Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
File: CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft (raw, json)
Hash identifier: t+soSg9/pPobnWlENflkBfO5RfW7jbAkhbp7Yb5JvX0=
Subject key identifier: 67:0B:1D:C9:64:6B:FD:FD:6E:BF:9C:9E:B6:43:0F:70:24:56:BF:9E
Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Certificate serial: 019F189E7DFB42F6DA6FA6FBE0876F3BDF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 13:01:07 +0000
Manifest this update: Tue 30 Jun 2026 13:01:07 +0000
Manifest next update: Wed 01 Jul 2026 13:01:07 +0000
Files and hashes: 1: CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl (hash: HNX07xf8eAH/qcB20I14RIDAsR0oamr+wmXbCW5BDFs=)
2: NWLF3cZVQRzG-V44eTdelLvm4lo.roa (hash: 6bvdrFIc+ZqxQD9wly/w0Ts0CN7dJNjTlyrqxS7Rwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:7d:fb:42:f6:da:6f:a6:fb:e0:87:6f:3b:df:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Validity
Not Before: Jun 30 13:01:07 2026 GMT
Not After : Jul 1 13:01:07 2026 GMT
Subject: CN=670b1dc9646bfdfd6ebf9c9eb6430f702456bf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:4f:aa:c9:d6:e6:c2:ba:39:56:ec:6d:99:
9a:79:58:3c:2a:32:f9:3f:d9:e4:1b:17:10:b5:e7:
a2:fc:b3:ab:d8:5c:7f:c5:eb:0b:47:d7:58:fb:05:
28:26:7a:1d:97:7f:ec:23:49:8b:19:6b:bd:2a:a3:
9b:ba:ad:05:25:5e:e1:b3:57:fd:97:e2:7c:a6:9e:
c2:3e:db:c2:97:a6:81:77:4d:c5:61:cb:c0:dc:57:
9d:c9:27:b4:f4:47:c1:c0:0d:1b:a1:85:3d:04:bb:
9e:3b:20:9b:35:f8:81:8a:e2:33:b2:36:44:9c:fc:
e5:d8:bb:cb:52:02:96:6e:06:9a:21:f0:a8:cd:64:
bc:f8:8f:f3:06:2a:f8:3c:c3:b9:8e:20:e3:b2:6b:
3a:c2:ee:12:c3:f8:59:3e:f6:25:5b:fd:b6:df:0f:
b1:b4:83:f1:d0:e1:2e:ad:4e:f8:18:19:84:bf:61:
9b:1f:f1:a8:db:5f:3e:2b:47:d9:64:aa:9f:6c:5f:
27:d4:80:c3:92:70:24:c6:3a:6c:8d:e5:66:75:23:
d8:4a:f3:2e:e2:a8:61:ca:62:d1:c6:ec:8b:e3:52:
0f:48:f0:43:51:28:bb:8f:2e:d6:92:79:b0:eb:42:
d5:56:b2:f3:92:c6:3a:80:81:02:f4:74:47:a0:8a:
04:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0B:1D:C9:64:6B:FD:FD:6E:BF:9C:9E:B6:43:0F:70:24:56:BF:9E
X509v3 Authority Key Identifier:
keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d0:66:81:08:22:c8:ed:ab:50:71:bc:fc:d6:a8:b3:64:ff:
7c:f2:4f:92:a7:23:64:38:c4:fa:b2:54:0c:88:7c:8e:bc:04:
eb:e5:32:d1:0a:82:b6:ee:7f:ca:89:93:ca:d6:41:19:17:33:
9e:4a:bc:2a:01:3b:31:72:01:a7:16:7b:2b:b0:02:da:9d:e4:
f8:82:d9:33:c7:58:76:53:49:46:00:6c:6c:89:23:c1:57:6f:
4e:7f:a2:0c:42:a5:ec:71:8e:61:6e:34:f2:e3:c2:69:e3:68:
7a:f7:99:5a:4f:4d:6a:9a:1e:6d:24:03:01:5e:02:e4:a6:18:
0e:f5:70:5f:de:4b:d0:df:5f:f3:41:c0:cc:e5:64:8e:d6:41:
22:3a:6b:08:d8:e5:1b:b9:b8:7c:4a:8b:ff:50:f3:89:3a:a5:
cb:23:a8:7f:ff:f0:d2:06:5e:ca:a2:5e:2a:31:6b:fd:29:1f:
1c:35:ab:18:1d:a9:bb:69:b2:a2:cc:24:d1:18:88:29:44:be:
7f:df:3a:95:3f:33:25:dc:a5:ae:76:c1:5f:75:ab:f3:d1:65:
90:a2:eb:40:0f:4c:fb:26:9a:00:7c:fd:04:b9:49:8c:94:83:
14:4c:49:c9:e3:ad:c1:90:85:b2:ed:6b:7b:35:1e:84:a6:1c:
1c:5b:e8:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Ynn37Qvbab6b74IdvO99eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OTUyMzk1MzkzOWY4YTVlNDY0YjFjYzc3MTllYmViOTQ2
N2NhM2YwHhcNMjYwNjMwMTMwMTA3WhcNMjYwNzAxMTMwMTA3WjAzMTEwLwYDVQQD
Eyg2NzBiMWRjOTY0NmJmZGZkNmViZjljOWViNjQzMGY3MDI0NTZiZjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA9PqsnW5sK6OVbsbZmaeVg8KjL5
P9nkGxcQteei/LOr2Fx/xesLR9dY+wUoJnodl3/sI0mLGWu9KqObuq0FJV7hs1f9
l+J8pp7CPtvCl6aBd03FYcvA3FedySe09EfBwA0boYU9BLueOyCbNfiBiuIzsjZE
nPzl2LvLUgKWbgaaIfCozWS8+I/zBir4PMO5jiDjsms6wu4Sw/hZPvYlW/223w+x
tIPx0OEurU74GBmEv2GbH/Go218+K0fZZKqfbF8n1IDDknAkxjpsjeVmdSPYSvMu
4qhhymLRxuyL41IPSPBDUSi7jy7Wknmw60LVVrLzksY6gIEC9HRHoIoEQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcLHclka/39br+cnrZDD3AkVr+eMB8GA1UdIwQY
MBaAFAiVI5U5Ofil5GSxzHcZ6+uUZ8o/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84NTM5OTYtNmNiYi00ZDQyLTg3Nzgt
YjFkN2FjOWVhMzIxLzEvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84NTM5OTYtNmNiYi00ZDQyLTg3NzgtYjFkN2FjOWVhMzIx
LzEvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtBmgQgi
yO2rUHG8/Naos2T/fPJPkqcjZDjE+rJUDIh8jrwE6+Uy0QqCtu5/yomTytZBGRcz
nkq8KgE7MXIBpxZ7K7AC2p3k+ILZM8dYdlNJRgBsbIkjwVdvTn+iDEKl7HGOYW40
8uPCaeNoeveZWk9NapoebSQDAV4C5KYYDvVwX95L0N9f80HAzOVkjtZBIjprCNjl
G7m4fEqL/1DziTqlyyOof//w0gZeyqJeKjFr/SkfHDWrGB2pu2myoswk0RiIKUS+
f986lT8zJdylrnbBX3Wr89FlkKLrQA9M+yaaAHz9BLlJjJSDFExJyeOtwZCFsu1r
ezUehKYcHFvopg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 23:38:06 2026 by rpki-client