Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
File: Cj4I7z11S8avqR-mwQAg9YUFwWE.mft (raw, json)
Hash identifier: xOnGpcYRj0Gs0JNSSWxlBr2TfNKNfcScQ0gJZyilV6k=
Subject key identifier: F2:50:CB:33:C6:26:70:20:43:A9:29:E0:45:AE:D0:A3:2C:C6:2B:E6
Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
Certificate issuer: /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Certificate serial: 019E2FCDF27909F785879478D0504725401D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
Manifest number: 0596
Signing time: Sat 16 May 2026 08:01:26 +0000
Manifest this update: Sat 16 May 2026 08:01:26 +0000
Manifest next update: Sun 17 May 2026 08:01:26 +0000
Files and hashes: 1: Cj4I7z11S8avqR-mwQAg9YUFwWE.crl (hash: T769SFIG4gPSb5h0cPjymJFZCA7HyQCZxPAMLUstATc=)
2: I09YHj-xMtJyOqy1S5-_QiKKHCM.roa (hash: Dl6s19nphOIYoXAZFraR2mc7LjS/EY8yRFQ8t5aHIJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:f2:79:09:f7:85:87:94:78:d0:50:47:25:40:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Validity
Not Before: May 16 08:01:26 2026 GMT
Not After : May 17 08:01:26 2026 GMT
Subject: CN=f250cb33c626702043a929e045aed0a32cc62be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:14:20:51:b5:a2:50:37:2f:09:ca:cc:f4:
21:a4:1e:94:6b:88:02:90:e8:0e:15:9d:e7:cb:e3:
3c:77:66:e1:2d:2f:5a:b1:8f:e7:d9:d5:a8:6a:eb:
32:11:fb:d9:fb:34:94:d7:8a:c8:c6:0f:0a:63:d1:
9b:07:14:a8:1a:46:09:ac:db:39:6d:85:f3:dd:48:
71:8f:7f:9d:a6:e0:1e:89:cc:2b:24:b2:86:71:50:
c3:dd:2f:13:54:04:3f:f9:16:0a:43:af:a1:a1:40:
a9:26:af:dc:a3:62:d5:8c:20:29:56:2e:f0:e1:04:
1f:24:47:37:bc:f1:0d:2a:a8:14:18:6e:a1:95:39:
24:01:ef:47:a4:e7:0b:3e:28:2d:18:d9:e2:15:6b:
da:41:05:01:79:72:60:d4:4b:41:d0:9b:3e:01:f8:
9f:db:46:dc:66:c3:02:6f:99:f7:c8:d0:8e:71:e3:
2e:94:08:a5:1e:f5:41:5b:cd:59:73:51:00:9c:0a:
43:fe:b5:e7:c3:5a:fd:c8:2e:78:89:d9:cf:89:9b:
42:c5:d8:f4:a8:f9:28:fa:13:11:15:40:5e:2d:86:
4e:b2:ed:d6:2f:c3:77:01:a3:23:54:29:fe:b0:b2:
a9:58:b4:8e:77:46:54:3a:fc:b0:67:32:c0:4b:a6:
e9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:50:CB:33:C6:26:70:20:43:A9:29:E0:45:AE:D0:A3:2C:C6:2B:E6
X509v3 Authority Key Identifier:
keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ae:44:31:01:78:67:6a:1d:d1:e8:e8:1a:45:cf:60:0a:bb:
d3:56:8a:47:d8:b9:8a:5e:f5:6b:02:16:19:a5:a5:4e:da:8a:
44:57:cc:2d:33:c4:54:87:66:b0:2e:c2:99:e3:bb:1f:b4:cc:
bc:1a:f4:eb:f7:c7:36:54:b1:7f:f4:2a:21:07:57:31:c3:a4:
a5:af:2a:65:06:01:54:0d:5e:f3:66:9d:10:d8:fd:64:4f:84:
c7:89:8f:47:80:dd:5a:d2:2d:e3:f4:a9:31:64:19:bc:23:fb:
81:56:a6:36:21:2e:13:50:f4:4d:9b:3a:c9:ea:e9:13:8e:b3:
e9:7f:7d:cc:19:e7:b7:11:93:f6:0f:e9:9b:d1:19:ff:83:f2:
c7:96:bf:cb:9b:00:db:29:57:99:bd:24:07:81:d0:64:c5:bd:
46:c8:45:e8:94:8a:75:5a:25:d5:7f:94:92:34:dc:7f:b3:1e:
7d:f8:ee:99:49:ac:c5:fa:f8:a2:93:25:84:9a:7e:03:88:7d:
50:65:5c:c1:c8:6b:dc:a4:2a:32:b5:ec:a6:ac:0f:64:7f:77:
2d:69:0c:13:1f:21:9c:6c:fc:58:9c:1a:65:2a:fb:5a:c2:36:
d3:f1:4f:df:de:02:72:ba:d8:61:0a:3d:6c:6c:0c:9c:67:84:
fa:6c:75:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:40 2026 by rpki-client