Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
File: CMuJoREU774OHiVQ7Nozb9eS7F8.mft (raw, json)
Hash identifier: z0faF8O/NlaBs06T9ZUPfBHqs48dp5DQ32f8aDdQbrY=
Subject key identifier: 2F:A7:47:1D:70:E9:2E:E1:EE:DF:3E:B9:2A:30:C7:32:76:A2:44:53
Authority key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
Certificate issuer: /CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Certificate serial: 019DB16AA7AD684BAACF4A12D730EEC13951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
Manifest number: 1561
Signing time: Tue 21 Apr 2026 19:00:50 +0000
Manifest this update: Tue 21 Apr 2026 19:00:50 +0000
Manifest next update: Wed 22 Apr 2026 19:00:50 +0000
Files and hashes: 1: 9YkWGVXxcEeUFhntlgOJ2k6-P60.roa (hash: mFqo2vRCJnr/fzWY2nuNTTUS7HuuftZH6HRgAXJSWGw=)
2: CMuJoREU774OHiVQ7Nozb9eS7F8.crl (hash: 02f6pJXxTbvQPgMdYV8DLwhsqOEMDKkUep/DPwxF1WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:6a:a7:ad:68:4b:aa:cf:4a:12:d7:30:ee:c1:39:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Validity
Not Before: Apr 21 19:00:50 2026 GMT
Not After : Apr 22 19:00:50 2026 GMT
Subject: CN=2fa7471d70e92ee1eedf3eb92a30c73276a24453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b4:e7:5a:56:3d:7d:24:bb:ea:7f:34:e0:50:
31:8a:24:7b:aa:c9:59:d3:01:f0:7c:27:6f:4e:f0:
e4:50:a7:d8:c9:57:11:ba:1c:6d:6e:f7:de:48:d5:
1b:ef:cd:f2:85:db:b6:68:9d:e4:65:bb:9a:67:29:
3c:8c:c9:4d:76:b0:a3:e0:c6:88:34:90:22:a8:40:
07:50:e5:28:3e:3b:f9:e0:1f:36:a4:21:a3:b7:ae:
2f:01:16:24:c2:0d:fc:a4:2a:5e:2b:92:2f:07:da:
ce:62:c7:23:b0:6b:fc:30:6f:26:5f:d0:f5:e8:7b:
3f:57:6a:7b:2f:e6:21:b1:ae:44:9b:34:cf:15:3c:
ec:5d:f7:ed:f5:48:c7:f4:ee:58:e5:a0:79:0d:a2:
63:b0:95:20:a8:6d:e9:a8:1c:81:df:92:d5:c0:87:
87:3d:ff:cd:16:5c:b2:b9:b8:09:1b:2e:73:73:d2:
2d:a9:e1:fa:d3:03:71:11:0e:bd:49:6c:69:6b:71:
99:dc:8c:b6:8b:30:91:40:79:c9:12:e8:d7:63:e0:
2d:25:65:a6:94:73:bd:a7:62:0c:ba:e7:d1:54:9b:
aa:33:e1:6d:33:3d:fc:1b:00:8a:3a:74:f1:1e:41:
8b:b3:f4:e5:44:1c:c8:cd:0e:3a:51:30:e0:ed:d8:
8c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A7:47:1D:70:E9:2E:E1:EE:DF:3E:B9:2A:30:C7:32:76:A2:44:53
X509v3 Authority Key Identifier:
keyid:08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:47:f0:04:1f:15:a1:d9:69:80:48:6e:91:1b:ba:f6:65:f0:
06:3c:68:df:b5:29:e7:67:a5:95:af:98:d2:79:ac:35:5f:ec:
e4:bb:90:bd:b4:2f:2e:79:42:92:df:28:70:6b:0a:f6:9e:a6:
fe:55:2b:74:9c:03:00:c4:37:c4:83:90:2e:a2:71:a5:e7:ca:
86:d7:a6:46:af:d4:7e:47:22:b1:57:9f:5d:d8:7f:6b:ee:30:
33:55:9d:5f:92:fa:b8:54:98:6c:3a:14:53:29:71:39:f3:19:
bb:f8:a4:46:1c:02:d6:d5:65:5a:6d:28:00:40:91:0d:5c:50:
aa:48:31:ed:bc:f0:0b:0f:c6:74:9d:d6:76:dc:e0:20:8c:31:
9f:cf:a6:b3:a3:5c:b8:c1:db:ca:fc:12:41:5f:ab:ca:ef:77:
da:27:8b:68:1f:f3:59:03:69:ac:c0:79:5a:ba:d5:f9:6d:05:
16:cd:ba:df:05:5d:8d:4d:8d:16:e4:f1:8a:05:b3:df:76:2e:
39:21:ff:94:2b:f5:c1:22:c2:2c:41:06:67:68:ce:10:c0:22:
c2:bb:c2:51:47:61:00:26:4a:9d:8e:23:e8:7e:c6:25:b6:d5:
e3:c1:6e:ec:41:47:f1:28:87:bc:63:b1:0e:37:b9:fd:96:71:
af:a9:09:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:22:52 2026 by rpki-client