Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
File: cCjsnM1thh9fGv2tAEbzPJEDugY.mft (raw, json)
Hash identifier: Zg5Noye2/TUbSxcziu6Rlclqkwth+nqPfKme6TNgvSo=
Subject key identifier: 4B:C3:5C:60:0F:CF:8E:8C:EC:AD:0A:A3:2B:E0:53:75:AE:6B:45:F7
Authority key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
Certificate issuer: /CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Certificate serial: 019D9999B52C5D477CA72417DD4EADB38C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
Manifest number: 0A35
Signing time: Fri 17 Apr 2026 04:01:20 +0000
Manifest this update: Fri 17 Apr 2026 04:01:20 +0000
Manifest next update: Sat 18 Apr 2026 04:01:20 +0000
Files and hashes: 1: HF20xwiU_OmVlYn7AG5yVbrP7VQ.roa (hash: 0b37VardXMFgSQteic5rkAQqorX7ea/QfI9Oz3cEctk=)
2: cCjsnM1thh9fGv2tAEbzPJEDugY.crl (hash: Cb60zLm6q46jA8NehvIDhhPclR9k5/Ruf86MAtJr49s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:b5:2c:5d:47:7c:a7:24:17:dd:4e:ad:b3:8c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Validity
Not Before: Apr 17 04:01:20 2026 GMT
Not After : Apr 18 04:01:20 2026 GMT
Subject: CN=4bc35c600fcf8e8cecad0aa32be05375ae6b45f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:90:01:ff:b2:b5:03:74:09:61:c1:81:02:
f6:98:6e:0a:a7:b9:2e:dd:67:28:78:fe:6e:21:b3:
5a:03:de:e9:2e:8f:6b:df:cd:ba:f2:04:93:a9:60:
76:1b:44:ec:89:0a:10:9f:39:06:66:ab:ef:02:a2:
f4:f9:e4:47:db:52:cf:da:a1:87:55:a5:54:34:ed:
12:43:8c:7f:56:0b:7e:16:4d:0c:66:e2:b4:33:15:
06:b7:c0:8e:f7:3a:17:11:8b:f9:33:3a:31:64:5e:
6b:90:69:f5:ab:a1:37:d2:f7:32:e2:83:ea:9a:c8:
72:8e:66:4d:43:26:2d:04:56:c1:2e:36:cf:d4:83:
a4:1e:4f:c0:25:d9:11:1d:e4:3e:bd:4b:e8:08:25:
e6:dc:81:af:99:03:8a:20:05:ff:6f:14:52:5d:1f:
e8:db:2a:b5:5f:94:56:e8:fa:e6:b2:94:7e:f9:a8:
bd:cb:45:05:4e:c0:26:dc:ec:7a:84:37:e4:32:2c:
88:ee:a4:28:e8:c2:7e:e8:c4:1b:fe:55:b8:df:d1:
44:c9:9b:58:a9:01:05:4b:6a:5f:82:2b:1b:3c:ef:
bc:07:20:35:25:4e:16:c3:0a:bc:5e:e7:37:e6:49:
59:50:4a:e8:0b:bf:6b:87:e9:05:4d:a4:c4:39:1b:
4f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C3:5C:60:0F:CF:8E:8C:EC:AD:0A:A3:2B:E0:53:75:AE:6B:45:F7
X509v3 Authority Key Identifier:
keyid:70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6e:90:eb:6e:96:42:9c:e7:45:66:3d:90:1d:f9:2d:e6:1c:
7b:3d:b9:0c:b9:40:b1:77:bf:e9:f5:1b:24:6e:bc:5a:17:85:
a3:2a:75:54:04:b6:e5:be:5d:a2:20:ef:5a:53:08:cb:1d:a6:
48:3a:c3:b3:f1:4b:39:8f:3d:53:92:34:53:87:6d:c9:7b:2a:
95:fd:a1:db:f7:0f:cd:2c:d5:af:9b:00:43:ac:9e:02:7b:ac:
bc:6b:b3:ba:7c:14:4a:22:ad:de:71:1c:16:53:8e:91:a0:08:
1a:7b:6e:2c:e6:64:66:66:72:a9:94:e5:63:09:6d:a2:6c:a7:
8b:7f:80:70:e5:b3:2e:ed:2a:ab:41:9b:3f:d3:a3:f4:d1:46:
64:7c:85:0b:33:5f:2f:ee:16:f4:f2:4e:51:66:5c:c9:34:81:
ac:56:6a:de:75:61:20:83:2d:a0:0c:df:1c:bf:e9:73:d5:f7:
79:18:f1:c0:28:2b:62:38:db:b0:37:f4:8c:1a:5c:47:33:3b:
59:1b:ab:40:ed:98:08:48:75:7e:63:e0:e0:5a:fd:83:f3:ef:
60:91:90:58:7c:4a:00:c3:4c:6f:f6:ff:16:ae:1e:11:d9:01:
b9:9f:66:02:50:0c:b3:8c:73:d1:81:88:30:83:f9:57:17:be:
ea:77:9e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:51 2026 by rpki-client