Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
File: CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft (raw, json)
Hash identifier: hqUJG+EKB5zZhdrtH2oh/tWAPmTP+eBje+6E3tB6RKM=
Subject key identifier: 37:F6:B1:D5:AB:CC:CC:5A:A6:2A:71:EC:97:EF:56:7F:89:E0:2C:23
Authority key identifier: 08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21
Certificate issuer: /CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
Certificate serial: 01A1298CD1A365EE944DB28935AD6E8B4710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
Manifest number: 02B8
Signing time: Sun 11 Oct 2026 06:00:56 +0000
Manifest this update: Sun 11 Oct 2026 06:00:56 +0000
Manifest next update: Mon 12 Oct 2026 06:00:56 +0000
Files and hashes: 1: CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl (hash: CW8pYJMgJNinEpveV5014ddWBMhE0pgYGpVnZx8TVm8=)
2: Y1BBsDkkWgEF03wDI0HCnPosmio.asa (hash: IevDpGbfjZ+T3hHUsK1Etx0/ZUjksfcbztMdQzNnqY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:8c:d1:a3:65:ee:94:4d:b2:89:35:ad:6e:8b:47:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
Validity
Not Before: Oct 11 06:00:56 2026 GMT
Not After : Oct 12 06:00:56 2026 GMT
Subject: CN=37f6b1d5abcccc5aa62a71ec97ef567f89e02c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9a:77:be:11:5c:f8:1f:21:ea:cc:91:df:fb:
c0:a9:16:82:8e:b9:47:e0:bc:85:f8:a1:57:9c:06:
a4:66:06:9e:63:5e:86:43:f9:9b:13:26:23:d2:92:
fe:16:5c:69:a4:98:d4:bf:b0:20:80:53:47:67:48:
27:cd:68:61:49:5d:a4:36:6c:4b:e2:be:dc:bc:48:
e7:4d:f3:c9:61:f1:f3:af:17:3b:b4:1f:91:7c:82:
a5:91:9e:dc:40:aa:cb:a6:d5:1b:c2:08:6c:78:65:
27:fe:1a:15:2e:c9:25:77:2c:e8:c8:78:74:4c:5d:
4f:0c:03:ad:9b:13:6a:91:1b:cd:db:72:af:64:50:
13:ef:72:63:d3:a5:a6:f9:26:a0:fe:61:c2:87:79:
96:82:37:18:4a:e0:fb:b6:7e:b8:f2:de:a5:c8:43:
2a:0e:df:7d:f9:2b:76:50:3e:33:fa:9b:8f:e5:4e:
0e:46:6d:06:0e:44:70:56:9e:df:2e:80:6b:60:25:
d8:22:50:57:73:db:7e:df:3c:6d:ad:3c:77:e3:f7:
44:e3:56:cb:6e:d2:0a:94:15:63:fd:20:38:24:c9:
8b:7e:31:bf:49:bd:1f:90:44:1d:f4:d4:72:2e:dc:
cb:65:80:da:81:f1:f1:d9:f8:e1:49:60:45:5a:b4:
6e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F6:B1:D5:AB:CC:CC:5A:A6:2A:71:EC:97:EF:56:7F:89:E0:2C:23
X509v3 Authority Key Identifier:
keyid:08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ff:21:09:9a:10:f0:58:2f:aa:a1:e6:60:14:72:dd:b5:01:
ae:78:96:cb:96:4b:7f:93:86:7e:64:9b:d7:f1:59:b6:d0:7b:
