Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
File: cjM1sFB1VK5sbMKUdQdkyv0L1og.mft (raw, json)
Hash identifier: l8qTjoiyQTHvkN2CLlG7qkpm+QGIYJ9XcoRiWtyaCiA=
Subject key identifier: C3:49:52:B0:2C:91:A7:34:A4:6F:C7:AE:BE:6C:10:F4:77:E9:D4:8A
Authority key identifier: 72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88
Certificate issuer: /CN=723335b0507554ae6c6cc294750764cafd0bd688
Certificate serial: 01A0C2FB8F7A995E0BE4FBF68666DF1E3A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
Manifest number: 02CF
Signing time: Mon 21 Sep 2026 08:01:01 +0000
Manifest this update: Mon 21 Sep 2026 08:01:01 +0000
Manifest next update: Tue 22 Sep 2026 08:01:01 +0000
Files and hashes: 1: cjM1sFB1VK5sbMKUdQdkyv0L1og.crl (hash: yPh8qIiAU8hSvocjzxxlgBeoTpyZvPgS/ZlRFcG55v8=)
2: h1AxusJ0gzCuRYNROBYE_ex13Gw.asa (hash: RqU6DmGS5GS4oIpT5CWEZ1wznv9eazt1xRYLsNLaGg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:8f:7a:99:5e:0b:e4:fb:f6:86:66:df:1e:3a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=723335b0507554ae6c6cc294750764cafd0bd688
Validity
Not Before: Sep 21 08:01:01 2026 GMT
Not After : Sep 22 08:01:01 2026 GMT
Subject: CN=c34952b02c91a734a46fc7aebe6c10f477e9d48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:04:30:f7:07:19:3f:49:4c:4d:62:74:dc:
02:49:e5:34:02:69:62:aa:0c:5e:d0:b8:64:45:5f:
60:76:5d:d2:4b:db:25:c5:5f:a8:10:1f:09:c1:0b:
fc:29:3b:8a:bb:95:33:c4:5c:85:e2:12:a7:ac:2b:
30:2e:e5:66:5f:62:a3:80:18:43:1d:67:04:cb:eb:
b0:52:56:ab:9f:3f:90:e8:38:8a:cf:83:91:7d:f9:
fc:be:de:78:15:e4:cc:58:d3:ff:0e:e0:d7:35:53:
4a:39:b5:1e:08:7b:62:84:ac:e5:52:c4:49:da:84:
8a:2e:a3:a5:26:cc:49:45:21:51:be:fd:d3:6e:f5:
a7:43:22:a4:b4:49:1a:91:88:24:fe:a1:a5:9e:45:
90:48:5f:80:4e:77:ae:ea:97:4b:74:28:b4:12:05:
c0:4a:47:8d:fe:0f:81:e0:50:54:36:a9:ef:f0:10:
78:63:c9:0c:b9:3b:4e:ef:18:3f:c1:2f:39:b9:80:
72:68:2e:f1:aa:ba:c5:47:bf:0d:0b:27:26:cd:ff:
9b:3b:ac:96:b0:3f:c5:09:56:b5:37:7c:a0:00:23:
a1:3b:59:d8:04:cf:79:12:59:c3:9b:b1:2b:3d:b1:
6c:e9:39:c4:11:37:d3:9a:10:58:5f:e2:f2:85:df:
f2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:49:52:B0:2C:91:A7:34:A4:6F:C7:AE:BE:6C:10:F4:77:E9:D4:8A
X509v3 Authority Key Identifier:
keyid:72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9e:7f:2a:fc:5d:8d:6c:45:d5:a9:2c:e1:7f:76:92:cc:8c:
b8:a3:07:f2:53:2d:5b:47:2e:2a:6b:4d:4d:b5:23:dd:f8:05:
0f:6a:e4:9b:10:44:5e:f0:4d:25:01:5e:6a:11:f6:89:e8:28:
da:71:cb:87:31:02:64:09:1a:8a:4d:22:d1:04:6f:15:6f:fc:
df:b9:3a:c4:6c:48:0a:47:df:f4:20:ca:f5:af:36:80:cc:f0:
44:0a:43:cc:08:4d:67:9b:f1:f1:66:94:c5:b3:4d:40:7c:e6:
0d:91:2b:dc:73:a6:29:ac:2a:30:88:06:22:b0:59:2b:46:fe:
ca:51:55:27:cc:96:10:02:42:6b:61:6b:45:e1:95:00:28:60:
52:9d:2f:e0:99:d6:7d:43:dd:58:f3:f8:63:96:be:b7:cd:01:
63:db:81:f0:b6:18:e0:2e:c8:e4:cb:61:a0:96:1d:ee:e3:31:
a5:7a:82:44:59:e6:52:27:38:65:a0:a2:8a:10:0e:ce:b3:54:
f1:2f:b6:b1:f8:4f:15:87:72:62:77:8c:0d:b9:07:b0:15:99:
30:1a:3f:e0:e8:8f:26:4d:16:e2:b3:5f:e8:22:72:9f:9d:6a:
76:fc:db:57:a2:09:10:dd:83:08:cf:46:1a:d1:84:b5:31:02:
df:bc:ea:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:13:20 2026 by rpki-client