Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
File: cjM1sFB1VK5sbMKUdQdkyv0L1og.mft (raw, json)
Hash identifier: BPn7anYZSE93FFnJ5Yaq1Mrb79RQ7fxGxaMSU0Ghi30=
Subject key identifier: F5:5F:8C:8D:D9:A7:91:03:AF:8F:0E:F1:56:4B:AF:D0:53:A0:D8:89
Authority key identifier: 72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88
Certificate issuer: /CN=723335b0507554ae6c6cc294750764cafd0bd688
Certificate serial: 019D9C63537520A30F68DE10EE5E55FBFBBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
Manifest number: 012B
Signing time: Fri 17 Apr 2026 17:00:48 +0000
Manifest this update: Fri 17 Apr 2026 17:00:48 +0000
Manifest next update: Sat 18 Apr 2026 17:00:48 +0000
Files and hashes: 1: cjM1sFB1VK5sbMKUdQdkyv0L1og.crl (hash: 9QlSJQ7SDHVyk641Nk/jxtEtl9hJUwFSswMA8rNagns=)
2: cwaVlyUcrRob1yQGfrzbyd4SXY8.asa (hash: hxp7g2uf5EIcMdBETFCVoZR6vdDL2LqgNsCC4ZPPusU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:53:75:20:a3:0f:68:de:10:ee:5e:55:fb:fb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=723335b0507554ae6c6cc294750764cafd0bd688
Validity
Not Before: Apr 17 17:00:48 2026 GMT
Not After : Apr 18 17:00:48 2026 GMT
Subject: CN=f55f8c8dd9a79103af8f0ef1564bafd053a0d889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:08:91:b1:b4:15:d2:73:a1:df:c0:7d:3f:
95:6c:4d:5b:27:e4:5f:a8:0b:ec:39:5b:3b:81:12:
f0:9c:98:43:3e:47:84:c8:f5:9b:9c:b8:12:27:b3:
9c:ab:1b:a4:5e:71:24:97:89:e7:45:5b:b1:42:8f:
c6:36:17:77:cf:4d:b4:c2:86:58:7e:e8:b5:f6:f2:
f3:ba:78:32:2a:f8:65:d4:f1:87:af:17:8a:91:59:
6d:db:c5:23:21:9a:04:c5:53:e3:32:db:bd:f6:0f:
51:bd:5f:ce:6b:09:d9:c4:6f:d0:3b:4a:1b:95:c6:
b1:85:a8:d1:37:b1:61:01:7b:5b:2f:18:3c:70:24:
ed:ba:7c:98:33:6e:a0:f5:9b:79:cf:8c:42:fc:5c:
28:39:1d:ae:67:0f:65:40:66:e9:7f:55:0d:98:1c:
a6:7f:a9:8f:ac:45:b5:95:65:20:21:7f:38:18:48:
f7:7a:ab:6f:75:8d:48:73:4c:72:e1:c5:7c:5d:10:
34:0a:da:87:a4:56:bc:b6:b6:6c:fa:e1:2e:be:14:
43:91:62:d5:1b:c9:5a:6c:1f:09:b1:c4:55:5c:c9:
fa:43:d1:94:02:56:5c:e5:45:1b:25:e6:ea:29:0c:
b9:8e:64:a5:06:71:72:24:36:60:73:8d:39:da:07:
ba:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5F:8C:8D:D9:A7:91:03:AF:8F:0E:F1:56:4B:AF:D0:53:A0:D8:89
X509v3 Authority Key Identifier:
keyid:72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f5:9c:7b:83:f5:7b:b0:f1:f8:70:a0:96:13:c0:a6:8f:0b:
be:74:6c:60:73:14:61:99:53:08:31:e0:57:14:7c:4a:7f:34:
a7:c0:eb:e5:46:24:98:02:09:e3:50:87:a0:2a:43:6b:d1:ab:
bf:1b:3f:eb:56:0c:f8:34:2b:76:bc:be:d2:37:c1:a5:05:67:
32:b2:f3:6e:c7:2c:0f:35:aa:9e:c6:63:42:05:c5:da:8d:3c:
6b:f9:ca:88:0e:bf:9d:ff:35:99:56:bc:83:39:02:ca:1b:a7:
67:ae:21:94:30:ca:b7:76:28:e7:49:75:89:e8:5f:54:40:6b:
f4:61:f5:7c:55:c8:9c:60:59:e7:21:99:5e:f0:b1:0a:dc:db:
97:6e:f7:aa:48:0c:df:18:ea:bb:d3:68:a6:cd:bd:a4:58:4d:
ad:a7:10:d0:b1:e8:5c:71:65:eb:66:80:c2:1a:d4:de:99:ed:
54:61:f9:82:a4:70:11:51:e8:0a:f1:36:ca:81:a1:c8:ee:74:
b5:fa:a6:5e:33:fd:81:ba:fd:41:90:55:c8:92:4e:55:e9:84:
3e:c7:40:ce:d4:c5:60:43:f7:0c:0f:e3:6c:a1:1f:bd:f6:9b:
17:01:68:cc:ee:ee:ac:14:d5:af:3a:04:6a:a7:25:ae:3f:d3:
6f:0a:07:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:05:19 2026 by rpki-client