Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
File: CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft (raw, json)
Hash identifier: ZZMPrgwBAShokoV/H3idhOH4fe/8LgaIY1iuCia8hWI=
Subject key identifier: BC:75:73:71:D4:A5:F4:6F:58:E3:BE:36:CB:8F:5E:43:9F:4F:C9:23
Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Certificate serial: 01A13F02D082C810B3D2F164D1956DF5F135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 10:01:51 +0000
Manifest this update: Thu 15 Oct 2026 10:01:51 +0000
Manifest next update: Fri 16 Oct 2026 10:01:51 +0000
Files and hashes: 1: CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl (hash: Qi/PzZ2Ic7Q6B14kLTvIodRQHD0/vKnrnOakn1WdpC8=)
2: NWLF3cZVQRzG-V44eTdelLvm4lo.roa (hash: 6bvdrFIc+ZqxQD9wly/w0Ts0CN7dJNjTlyrqxS7Rwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:d0:82:c8:10:b3:d2:f1:64:d1:95:6d:f5:f1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Validity
Not Before: Oct 15 10:01:51 2026 GMT
Not After : Oct 16 10:01:51 2026 GMT
Subject: CN=bc757371d4a5f46f58e3be36cb8f5e439f4fc923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a7:72:be:fc:ba:77:13:3b:59:bf:15:fb:ba:
4a:7c:04:0e:b1:09:40:45:fc:07:60:e5:7d:95:d4:
fe:05:40:ce:6d:c1:ba:83:fe:85:17:39:ee:b6:b6:
81:02:42:27:1b:fc:5c:f3:37:a9:62:8f:86:53:5e:
bd:a4:3b:fb:cf:40:d1:d8:8b:e3:73:8a:0b:2b:0f:
6e:36:30:d7:e4:22:04:a4:29:54:4a:f5:72:ab:8a:
71:e4:04:d5:e1:b9:90:6b:ff:e6:d1:5f:91:53:f0:
ba:6b:3f:87:85:78:ee:d2:39:62:7a:b8:2a:2d:43:
22:0a:8b:61:6f:1a:86:5c:c2:d2:02:b7:89:b4:02:
cd:7c:fa:e1:76:fc:17:25:9b:61:01:1d:69:9b:29:
18:8d:db:e4:b6:e8:0b:70:45:80:1f:61:10:19:a2:
da:ee:1d:55:8c:82:d4:40:8a:f9:85:eb:f6:97:1a:
8b:62:ed:a5:1b:b8:4a:5c:90:b3:fc:4d:d1:f8:fa:
9e:ec:8a:59:b6:0a:3b:bb:5f:9a:9d:92:df:9f:99:
85:d8:56:17:b1:ce:ee:9f:48:22:68:d7:d6:3f:05:
0d:03:f0:cf:28:c3:b5:2b:f6:88:a7:90:b4:d8:1a:
8a:1f:90:d8:4f:7d:ae:39:7f:a4:98:60:15:0a:82:
7c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:75:73:71:D4:A5:F4:6F:58:E3:BE:36:CB:8F:5E:43:9F:4F:C9:23
X509v3 Authority Key Identifier:
keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c1:41:e3:78:36:08:e9:23:19:6a:c8:05:1a:5b:4a:01:15:
f7:bf:30:00:5b:66:41:9e:1a:7c:70:2f:bc:e8:b1:97:b6:11:
84:e0:8e:b7:34:84:03:fd:a1:b7:1e:72:83:0d:a8:c7:fb:aa:
92:86:12:6e:f4:b5:4e:47:70:73:3f:c6:1c:1d:92:77:90:2d:
0a:e0:21:03:e7:e0:10:3f:61:3b:9b:2d:4a:83:8d:3b:04:e5:
7d:c3:fc:7a:43:0c:99:a5:d9:7c:61:d4:c4:6e:e8:ac:aa:ba:
8d:f1:fa:4f:3b:d9:7c:b7:ee:83:30:c1:3c:62:bd:b1:89:2f:
8a:59:41:3d:fd:dc:d7:be:7f:f9:c2:6e:f4:76:f1:6f:ef:83:
2b:4d:88:07:20:a5:e0:7a:7b:0b:21:2e:32:05:43:dd:06:ba:
ed:2e:96:e4:4a:4b:a7:e6:49:43:35:e0:a3:cb:05:37:6e:69:
1b:37:1e:cf:0e:30:62:01:bc:b2:81:af:a4:15:40:3c:53:02:
09:76:83:29:a8:c6:a8:33:54:d9:10:33:37:91:56:6d:1b:cc:
ce:cd:7a:1e:78:d4:55:2b:df:15:80:5e:a2:ef:7e:48:9b:f0:
6a:3e:f0:ec:3b:2b:df:0b:01:95:80:2e:5c:90:f7:3a:2c:66:
26:03:b5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:23:14 2026 by rpki-client