Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
File: Cj4I7z11S8avqR-mwQAg9YUFwWE.mft (raw, json)
Hash identifier: F+an4N9C4yQxSSLUoRac1xkUF1jetBlrjVOMjkjBoK0=
Subject key identifier: C9:03:B9:8E:42:14:8F:44:38:23:BC:68:DB:27:01:F4:3D:0B:81:08
Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
Certificate issuer: /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Certificate serial: 019D389BE64F90C4099FDFABCAF36EBAC4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
Manifest number: 0516
Signing time: Sun 29 Mar 2026 08:00:34 +0000
Manifest this update: Sun 29 Mar 2026 08:00:34 +0000
Manifest next update: Mon 30 Mar 2026 08:00:34 +0000
Files and hashes: 1: Cj4I7z11S8avqR-mwQAg9YUFwWE.crl (hash: NwCbunSwxGcKym27qJuL7+PljAY/WsbwCVSrOZBUDeA=)
2: I09YHj-xMtJyOqy1S5-_QiKKHCM.roa (hash: Dl6s19nphOIYoXAZFraR2mc7LjS/EY8yRFQ8t5aHIJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e6:4f:90:c4:09:9f:df:ab:ca:f3:6e:ba:c4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Validity
Not Before: Mar 29 08:00:34 2026 GMT
Not After : Mar 30 08:00:34 2026 GMT
Subject: CN=c903b98e42148f443823bc68db2701f43d0b8108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b8:1a:e4:59:f1:34:82:b6:47:d1:34:e8:34:
91:f9:47:43:8f:20:62:27:ba:8e:db:79:18:d3:4e:
58:98:74:6c:b3:99:c6:48:f2:48:48:5e:8a:e1:6c:
32:d6:f2:2a:a5:7b:a5:b7:81:dc:4c:5f:9d:05:dd:
42:3d:ab:8e:48:18:95:23:a1:bf:f4:a4:23:ed:65:
7a:58:97:f3:87:ed:97:12:eb:3d:4c:9b:bd:de:a3:
97:a2:47:b8:d6:41:a6:ff:46:9c:53:2e:77:d2:08:
15:5a:fc:61:e2:e8:8c:5d:65:3d:f2:ec:7e:ed:08:
a6:eb:7c:d6:95:60:0f:51:d6:af:4b:63:cd:d0:55:
75:3f:48:46:12:0f:19:bf:ec:44:00:af:d1:a3:d2:
ac:2b:04:b9:2e:63:9b:71:a4:3f:a5:63:83:ae:0d:
a4:af:24:03:9a:96:4b:e4:10:1d:1d:89:fc:11:96:
5e:a7:42:d4:97:2b:a4:94:53:35:ad:01:78:30:8f:
da:8d:b6:5d:b4:64:78:38:aa:40:fa:df:fd:43:dd:
22:03:98:dc:20:56:9e:ca:66:ef:d4:d9:cc:3c:d2:
e0:91:bf:46:04:64:82:b5:9e:c2:c7:2a:ca:a6:3d:
7a:d5:d3:44:fd:74:f3:3a:02:35:42:25:f7:15:f4:
3c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:03:B9:8E:42:14:8F:44:38:23:BC:68:DB:27:01:F4:3D:0B:81:08
X509v3 Authority Key Identifier:
keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:58:e9:18:b3:07:0d:9f:02:f6:fb:4c:41:41:51:42:bc:89:
27:15:f4:ec:aa:17:cd:78:18:c8:45:a6:42:b3:cc:65:b9:7c:
4b:09:72:ce:0e:be:c5:dd:74:d0:86:9e:33:91:b1:a1:6b:40:
06:50:38:0e:74:a1:7b:47:c1:15:1b:00:23:b6:40:90:c5:90:
aa:f9:c7:7a:41:85:60:36:38:57:18:d1:53:ff:96:70:c7:c8:
8b:58:8c:05:64:f9:66:27:ad:4c:e5:a4:0a:1a:e6:c5:b9:57:
7f:48:1a:1f:39:0d:8d:46:a8:eb:ad:05:22:5d:10:ce:26:68:
cd:c2:55:1b:d8:1e:51:10:25:71:39:7b:80:9d:43:86:4e:a4:
f3:63:70:a5:1d:87:57:e5:f4:ac:15:ff:90:15:3d:d5:19:65:
a4:6d:27:01:69:db:f4:e3:3b:27:a8:43:4e:81:32:3c:32:57:
11:11:24:e5:80:6e:ec:24:44:7a:1e:a7:70:d6:e4:dd:3d:00:
92:00:66:17:a8:75:6f:b9:e4:b5:ab:2e:46:2f:9f:f4:0c:39:
e1:06:8c:9c:d5:d6:87:4d:a6:a5:62:eb:92:43:ed:b1:72:42:
1e:f3:f5:b7:b7:40:e7:87:ca:99:83:ec:37:75:83:de:63:fb:
4c:fe:a8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:29 2026 by rpki-client