Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
File: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft (raw, json)
Hash identifier: l/AWPSk9eveTmhPR+RcNuuYbCWI9/X16OCyjTZ450WE=
Subject key identifier: B5:60:CD:6B:BE:35:79:F7:43:73:E5:D5:91:F4:48:51:5B:18:4C:CE
Authority key identifier: 0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
Certificate issuer: /CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Certificate serial: 01A0C5C4DF081002F5F72AA7C129C96D66F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
Manifest number: 07DC
Signing time: Mon 21 Sep 2026 21:00:08 +0000
Manifest this update: Mon 21 Sep 2026 21:00:08 +0000
Manifest next update: Tue 22 Sep 2026 21:00:08 +0000
Files and hashes: 1: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl (hash: YaU12Z+B5P0qeiHBju3BrDyGP+rf5JNWBgcN4kBybGk=)
2: HhyQ1xbfi1ZT4qXLErneHVnMZKQ.roa (hash: LTQHQ2QemVphT2OwaYY6pIObkofdkSf8QmySEt23OP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c4:df:08:10:02:f5:f7:2a:a7:c1:29:c9:6d:66:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Validity
Not Before: Sep 21 21:00:08 2026 GMT
Not After : Sep 22 21:00:08 2026 GMT
Subject: CN=b560cd6bbe3579f74373e5d591f448515b184cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a5:5e:85:92:62:a9:51:18:30:7c:88:09:13:
4e:7f:90:4c:29:98:3a:1b:be:ff:b5:87:68:80:46:
f3:6d:ed:d5:90:7f:db:86:fa:72:62:25:55:d9:e5:
d5:b5:49:9a:d4:54:6c:29:0f:9c:10:07:41:4c:0a:
49:73:d3:3c:aa:61:36:5a:da:06:9e:26:0a:19:69:
f8:43:d1:e1:fb:4f:28:18:39:ed:b7:b3:0f:51:11:
75:af:67:6b:5b:80:94:d6:af:64:63:ff:fd:a7:43:
5a:6b:1a:e6:6a:25:f8:0f:96:40:2f:ec:6a:c1:32:
1c:28:4f:66:e5:f7:58:70:fd:9f:b5:84:ac:af:f9:
92:20:34:49:e5:51:b6:f7:88:9a:0d:be:9f:2c:8d:
36:50:67:34:39:2d:fa:70:5b:f0:fa:de:41:db:d6:
e4:a8:3f:2e:6e:d3:fb:c6:5a:f2:a5:f9:13:c4:1c:
b8:e0:41:82:04:5a:d0:86:3c:47:64:17:f0:37:2d:
3e:ac:12:0a:3a:72:94:9a:9d:41:dd:bb:67:d6:d8:
10:52:0b:a3:5c:56:cc:0e:6e:8d:ce:43:d9:21:9e:
15:6c:d7:1a:05:3c:38:bc:7a:e4:12:ea:ce:f0:c9:
28:bc:71:a4:61:96:70:15:c3:fb:a1:0a:da:2b:5c:
c3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:60:CD:6B:BE:35:79:F7:43:73:E5:D5:91:F4:48:51:5B:18:4C:CE
X509v3 Authority Key Identifier:
keyid:0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:8c:5c:66:8d:21:7b:49:05:07:fb:e6:31:ac:1c:59:7c:54:
cf:cd:d4:85:30:2c:49:8e:42:2a:47:22:28:59:fd:20:4b:9a:
b4:ec:60:7d:c8:24:d5:7b:ee:6a:c4:2e:9e:e9:d5:b3:0b:4c:
73:a4:41:91:e5:2e:d4:f6:5a:24:68:95:aa:1b:24:03:93:86:
a6:4c:cb:4b:6f:f6:fb:35:61:1c:1c:bf:84:7b:01:e9:8e:b5:
55:c0:8b:f8:da:94:10:11:f6:65:be:f1:97:e3:e8:0f:6c:9f:
d1:0b:cd:18:db:78:58:bf:0a:b4:d5:3e:50:e0:6a:a0:3c:9a:
75:00:fa:5b:28:d3:a1:2d:81:b3:6c:65:63:5c:ea:a0:22:3b:
97:ce:c8:1b:f3:3b:c2:2b:54:b0:1f:ff:4e:ab:9e:67:cd:5f:
3f:91:e2:68:eb:eb:10:f9:46:e3:14:03:d9:54:dc:4e:68:d1:
45:a2:40:1c:fd:3e:60:8d:2e:11:7e:cb:f7:36:f3:84:be:5b:
77:ec:5e:c1:a5:78:a6:21:1a:10:24:dd:de:f1:57:66:d2:7d:
57:71:7e:18:aa:b6:e5:1a:71:21:fd:08:71:13:f3:10:af:a6:
c8:17:bb:5e:91:fb:54:ae:a1:3b:db:f9:84:33:22:28:7f:76:
09:f3:fe:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:22:41 2026 by rpki-client