:6a:12:66:14:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7238fbfea5768479c86300906e74eb254dcb5c69
Validity
Not Before: Mar 29 12:00:49 2026 GMT
Not After : Mar 30 12:00:49 2026 GMT
Subject: CN=175643a2a6d3afe74796f8537fdd1a496f4319df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d6:4f:a0:44:cb:4a:4b:61:78:9c:ff:d2:e9:
67:a4:3e:11:fc:f1:0f:a1:6a:0a:d5:c6:b8:94:61:
5a:32:fd:ef:b1:58:ae:98:f4:b1:21:33:ac:1f:ca:
9a:06:a6:11:cc:7e:6b:27:f8:be:4d:e5:25:ac:94:
3a:aa:63:c5:e1:35:13:cb:3b:a4:2f:f8:89:4e:bf:
73:40:5e:11:b4:ce:4f:fc:ef:09:09:58:93:88:7a:
7f:a0:a2:81:54:2d:9f:c6:76:de:c0:2c:42:01:47:
60:ef:28:d1:0b:3f:50:33:2d:36:d9:38:f3:14:f6:
29:c6:83:f0:0d:64:9d:37:68:2f:da:38:d8:b9:f9:
23:81:9c:a5:ed:5a:07:ea:21:6b:d7:30:25:55:38:
33:f1:06:b5:3a:43:03:38:dc:aa:88:82:84:2e:e0:
13:c9:0f:0a:a5:e0:9c:77:c5:5f:81:26:ab:ef:5d:
74:e1:11:d3:22:09:f9:49:83:c5:da:a6:24:39:8b:
ea:af:ef:35:32:d4:cc:93:ee:4f:dc:6a:ee:79:64:
34:d1:16:c4:ca:ff:2d:f4:c8:23:4a:fe:df:79:2b:
db:e1:6e:8f:a4:0a:b7:4d:30:13:0c:2d:de:b1:21:
81:a8:4a:78:80:53:32:f0:9f:b7:3a:e3:98:c2:07:
ce:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:56:43:A2:A6:D3:AF:E7:47:96:F8:53:7F:DD:1A:49:6F:43:19:DF
X509v3 Authority Key Identifier:
keyid:72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a9:02:54:f7:97:ce:5e:99:00:1a:c9:0e:c8:bb:86:94:9e:
93:4e:29:c4:5d:1e:5d:4d:95:2d:de:21:9b:53:3a:bb:9e:f7:
d1:12:69:55:69:94:0e:6c:23:8d:60:c5:68:0c:40:92:7b:63:
1f:f7:e4:19:4c:fb:78:16:a7:49:09:6a:26:9f:d1:08:37:b2:
37:70:26:4a:d8:d6:66:c6:c3:ad:ee:b5:4d:3e:6e:f9:fa:85:
c6:f1:55:e6:9f:8c:21:cd:a2:05:04:05:58:75:ae:19:04:11:
04:2f:15:ee:7d:96:6c:21:dc:ee:bc:84:70:24:b5:42:d7:ff:
cf:34:87:bd:7d:10:b1:da:3c:5d:9e:c9:58:74:fd:86:b6:0b:
29:59:bb:2a:5b:72:bc:c0:29:96:10:dd:b0:f8:40:3e:17:c6:
e7:d8:89:c1:13:57:53:22:50:60:88:65:9d:4b:7b:b8:b6:51:
16:d3:8b:05:e1:5a:cd:b2:7f:7e:2b:12:d1:fc:88:26:c0:57:
4e:18:3a:de:ce:30:5b:c9:b1:e2:7f:03:ca:24:7a:70:a6:15:
b0:35:bd:ce:5f:2b:fc:ec:68:22:de:22:6f:49:48:77:55:f3:
6c:5f:77:05:dd:cb:6b:8f:e6:42:43:7d:f8:78:37:33:ac:46:
6a:ad:cf:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:57 2026 by rpki-client