54:4b:cd:28:2e:f2:bd:1f:89:db:e7:8a:1b:59:77:e1:19:11:
37:ce:44:c0:5d:04:0c:88:a5:84:7b:10:85:34:cf:8b:3f:69:
21:69:e1:a0:dc:fb:ee:83:27:51:76:e4:7b:d3:9b:bb:c9:e3:
2a:2c:e8:a0:13:04:4d:8b:54:5d:df:55:5c:82:14:54:6a:97:
fd:34:31:73:fc:9d:f3:53:1b:0c:52:ee:49:13:b8:96:1c:88:
6c:f7:af:a1:7e:25:cf:39:b8:77:4e:fd:35:ac:ce:84:07:d1:
74:c2:b6:7c:db:69:fa:83:f3:bf:6f:03:06:57:ee:5c:7e:2e:
a6:f2:4e:08:f0:7a:87:9d:fb:ff:20:92:bd:77:6e:64:91:59:
8b:90:6e:bc:03:6a:49:fc:00:f6:5b:97:de:bc:a3:18:2c:a1:
e1:f7:a8:1c:09:64:e0:85:85:fe:9f:be:39:a0:40:6e:29:62:
4e:bb:fe:47:84:fd:1c:3f:80:82:39:ed:29:9f:ed:35:07:4f:
01:bb:b6:a4:9a:20:72:c5:46:26:dc:b6:d9:6a:71:5b:f9:40:
9a:98:51:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEpjNGjZe6UTbKJNa1ui0cQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OWI0ZDZmN2EwYTMzYjAxODA0MTFlZDc0Zjg3YTdjZmVk
OTY1MjEwHhcNMjYxMDExMDYwMDU2WhcNMjYxMDEyMDYwMDU2WjAzMTEwLwYDVQQD
EygzN2Y2YjFkNWFiY2NjYzVhYTYyYTcxZWM5N2VmNTY3Zjg5ZTAyYzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJp3vhFc+B8h6syR3/vAqRaCjrlH
4LyF+KFXnAakZgaeY16GQ/mbEyYj0pL+FlxppJjUv7AggFNHZ0gnzWhhSV2kNmxL
4r7cvEjnTfPJYfHzrxc7tB+RfIKlkZ7cQKrLptUbwghseGUn/hoVLskldyzoyHh0
TF1PDAOtmxNqkRvN23KvZFAT73Jj06Wm+Sag/mHCh3mWgjcYSuD7tn648t6lyEMq
Dt99+St2UD4z+puP5U4ORm0GDkRwVp7fLoBrYCXYIlBXc9t+3zxtrTx34/dE41bL
btIKlBVj/SA4JMmLfjG/Sb0fkEQd9NRyLtzLZYDagfHx2fjhSWBFWrRuiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDf2sdWrzMxapipx7JfvVn+J4CwjMB8GA1UdIwQY
MBaAFAibTW96CjOwGAQR7XT4enz+2WUhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0p0TmIzb0tNN0FZQkJIdGRQaDZmUDdaWlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wOTcwMzQtMDk1My00YWI2LTkxYzIt
YzUwMDlhYjFmZGFmLzEvQ0p0TmIzb0tNN0FZQkJIdGRQaDZmUDdaWlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wOTcwMzQtMDk1My00YWI2LTkxYzItYzUwMDlhYjFmZGFm
LzEvQ0p0TmIzb0tNN0FZQkJIdGRQaDZmUDdaWlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGf8hCZoQ
8FgvqqHmYBRy3bUBrniWy5ZLf5OGfmSb1/FZttB7VEvNKC7yvR+J2+eKG1l34RkR
N85EwF0EDIilhHsQhTTPiz9pIWnhoNz77oMnUXbke9Obu8njKizooBMETYtUXd9V
XIIUVGqX/TQxc/yd81MbDFLuSRO4lhyIbPevoX4lzzm4d079NazOhAfRdMK2fNtp
+oPzv28DBlfuXH4upvJOCPB6h537/yCSvXduZJFZi5BuvANqSfwA9luX3ryjGCyh
4feoHAlk4IWF/p++OaBAbiliTrv+R4T9HD+AgjntKZ/tNQdPAbu2pJogcsVGJty2
2WpxW/lAmphRLQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 13:46:25 2026 by rpki-client