Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
File: cjM1sFB1VK5sbMKUdQdkyv0L1og.mft (raw, json)
Hash identifier: iTdd/4imiaYxps054VU3MwQ/ampJKuaAiWCucetcvjE=
Subject key identifier: E6:11:CB:F1:98:64:C8:84:A1:02:C6:2D:98:30:4A:BC:7C:AF:71:47
Authority key identifier: 72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88
Certificate issuer: /CN=723335b0507554ae6c6cc294750764cafd0bd688
Certificate serial: 019CA7FC2BF405A4554E92CD6AF833EED6A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
Manifest number: AB
Signing time: Sun 01 Mar 2026 06:00:47 +0000
Manifest this update: Sun 01 Mar 2026 06:00:47 +0000
Manifest next update: Mon 02 Mar 2026 06:00:47 +0000
Files and hashes: 1: ScX8zH_7YuqCeMNW6YC-9XYC7Vw.asa (hash: ep4ZVxHJ8bc5+UFexh4+d3zBcyDoxg4SWNVrSmeSrtY=)
2: cjM1sFB1VK5sbMKUdQdkyv0L1og.crl (hash: RErQTieOs7tN+LN8mRvsOaj3UG2ipYx/amKxqGy+8P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:2b:f4:05:a4:55:4e:92:cd:6a:f8:33:ee:d6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=723335b0507554ae6c6cc294750764cafd0bd688
Validity
Not Before: Mar 1 06:00:47 2026 GMT
Not After : Mar 2 06:00:47 2026 GMT
Subject: CN=e611cbf19864c884a102c62d98304abc7caf7147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:07:90:55:e4:7d:b4:49:10:d7:63:d1:6d:
d8:78:40:fa:cf:6e:b5:0a:77:33:5a:f9:b9:f3:a1:
bc:b9:be:c8:e2:9e:36:9c:b6:ab:5f:09:59:3b:0f:
15:62:36:b2:7c:23:1a:50:6d:32:21:18:c0:7e:5e:
5e:1e:c1:5a:9e:d4:f6:99:82:92:f7:3d:d3:cb:e1:
46:ee:60:41:cc:83:ee:c9:5d:bf:6c:a5:9b:6c:28:
43:50:98:0c:39:0c:85:82:e8:8c:2e:1a:44:63:d4:
3b:8f:94:4b:31:55:ac:69:ff:72:26:3a:dd:bc:76:
8d:1e:80:cb:25:63:f1:ac:e8:00:18:cc:bc:e4:90:
ab:6a:73:b8:ae:cd:51:ee:41:a1:a6:5e:76:79:2b:
fb:f2:40:f3:dc:ab:28:50:4d:bb:07:38:5f:e9:0a:
e6:62:3c:b0:23:5f:9b:4b:5c:d2:19:c5:f1:b6:8e:
0b:b1:64:6c:32:eb:93:07:b2:4c:5b:14:a4:8a:fb:
d8:7b:8d:15:07:ee:57:de:38:77:81:db:12:eb:41:
60:c6:ea:0a:d9:50:15:2e:42:10:73:27:55:ee:7e:
44:a2:a6:8d:d8:0d:4b:6f:a5:9f:d7:15:4d:7d:76:
c3:98:a5:09:50:23:f5:f8:54:ba:84:05:33:35:c6:
28:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:11:CB:F1:98:64:C8:84:A1:02:C6:2D:98:30:4A:BC:7C:AF:71:47
X509v3 Authority Key Identifier:
keyid:72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ae:f8:d6:bf:e0:ce:98:ff:10:a6:2b:2c:73:ac:4f:81:f4:
22:75:fc:00:d6:4e:50:02:8e:de:5e:13:8f:4c:23:65:a8:7f:
6e:72:d9:fc:5c:1d:aa:f9:33:8c:9a:af:da:49:dd:d0:d7:be:
4c:c2:f2:49:56:9b:3e:41:ff:d9:7a:08:ad:08:82:aa:b1:5f:
42:7e:e2:47:6b:27:64:76:63:7d:ef:ff:cf:03:18:9a:01:c1:
da:d4:f2:1e:19:62:0d:d0:b1:d1:c2:02:3a:b3:b4:4c:3e:1c:
df:77:04:7a:e1:c0:31:18:4c:38:5c:a4:ff:c7:99:53:a5:36:
41:0b:8c:b2:e5:ad:9c:36:d9:d7:99:c1:78:b2:db:9e:73:09:
8a:67:68:9e:4c:d0:35:2a:de:50:d5:56:16:ac:f7:7f:88:19:
0e:9c:48:75:c8:13:c9:ed:97:b1:58:4a:2a:80:5f:44:e1:17:
df:cd:ba:e1:17:58:7b:4f:f9:f3:27:58:78:69:ee:02:9d:bf:
b1:d1:62:df:44:1d:27:48:7c:b0:58:bf:60:b4:3e:62:ca:0f:
c2:14:f3:c4:34:7c:50:60:23:ca:32:9e:70:14:13:a8:38:ae:
c9:f8:e0:68:c3:f0:80:a4:b3:7e:5a:c0:51:2c:45:39:43:f1:
10:2a:53:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:23:22 2026 by rpki-client