Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
File: CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft (raw, json)
Hash identifier: bvbP1JM0B0AqGda3FxhSCtx/R4N9pqi1oCppYRf1C38=
Subject key identifier: F8:89:18:66:97:FC:44:05:4A:DC:68:82:55:DA:E9:9B:98:B1:74:19
Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Certificate serial: 019D37C0C360A813174C5491889E0DDAE772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:01:12 +0000
Manifest this update: Sun 29 Mar 2026 04:01:12 +0000
Manifest next update: Mon 30 Mar 2026 04:01:12 +0000
Files and hashes: 1: CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl (hash: hdutWlieZOsX1Da9Z16hts7LyOuVGKyAdjTBeQ59ue4=)
2: NWLF3cZVQRzG-V44eTdelLvm4lo.roa (hash: 6bvdrFIc+ZqxQD9wly/w0Ts0CN7dJNjTlyrqxS7Rwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c3:60:a8:13:17:4c:54:91:88:9e:0d:da:e7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Validity
Not Before: Mar 29 04:01:12 2026 GMT
Not After : Mar 30 04:01:12 2026 GMT
Subject: CN=f889186697fc44054adc688255dae99b98b17419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:e4:e3:2c:ea:44:af:93:03:9f:82:d2:37:
0d:3a:4f:39:f3:8d:0f:c5:6a:17:b8:c0:26:b4:c6:
05:91:b0:8e:3b:53:80:3d:1a:7c:91:68:53:b8:49:
9b:82:a6:0c:8e:fa:4e:40:ac:f9:62:da:3a:ec:f6:
5c:9b:5d:eb:17:29:4c:ac:ee:9d:64:6d:b7:43:3a:
53:bd:bd:e6:84:68:53:bc:dc:3b:dc:d9:57:6a:8c:
42:99:4a:03:72:9c:87:a1:d4:5b:78:cf:1b:9b:dd:
5c:7f:d4:a5:e1:30:18:37:d0:bc:09:78:21:1f:2c:
38:a0:b1:7e:67:8d:ff:ed:43:09:2c:d3:f2:62:41:
fb:79:05:21:67:5b:88:93:14:42:76:23:06:c6:45:
30:29:b5:5d:fe:c0:24:55:a3:0b:c4:11:24:41:48:
ca:e1:7a:f2:e8:f8:5f:34:b4:ec:33:b8:9d:29:4c:
7c:76:2a:bf:fc:85:dc:35:6b:39:39:23:aa:7c:4c:
9e:0f:45:d9:8c:40:ff:60:42:d4:cc:6f:fa:29:a7:
0e:a3:4f:45:a5:f7:68:6d:06:b3:8a:ae:22:94:95:
ac:e5:60:c8:04:60:a6:88:ff:5b:bf:70:56:a7:d3:
ae:76:a7:57:cd:99:b3:91:f0:db:8f:3d:5c:db:83:
62:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:89:18:66:97:FC:44:05:4A:DC:68:82:55:DA:E9:9B:98:B1:74:19
X509v3 Authority Key Identifier:
keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:28:00:2a:f1:81:1d:29:96:b1:83:30:df:5b:b2:76:10:96:
5d:eb:cf:d8:ac:32:c7:f2:4a:9f:f1:82:94:f1:4e:9a:14:89:
65:2e:35:84:fa:b1:78:ed:85:79:cc:11:74:0e:03:d1:28:24:
8a:5b:f5:96:75:f0:85:b4:cf:ea:bf:80:9e:a9:a3:c2:c8:5a:
56:cf:e4:fb:1e:3a:75:c4:ee:3c:1b:ee:89:58:01:50:a2:fb:
8b:56:89:21:09:7b:10:93:81:02:fc:b2:6c:71:48:bc:05:51:
12:4d:87:ab:02:1d:68:b2:a4:43:e9:58:26:27:f9:9f:39:70:
ca:6e:e3:37:fc:cf:40:cc:07:81:51:f0:ee:24:5d:b7:b9:73:
d3:15:d5:4e:1d:d9:49:b7:f6:8e:60:c0:66:50:a9:b8:33:1c:
c9:f3:28:19:72:1a:64:34:25:47:63:83:d3:43:ba:28:77:98:
95:c3:7b:fa:94:8d:1a:a9:99:ea:77:ba:5b:f9:5d:f6:a1:19:
e3:5e:e6:7f:3f:69:00:5d:a5:91:8c:9e:09:78:52:a1:8c:ae:
f0:6e:95:ea:eb:a6:41:ed:4e:a9:2e:64:9b:cb:c7:9c:8e:9f:
bd:6c:bf:f9:cc:7c:f9:d5:a7:fe:fa:7d:e0:5c:b2:98:1d:17:
12:33:82:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:31 2026 by rpki-client