Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
File: CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft (raw, json)
Hash identifier: n2Vdh6CKlxJImN8LYjlneO6RlstvPA5Rmf/4yjNpFeU=
Subject key identifier: F9:7B:A9:ED:5C:D9:E1:27:F6:55:44:2D:86:B1:DF:69:B1:08:7C:69
Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Certificate serial: 019E30E0B08E1D0B4F0938019891D1B29B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 13:01:32 +0000
Manifest this update: Sat 16 May 2026 13:01:32 +0000
Manifest next update: Sun 17 May 2026 13:01:32 +0000
Files and hashes: 1: CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl (hash: 98LwEltyx8T7CRc2tMnq/Z17XoKskAP9nOPDoVGSzFY=)
2: NWLF3cZVQRzG-V44eTdelLvm4lo.roa (hash: 6bvdrFIc+ZqxQD9wly/w0Ts0CN7dJNjTlyrqxS7Rwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:b0:8e:1d:0b:4f:09:38:01:98:91:d1:b2:9b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Validity
Not Before: May 16 13:01:32 2026 GMT
Not After : May 17 13:01:32 2026 GMT
Subject: CN=f97ba9ed5cd9e127f655442d86b1df69b1087c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:10:8c:dc:47:0e:3e:e1:cb:fc:2c:43:b0:7b:
33:82:fe:16:91:c0:92:ca:8a:94:1c:27:c0:30:e8:
bd:1b:11:f5:e5:cc:af:cb:7e:35:01:03:c9:80:7a:
2e:7c:b6:b4:b7:bc:c5:6c:a3:c9:83:82:c2:de:02:
e0:5c:7f:25:d5:be:67:3b:1f:21:13:6a:bc:15:ff:
e3:75:42:ba:35:26:8e:54:11:78:d1:99:6d:64:38:
cb:29:55:f2:b5:f2:52:e0:63:38:4d:1d:e8:66:d0:
92:87:03:67:20:67:be:e4:41:ac:43:0e:09:3f:9d:
fa:dc:d9:54:65:59:17:61:81:03:c3:fd:76:5c:91:
64:ab:8f:45:15:d5:21:f8:6d:44:6a:16:48:c9:54:
8e:d4:5a:2f:81:2d:88:b2:23:d9:38:2e:3a:5e:48:
8a:df:23:1a:08:b1:d2:01:2f:85:b4:c9:34:dc:58:
df:32:eb:ac:80:5f:ea:f2:4d:0e:fa:fc:dd:5c:6e:
0a:9e:24:33:39:16:1e:fe:35:a2:10:45:91:7d:11:
2d:70:f0:45:01:01:c4:79:7b:4b:27:21:09:6e:c3:
22:8c:5e:ef:05:96:d3:56:79:18:da:83:8f:c0:5c:
9e:a6:fb:df:7c:27:e8:a2:03:6f:f7:c7:c8:c4:a7:
fe:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7B:A9:ED:5C:D9:E1:27:F6:55:44:2D:86:B1:DF:69:B1:08:7C:69
X509v3 Authority Key Identifier:
keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9a:00:3a:cd:46:a1:ed:38:1c:3b:40:17:7a:80:67:f6:d8:
16:a6:c7:3c:98:73:b9:3b:29:5b:d2:89:e3:32:5f:c9:55:a1:
c7:7c:84:fb:58:13:18:f7:91:66:2f:cc:b6:70:fe:fd:da:3e:
26:b4:40:46:1f:a9:7f:09:c3:50:d7:f0:e6:ba:0c:24:b2:3a:
0b:6f:6e:24:35:df:8b:29:a0:3c:56:af:82:d5:ed:60:f6:f7:
e2:2b:ef:61:48:26:18:8e:be:60:ba:9e:ca:53:cd:54:b2:ae:
90:5b:23:b0:30:3a:c9:8d:10:a4:0b:2e:ea:21:d5:05:2b:35:
22:ca:f8:bc:c1:8e:dc:4c:ab:12:e7:de:d7:f4:c0:b6:b3:43:
c3:33:b5:d2:0f:aa:81:79:37:f5:5c:cd:f1:39:e4:b8:f7:db:
35:c5:47:a8:31:02:00:5a:86:05:f4:0b:15:14:e2:62:0c:67:
99:2c:02:a5:29:c2:f6:73:a6:43:7c:af:27:66:37:c2:32:b1:
cb:3f:0d:56:53:dc:cf:ad:b8:5e:15:d4:51:dd:46:b8:d9:55:
54:b4:15:21:cd:15:a3:45:2e:b9:34:2c:15:16:1b:5d:4c:e3:
ea:81:a7:4b:1b:7d:26:2a:6a:59:c9:48:08:94:f7:42:1c:1a:
9f:79:c8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:12 2026 by rpki-client