Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
File: j07qcuRTHJKm4A708ZGmEn6VbS0.mft (raw, json)
Hash identifier: NY85HBEGx2sD2Vuo/QHv7OoLC2v5Z/rRIhwwTCANkXw=
Subject key identifier: CF:B6:07:69:24:10:56:FA:2C:90:FD:EE:39:EE:F0:41:22:6C:FD:F9
Authority key identifier: 8F:4E:EA:72:E4:53:1C:92:A6:E0:0E:F4:F1:91:A6:12:7E:95:6D:2D
Certificate issuer: /CN=8f4eea72e4531c92a6e00ef4f191a6127e956d2d
Certificate serial: 019D98F47A822C68EA7BC04542F55FCCD6AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
Manifest number: 0D78
Signing time: Fri 17 Apr 2026 01:00:52 +0000
Manifest this update: Fri 17 Apr 2026 01:00:52 +0000
Manifest next update: Sat 18 Apr 2026 01:00:52 +0000
Files and hashes: 1: j07qcuRTHJKm4A708ZGmEn6VbS0.crl (hash: T4Z1TBniv+lD/e4k7j6rtuIhy3MMt8CRUaRRLX8txGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:7a:82:2c:68:ea:7b:c0:45:42:f5:5f:cc:d6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4eea72e4531c92a6e00ef4f191a6127e956d2d
Validity
Not Before: Apr 17 01:00:52 2026 GMT
Not After : Apr 18 01:00:52 2026 GMT
Subject: CN=cfb60769241056fa2c90fdee39eef041226cfdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:63:ac:e5:75:3f:ff:ec:b5:52:9e:9c:93:
71:ee:64:c1:d2:89:e2:a6:03:3a:88:02:d6:90:b8:
f4:48:b7:4f:85:5c:26:28:3b:77:c6:ec:b8:07:59:
b6:25:ca:26:f3:95:03:f7:2d:70:a0:a0:03:f6:61:
52:54:14:f0:64:eb:d4:c5:4d:9d:82:11:46:35:4e:
09:43:fd:17:20:e7:57:a8:99:8e:08:a5:fd:4b:f7:
bc:29:91:ae:3c:81:21:17:06:dc:c1:c2:e3:6c:85:
c4:10:30:75:d1:e8:59:6b:11:43:c5:12:84:a4:1c:
4e:32:e8:a2:08:9b:e9:8f:4c:8c:c3:85:7f:f8:2e:
52:cd:41:ce:4f:0b:1a:5d:4b:ed:5b:71:87:9e:8d:
37:c6:98:ee:0b:17:30:a7:6d:bf:b4:16:34:03:d6:
4f:cf:d5:59:06:0b:77:dd:50:9d:36:f3:c0:bb:d9:
81:8d:4b:a4:98:bd:2d:02:87:77:2e:cd:59:3c:4c:
5e:2e:44:dd:ef:cf:93:1b:12:13:5f:f4:98:22:aa:
32:6f:bc:07:05:c7:5b:a1:ee:e8:fe:0a:a4:b9:42:
91:e6:2e:ca:95:28:55:6c:ad:8e:1d:c6:d6:44:ce:
95:1a:88:b9:7f:45:0c:3b:d0:b7:53:ed:4c:df:d2:
3e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B6:07:69:24:10:56:FA:2C:90:FD:EE:39:EE:F0:41:22:6C:FD:F9
X509v3 Authority Key Identifier:
keyid:8F:4E:EA:72:E4:53:1C:92:A6:E0:0E:F4:F1:91:A6:12:7E:95:6D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:99:af:14:6f:73:c1:a6:18:b5:f8:a7:69:58:b7:1f:4d:f0:
78:a6:12:47:46:c9:0f:18:47:e5:94:57:3b:47:c6:b1:58:04:
0a:61:17:db:6f:1c:b9:9b:6c:a9:9d:2b:e2:db:b7:cd:a0:25:
65:7a:75:85:23:cd:53:6a:ca:e5:7f:18:65:85:dd:7f:fd:e9:
3f:6f:f6:31:36:13:b3:12:fe:84:21:60:4d:28:df:57:1d:72:
4e:9f:86:45:32:35:5e:b8:31:d7:3d:1d:6f:dd:6d:a0:96:b0:
86:a2:71:35:81:4c:9a:99:3d:56:ef:d4:c7:74:41:29:6e:a3:
94:05:81:5f:12:16:c9:d9:b2:fa:83:43:a6:83:be:ed:ca:2e:
20:05:1b:5e:7f:81:60:b9:ab:8a:48:6c:5f:f9:f8:39:f2:47:
66:6b:72:d9:63:96:47:08:5f:4e:8f:55:ce:d3:3e:64:55:80:
14:77:b1:31:8c:fc:2e:ae:8b:72:64:10:39:c7:25:03:88:d6:
e0:62:cb:44:75:71:f4:d7:bb:61:78:b6:be:cd:80:89:2c:96:
ac:30:63:30:6d:ce:95:dd:75:dd:57:66:b6:76:4d:d2:19:96:
83:f3:7c:09:0b:a4:ad:77:85:7e:b4:28:c3:24:7d:c3:11:48:
54:0e:40:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:07:32 2026 by rpki-client