Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
File: CjMvWtwEaVM7vdz86JV-ruWL_WA.mft (raw, json)
Hash identifier: YeoUg2kJnzfn/LUXcARaJKMLHbVgKtL6v44vd/V7lBk=
Subject key identifier: 9C:11:2A:57:CA:21:B4:56:7E:C8:F4:84:E0:F8:6E:61:25:14:FD:91
Authority key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
Certificate issuer: /CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Certificate serial: 019DA41D0BBF4B1B7768E9C0B109BEF1F927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
Manifest number: 18CC
Signing time: Sun 19 Apr 2026 05:00:59 +0000
Manifest this update: Sun 19 Apr 2026 05:00:59 +0000
Manifest next update: Mon 20 Apr 2026 05:00:59 +0000
Files and hashes: 1: 3pHQTzxvnePiZsDxPy-BBwbaxHE.roa (hash: Y44S6ZmGxtTJuSR6q9viqsdpr1+gHx7RTzN1MdK3yOs=)
2: CjMvWtwEaVM7vdz86JV-ruWL_WA.crl (hash: 8xyDdRBSl4HBBCTs8D8qQmPtidNv688iMeeHM+mVCrM=)
3: i9JuOf_lil0vGpP_qnq87ScuDA8.roa (hash: 37O6D5o8eMGGFdDLmGcDaN3OTpRDH6Fu/HOaTp1mFTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:0b:bf:4b:1b:77:68:e9:c0:b1:09:be:f1:f9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Validity
Not Before: Apr 19 05:00:59 2026 GMT
Not After : Apr 20 05:00:59 2026 GMT
Subject: CN=9c112a57ca21b4567ec8f484e0f86e612514fd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:51:ff:60:b7:1a:ef:bc:18:71:c5:cc:b9:
fd:b5:87:59:58:46:34:52:e9:1f:89:26:9f:87:1f:
dc:a9:e2:a0:7b:63:22:11:0c:c4:c8:4e:47:a3:d1:
f5:2c:43:28:4c:d4:e2:61:fd:ff:10:cd:c6:55:c3:
15:0d:70:d4:9f:26:aa:d8:f0:d4:54:07:a6:85:be:
fb:fc:1e:bc:24:ea:97:d0:d2:e1:18:f3:a4:ea:04:
d2:40:bf:33:1f:8d:ad:ae:f7:c2:67:94:d8:14:98:
48:72:71:15:24:da:17:bf:33:bc:be:c3:56:3f:63:
6c:25:8c:a3:f4:98:e0:a2:02:a2:bf:25:f1:49:c4:
0a:d1:70:35:ea:0f:11:ce:a9:ae:19:f4:35:2c:96:
90:88:81:46:3e:3b:af:f1:fd:c8:fa:06:4a:b9:7f:
3c:ab:be:52:ce:a7:77:27:e1:00:06:56:3d:65:87:
f7:92:e8:d0:72:3d:60:8d:6f:7f:09:4d:f8:e9:05:
c9:d5:cf:74:a6:d0:9e:66:d4:8d:d2:3c:79:8c:8a:
32:38:e1:db:47:44:35:82:5c:42:43:ca:ef:14:9e:
9a:28:6b:28:8a:e1:52:10:68:a2:be:b9:e6:57:80:
3d:7f:d7:e0:9a:d6:3a:ed:a6:36:a5:96:c1:49:29:
cb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:11:2A:57:CA:21:B4:56:7E:C8:F4:84:E0:F8:6E:61:25:14:FD:91
X509v3 Authority Key Identifier:
keyid:0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:24:10:d4:f0:cd:63:83:b3:3e:0c:da:06:e1:c9:17:fc:ab:
da:0b:5b:fc:2f:22:49:3d:77:5e:1b:51:89:b9:99:28:3e:5b:
2f:51:13:28:4a:2e:08:f6:f7:cb:57:d7:09:12:14:8a:9e:80:
8e:e7:2e:62:39:9b:41:74:5a:25:4d:ec:b5:0a:b8:e6:93:22:
86:64:f4:7b:e7:25:42:4b:f9:5f:e5:7d:98:26:48:a4:5f:56:
5b:a5:54:4f:64:78:a3:3f:cf:66:d7:2e:35:07:b5:1a:13:f6:
e1:4c:5c:eb:47:3d:39:b3:4a:0e:d0:ae:ea:f0:30:53:c8:8a:
a6:62:e0:da:af:fc:d5:95:fe:03:a4:ae:54:21:8b:4c:76:3e:
25:d9:4f:b2:c6:84:de:10:f4:ed:51:b5:4d:d8:6d:db:b6:38:
07:86:dc:1a:c8:5f:b3:00:4e:f7:5c:cf:d6:a1:61:7e:7a:86:
66:00:e3:ad:75:fc:4e:1a:86:fa:d9:4b:15:bc:27:45:9a:62:
24:b5:fe:b7:2f:17:73:52:b4:d8:89:ed:98:1e:1a:59:71:c4:
61:4a:33:9c:5e:47:ec:13:60:1d:2c:aa:9d:3f:78:58:a2:4e:
31:80:f7:54:15:ab:1f:1a:f6:88:81:c8:c1:f5:39:96:d8:e6:
8d:ca:78:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:23:01 2026 by rpki-client