Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
File: CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft (raw, json)
Hash identifier: ugSow96nS+Nj0xoH6RjAvwnQSirDaqYqkPzvmiUpgNE=
Subject key identifier: 30:16:E5:FE:65:DA:16:AA:27:8A:42:60:9B:A6:86:37:75:5F:7F:F9
Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Certificate serial: 01A00439C8807ECDD43CF98ABAB6E207AED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
Manifest number: 1A03
Signing time: Sat 15 Aug 2026 07:01:30 +0000
Manifest this update: Sat 15 Aug 2026 07:01:30 +0000
Manifest next update: Sun 16 Aug 2026 07:01:30 +0000
Files and hashes: 1: CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl (hash: 7uXov48byjgea7GvQ06m0vJyuFxgxY3KBvZHg5MYE/8=)
2: NWLF3cZVQRzG-V44eTdelLvm4lo.roa (hash: 6bvdrFIc+ZqxQD9wly/w0Ts0CN7dJNjTlyrqxS7Rwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:39:c8:80:7e:cd:d4:3c:f9:8a:ba:b6:e2:07:ae:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Validity
Not Before: Aug 15 07:01:30 2026 GMT
Not After : Aug 16 07:01:30 2026 GMT
Subject: CN=3016e5fe65da16aa278a42609ba68637755f7ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:50:0c:b4:49:35:46:bd:cb:a0:02:47:2f:4f:
82:ec:8f:66:4d:13:48:f7:b5:e2:1b:38:b3:99:c7:
69:e7:72:de:ea:34:3b:f3:e5:a6:2a:e4:b7:4c:b5:
a4:4d:b2:16:fd:e3:07:44:45:fe:f9:dd:14:ba:36:
06:22:ec:56:d1:0c:d0:f8:6e:1b:96:30:fa:1d:2c:
2b:0c:a3:12:28:a1:d5:86:ba:09:00:7c:5c:5a:35:
ea:69:fe:d8:5a:81:fa:26:21:19:ae:7e:31:01:14:
3e:62:48:85:c9:31:4c:56:60:9a:45:f6:6e:01:8e:
f0:c0:22:d8:f0:a5:ab:4b:78:ad:3b:ae:4c:48:dc:
3d:03:e3:6c:85:e5:92:af:b6:d6:67:de:f4:6c:10:
40:23:7f:62:7a:57:4e:48:87:2a:e6:6c:01:39:bf:
7d:4d:43:39:77:01:ee:1a:90:0a:9d:cb:93:c3:8f:
95:6a:4f:be:f3:1f:21:b8:0f:87:a9:b3:55:64:5b:
70:44:3f:d8:09:7e:af:e5:b4:e2:26:01:04:1a:b6:
aa:8a:e8:b2:5d:7d:b2:2d:9d:b6:47:1b:87:21:5e:
8b:4b:54:7e:5c:a5:d3:99:ad:7a:19:9f:b8:08:1d:
21:8e:84:ed:a9:f2:ff:dd:ea:fd:3e:01:09:5c:f8:
22:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:16:E5:FE:65:DA:16:AA:27:8A:42:60:9B:A6:86:37:75:5F:7F:F9
X509v3 Authority Key Identifier:
keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:91:9c:7e:45:3a:c7:3a:2f:fc:ab:54:93:45:95:55:d6:4a:
ee:8d:85:31:fc:49:5a:f4:58:92:34:8a:93:9d:7b:54:08:78:
7d:6c:14:47:82:bd:72:54:96:9e:d7:1a:7b:43:b4:92:d3:86:
4e:40:a9:44:7b:e2:8c:fb:e6:37:aa:66:38:ac:1d:79:26:82:
43:6a:77:78:07:6d:83:8c:1a:fc:1b:9e:68:eb:70:b8:0f:5e:
8c:76:3b:fe:0d:ba:4e:1d:97:be:5c:f3:56:03:fd:e5:59:6a:
69:ed:ab:ed:aa:b3:e9:e3:17:1f:cc:6e:eb:fe:62:61:f5:6a:
9b:43:57:93:08:dc:bf:b0:3d:66:8b:3a:7e:ce:cc:1d:14:96:
90:5e:d4:cf:c4:65:63:60:36:c3:f5:f4:74:67:55:c0:da:dc:
60:7f:5e:a4:ca:64:c9:fa:55:dd:55:ad:7e:d1:90:0a:4f:aa:
d8:bf:73:0b:42:68:ae:c3:73:48:04:f1:99:cc:76:c2:6f:b3:
dd:4c:54:f6:d1:de:03:01:f7:f3:52:9f:1a:b8:60:11:23:f7:
aa:20:42:45:29:53:e7:d7:3c:80:67:1f:e8:30:69:45:b8:dc:
f7:8a:e5:64:80:46:12:df:ff:b1:7f:b0:33:d2:6e:cb:0a:58:
aa:cc:f0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:37:46 2026 by rpki-client