Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
File: CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft (raw, json)
Hash identifier: moZAUJJE0iefij/TYH5zkrYUJNkTdciNlBVhgNoIRpg=
Subject key identifier: 86:F8:76:CB:DB:83:9B:C5:4C:A8:1A:EE:CC:E0:D6:0F:F9:FD:2A:3B
Authority key identifier: 08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21
Certificate issuer: /CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
Certificate serial: 019CA97D2EDD38FE26AAB7B66DD69B98C766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
Manifest number: 63
Signing time: Sun 01 Mar 2026 13:01:19 +0000
Manifest this update: Sun 01 Mar 2026 13:01:19 +0000
Manifest next update: Mon 02 Mar 2026 13:01:19 +0000
Files and hashes: 1: CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl (hash: ut6FkJSo8s/sFuuNZjSae2ithUEM1uQ1wFahgq8xEfU=)
2: SE7WHQ_t5xTvIw5RVXqHMUCzyhw.asa (hash: IGvw1+pEk3vTnCru3aJqTEvcp914nnvX2nmQCu0ykb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:2e:dd:38:fe:26:aa:b7:b6:6d:d6:9b:98:c7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
Validity
Not Before: Mar 1 13:01:19 2026 GMT
Not After : Mar 2 13:01:19 2026 GMT
Subject: CN=86f876cbdb839bc54ca81aeecce0d60ff9fd2a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7e:d6:8a:4a:73:89:ac:59:59:51:2c:35:a0:
69:6a:6b:90:5a:29:3a:70:74:b2:83:37:90:5a:c0:
17:d0:b4:e7:9e:ac:0d:5b:01:a7:01:28:bd:10:63:
4c:27:cd:24:30:5f:76:a5:51:b0:25:00:ce:a9:f9:
6c:fb:cb:29:4e:95:03:6c:79:ef:88:88:9b:da:e7:
d9:ab:51:1d:47:17:b9:bd:e1:6f:3d:cd:ca:ef:29:
98:86:15:e4:2b:66:67:0a:07:d2:ed:e5:f7:ff:2e:
22:67:7b:16:18:33:56:23:ad:7d:e1:c4:d9:74:a4:
54:cb:80:bf:a5:62:a9:79:be:70:df:0a:c7:bb:fa:
24:11:16:c7:2c:6a:ed:ee:36:c6:97:84:ac:20:e6:
27:e4:de:08:58:f2:cb:8e:c3:52:c5:fc:a5:cd:81:
9e:46:f8:43:dd:47:c5:21:e8:82:4a:a0:ad:a4:51:
d2:37:26:ef:b6:ae:96:7e:bd:4f:b5:e2:0f:9d:2a:
53:91:13:85:66:ba:33:32:ad:e1:46:3e:6f:3f:67:
f0:c1:77:81:e1:11:f9:28:66:1a:14:ab:57:c5:b3:
b4:65:00:6c:19:e8:7f:07:0c:8e:ca:03:b1:eb:ce:
f3:44:2c:b1:36:8e:4a:f3:de:c7:92:11:22:fe:20:
bd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F8:76:CB:DB:83:9B:C5:4C:A8:1A:EE:CC:E0:D6:0F:F9:FD:2A:3B
X509v3 Authority Key Identifier:
keyid:08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d5:2f:d1:a2:42:58:57:a6:91:76:85:d0:55:14:7b:54:9a:
7b:43:1e:cc:91:39:29:bb:ce:f7:8e:72:45:67:57:7f:39:d2:
69:ca:97:24:1a:9d:12:6f:d7:a6:65:d1:ad:79:06:80:e7:05:
f5:f1:42:4e:48:20:aa:21:83:01:15:eb:18:91:54:83:f0:4c:
ab:50:3b:e5:61:28:c5:dc:d5:77:94:d3:8a:1b:af:de:f7:ac:
09:b8:49:f5:a4:0c:0f:ea:d5:fc:53:b8:aa:3c:73:f5:10:56:
79:34:80:0f:8c:39:7a:f0:ec:07:59:a4:da:00:14:02:18:0b:
7e:67:85:f8:2f:27:1b:0e:96:96:d4:80:19:e4:2c:cc:89:40:
07:69:c6:f8:a2:69:4f:4f:86:65:cd:a4:fc:9c:20:fa:70:40:
6d:fd:0e:ae:01:db:46:e2:43:08:a1:58:68:b6:0b:39:c6:1d:
12:c1:d8:68:7c:06:33:b9:8e:49:78:ca:f1:bd:e6:86:65:ee:
e6:d3:68:94:7c:19:8a:64:8b:5a:8d:94:d5:7b:e8:27:7f:5f:
b3:1f:53:1b:28:a9:9f:25:06:4e:75:18:f1:c8:b9:8c:2a:10:
34:0c:ec:d4:56:bb:29:d1:b6:8b:28:d3:87:d5:72:93:cc:dd:
4b:85:25:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:05 2026 by rpki-client