Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
File: CMuJoREU774OHiVQ7Nozb9eS7F8.mft (raw, json)
Hash identifier: FCRbjw66h2NH3GlsVzWygEja9V+BjAi1f7SCJ7sXuSM=
Subject key identifier: B1:E7:83:0C:00:F7:75:55:65:E8:02:63:5F:1C:6B:71:73:CA:15:B7
Authority key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
Certificate issuer: /CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Certificate serial: 01A06E710E31AB525C801E50C4C8C52875D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
Manifest number: 16CC
Signing time: Fri 04 Sep 2026 22:01:37 +0000
Manifest this update: Fri 04 Sep 2026 22:01:37 +0000
Manifest next update: Sat 05 Sep 2026 22:01:37 +0000
Files and hashes: 1: 9YkWGVXxcEeUFhntlgOJ2k6-P60.roa (hash: mFqo2vRCJnr/fzWY2nuNTTUS7HuuftZH6HRgAXJSWGw=)
2: CMuJoREU774OHiVQ7Nozb9eS7F8.crl (hash: elu3bw0pSf39oQurPpoyJ87cNUvmCC14wT5OzgnxSNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:71:0e:31:ab:52:5c:80:1e:50:c4:c8:c5:28:75:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Validity
Not Before: Sep 4 22:01:37 2026 GMT
Not After : Sep 5 22:01:37 2026 GMT
Subject: CN=b1e7830c00f7755565e802635f1c6b7173ca15b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:eb:03:40:24:29:d7:98:ec:55:15:58:a1:7a:
ac:3d:f0:d7:72:e2:25:43:7f:a4:a6:bf:26:22:0f:
d8:b2:1f:b6:ad:5e:0f:9f:f5:31:4d:13:e8:ab:dc:
24:3f:81:38:a2:81:b1:b6:73:d7:40:1b:a8:30:c6:
ab:a0:15:e9:e1:57:78:06:17:6a:81:71:b4:62:29:
30:a0:5b:ed:9f:33:6a:72:dd:e2:95:c6:29:e3:0c:
86:14:e3:1a:db:c8:61:c9:63:1b:1c:6b:68:c0:29:
dc:50:fc:98:30:df:df:00:8e:5e:7f:91:26:5a:bd:
fe:b6:63:d7:72:90:75:ae:7e:e2:2f:6b:1f:c0:1b:
03:13:c1:0a:97:09:70:26:16:1b:cb:c7:c0:be:75:
77:3a:54:90:a5:6f:cc:e2:10:18:18:f8:bd:f5:d6:
8f:c6:81:2d:35:b9:4d:47:d0:e6:0d:84:55:a5:1c:
9a:03:bc:f9:10:b8:f2:0e:81:9f:ac:b7:ae:37:5f:
46:9b:2d:18:fb:e3:61:bb:d9:01:18:21:5d:0e:a1:
3d:b2:b3:b4:b0:6d:88:12:2c:a2:f8:25:f7:39:2d:
2e:fe:65:4f:6b:b3:18:bf:60:02:da:49:81:9a:6c:
7d:8b:61:58:3a:5d:27:ad:64:37:ba:a0:80:55:d1:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E7:83:0C:00:F7:75:55:65:E8:02:63:5F:1C:6B:71:73:CA:15:B7
X509v3 Authority Key Identifier:
keyid:08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:30:a0:df:e1:f1:bb:29:a3:75:f6:84:4c:7e:97:fa:aa:e8:
0c:3e:7f:f4:c3:14:cd:5d:40:df:84:7d:ea:00:81:e7:58:aa:
e4:fc:10:ac:c8:4e:7d:88:8b:33:da:39:90:29:c8:1f:c5:04:
93:52:f2:fa:06:b9:a6:57:91:c9:a3:b3:04:f0:87:85:a1:18:
3d:2c:ee:aa:89:fe:c4:7a:0d:62:61:80:7d:25:61:ed:6c:e5:
1f:af:ab:33:32:91:45:86:8a:ac:44:d8:14:ee:0c:ae:ea:fa:
a4:a0:5d:56:4d:2b:8e:46:be:9b:17:8f:33:32:84:b1:dd:a0:
2c:0e:d8:c5:9a:2e:4a:3f:ad:4f:fe:8e:dd:96:b0:b7:e3:c1:
1a:27:75:ed:17:39:8b:16:23:df:76:b0:59:ab:b8:58:a0:be:
93:4f:c7:37:32:a4:c4:8f:f5:f0:45:f6:01:9b:32:58:74:ea:
63:b3:bf:23:9d:03:88:31:02:5d:20:07:65:ac:87:11:d7:f9:
ec:74:87:55:21:4c:01:e7:ac:69:d3:ce:99:db:75:cc:52:67:
81:69:5f:98:12:c1:1f:12:eb:42:fb:0a:04:81:d5:fe:3f:cd:
1a:79:ef:a5:25:c2:92:fd:49:ad:0e:37:2d:eb:90:f1:41:f7:
60:5d:40:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:08:58 2026 by rpki-client