Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier: 2CEuEPy5Eb54A3fD/jucVCgDsQyI3BboqC5uZuXxcsk=
Subject key identifier: 88:68:D8:6E:31:93:80:09:31:51:06:BE:95:35:43:FC:71:FC:FA:FC
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 019D9BBEDBCCF9D5B3308BD0BC77D69BC4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number: 0C06
Signing time: Fri 17 Apr 2026 14:01:09 +0000
Manifest this update: Fri 17 Apr 2026 14:01:09 +0000
Manifest next update: Sat 18 Apr 2026 14:01:09 +0000
Files and hashes: 1: RpRVr86nrmR4pLP_o-Dkxgygl-I.roa (hash: dYMAWblY0LPrzbeqEQ3uJpDKV9wamvkF6WdwjSusrRI=)
2: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: LaDNxmeqO4GBjrcGsTNsaAQufQbuGx0z/6v6n3wjxnE=)
3: exmQSDmoNH_azOiipU8IusPL-zE.roa (hash: tOEc7EoupcuUU99+9kHSEhJIEOT6G42NFE+0vNPQoj4=)
4: zLLpSlai4j_BckMwzN3FZevoFJI.roa (hash: X+bvA7vFedjj2qlLm3vDJgVyiO2iqldPs11sP4fxghM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:db:cc:f9:d5:b3:30:8b:d0:bc:77:d6:9b:c4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Apr 17 14:01:09 2026 GMT
Not After : Apr 18 14:01:09 2026 GMT
Subject: CN=8868d86e31938009315106be953543fc71fcfafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:06:ce:6e:84:1a:f9:b4:7f:a9:f4:d6:10:ae:
e3:05:8c:44:ff:59:27:44:a4:d8:4c:fa:a7:f1:cd:
02:bf:be:dd:e4:f3:9e:a9:b9:da:d6:91:ea:9e:d3:
16:1c:e2:6d:df:5e:4d:cc:58:6e:2b:ba:0e:5a:1b:
c3:93:21:f7:2f:c8:39:e0:01:0e:36:6d:ae:59:5a:
02:ea:62:1e:c3:76:ac:22:34:e2:92:0b:8b:c9:c4:
1b:07:43:fe:6d:69:c7:29:37:6b:de:90:db:57:0f:
9d:c5:30:ae:7a:e0:8f:cd:d4:cc:c8:59:60:2b:f6:
71:9e:ca:23:c0:24:e0:36:af:ef:de:a9:36:b0:db:
d0:f5:cb:cb:c9:d4:ba:cc:97:0a:9b:47:b8:89:21:
54:68:81:97:2c:b6:36:47:6c:d9:cd:29:4a:01:d5:
97:86:51:d1:0e:5d:d2:0b:dc:09:e2:1d:18:c8:0f:
16:0f:bd:f5:a9:95:f4:bb:e8:36:9a:f6:72:f6:db:
87:2b:9d:cb:21:d7:a8:be:9c:6a:f1:8e:58:ee:7d:
89:82:63:2f:59:cc:d6:9d:a2:d7:34:24:cb:2f:c3:
4f:f2:ff:73:f5:a3:5c:d0:8d:52:2e:26:5e:34:78:
be:c3:5e:97:1f:da:a8:14:05:5a:38:c7:f2:59:8e:
10:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:68:D8:6E:31:93:80:09:31:51:06:BE:95:35:43:FC:71:FC:FA:FC
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ef:1e:70:79:da:5b:c9:a2:e5:a8:17:e6:fc:09:8f:61:95:
ab:b9:ce:9a:da:eb:0c:ec:21:a0:4e:24:f0:b9:91:e8:65:67:
5d:9e:43:85:28:25:1d:29:ff:f4:95:9a:67:d5:49:a9:b6:92:
4d:c3:25:30:8a:6f:92:70:29:87:01:a9:da:00:76:65:28:7a:
ea:c1:69:e7:b6:a9:e9:86:c9:01:9a:85:d0:c8:7e:b4:96:12:
f8:f7:c8:55:58:13:b6:f2:a6:25:af:40:11:d1:6f:d9:8b:48:
43:63:02:99:ea:a2:a3:d9:98:e2:05:cb:93:92:4e:6c:bf:46:
69:16:de:18:8e:90:bf:10:80:b8:ff:7d:66:eb:e3:bd:3f:1b:
7f:53:6c:98:9d:ae:45:4a:c3:06:c6:06:9b:66:ec:4d:4d:a6:
d8:73:7e:97:6d:05:9b:de:ec:a6:8a:f8:68:b8:5e:7e:96:92:
85:05:68:9c:b6:75:e9:34:27:4c:b7:5d:ee:fd:e8:42:6a:86:
de:da:ea:73:74:2c:47:ab:24:53:a1:c9:76:fa:a1:dc:bc:73:
92:54:38:d9:56:e2:b9:ad:c8:5a:24:41:4d:2c:f5:33:c6:4b:
30:41:76:e9:1e:16:46:9a:d9:6e:58:88:35:1f:70:aa:e5:5a:
0e:59:e8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:01:34 2026 by rpki-client