Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
File: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json)
Hash identifier: tFLdY+2Ri/7/aLyXeS85vmPZ8K73ehrbFGe2UMptroI=
Subject key identifier: A3:40:69:6A:BA:01:AB:8E:2C:13:C0:67:57:47:35:49:FA:15:A1:0E
Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
Certificate issuer: /CN=0a35575b9947ace25ce87774c82775f18977fd19
Certificate serial: 019D98BD87D7F726719184D375B7C99754C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
Manifest number: 164E
Signing time: Fri 17 Apr 2026 00:00:51 +0000
Manifest this update: Fri 17 Apr 2026 00:00:51 +0000
Manifest next update: Sat 18 Apr 2026 00:00:51 +0000
Files and hashes: 1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: XMZU5fZZ2O49TjNWZGJlNSo5MpJbnbO57ewJcPav9Ho=)
2: Fr5UXfjdMrhEHYQ6Xdia0OdmNWk.roa (hash: 30Ofi4XCsm5vnfPYfxuSwPdN95VWJBJfoWiBcDk1LZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:87:d7:f7:26:71:91:84:d3:75:b7:c9:97:54:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19
Validity
Not Before: Apr 17 00:00:51 2026 GMT
Not After : Apr 18 00:00:51 2026 GMT
Subject: CN=a340696aba01ab8e2c13c06757473549fa15a10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:dc:63:73:07:4e:5f:b8:f1:e2:9a:5c:ab:
9c:1c:02:5a:d7:17:4b:a8:c8:63:25:28:ef:0d:90:
46:0b:92:1a:9a:52:cf:c2:44:b8:4d:72:52:fb:5e:
28:75:af:1d:44:35:3e:68:9f:70:53:2e:bc:f5:aa:
72:19:02:bd:70:82:da:2c:07:c2:dc:7e:67:cb:fd:
15:3f:d6:23:7d:de:27:89:97:dc:16:a0:e3:07:de:
7b:31:03:bd:25:23:b5:d1:7b:7a:4d:70:81:b2:9e:
6b:27:ac:b4:fd:a5:00:52:e2:ea:0e:84:ba:2a:3e:
a9:ca:4b:f8:68:34:ce:ec:f4:b5:36:5e:46:16:24:
ac:94:a8:74:f2:ba:5d:13:b0:32:83:e7:c9:04:e7:
3b:9a:a2:69:25:69:be:0a:07:7c:f8:80:8d:a9:81:
c0:7b:e8:35:da:07:4e:0e:c2:db:27:cb:e1:79:0d:
0a:63:f5:18:18:6a:9c:12:99:53:61:06:f8:48:54:
72:59:d4:1b:b8:2e:4a:7d:d0:87:f2:a0:1c:3c:1f:
26:25:11:5d:75:ea:d0:82:0e:5b:50:8b:76:42:c4:
7b:5a:c5:78:ed:58:ca:28:f3:c9:28:7a:58:9f:c2:
09:03:d9:ad:cc:e4:c8:da:bf:6d:17:38:06:93:d2:
25:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:40:69:6A:BA:01:AB:8E:2C:13:C0:67:57:47:35:49:FA:15:A1:0E
X509v3 Authority Key Identifier:
keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a8:17:dd:64:ee:f0:e1:12:a5:ff:17:7e:c4:63:b1:2e:7c:
aa:aa:2b:4e:b0:17:70:21:a9:0f:d2:f2:56:a1:95:ef:7b:d3:
2d:0a:a0:32:28:b5:08:3c:d3:c7:73:fb:14:66:17:95:b7:63:
2a:26:e0:1b:de:10:aa:2a:e9:f2:b8:50:ab:c0:d3:c7:be:18:
72:34:31:1f:68:33:fe:5b:6a:85:fe:2c:cd:39:b9:f5:ba:50:
c1:8a:42:37:74:cf:90:5f:86:b2:69:d2:f2:35:a6:05:aa:f8:
52:11:c2:ff:a0:b3:07:b6:00:49:4f:d9:ea:c5:a8:80:3a:fe:
e8:f7:a1:44:46:8c:f0:05:8a:0a:64:fb:08:56:03:93:ae:09:
62:f9:1f:2a:de:8c:7e:31:8c:39:70:2b:2c:b5:46:1c:d9:7c:
34:2d:c4:db:f1:74:06:95:3b:06:c0:9e:bd:83:aa:ac:30:56:
e2:10:fa:99:46:18:c8:85:fc:ba:a7:59:bd:e6:b7:9c:7f:bb:
89:c9:c7:33:d9:0d:c1:d2:be:d8:f9:19:c7:eb:9b:8b:c2:12:
f7:6b:18:60:fe:6a:af:44:15:bb:e4:4e:5f:9a:ac:6e:36:b1:
48:55:94:91:c9:0a:aa:d4:52:29:ac:24:be:33:00:c1:4d:88:
3c:4f:62:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:12:23 2026 by rpki-client