Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
File: cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft (raw, json)
Hash identifier: 2zz3kfH/Xf+q2pKQSm/miWKTMgXuiukSmELvDwA+eTI=
Subject key identifier: 4D:BB:7D:EC:9E:51:06:EF:3B:9B:32:17:0C:07:B2:90:F7:34:30:75
Authority key identifier: 70:9A:8E:FA:FA:78:54:01:01:2C:45:90:DA:63:44:0A:34:56:D0:CE
Certificate issuer: /CN=709a8efafa785401012c4590da63440a3456d0ce
Certificate serial: 019D9886424C4A1CD6589DFDA96F930DCC93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
Manifest number: 0679
Signing time: Thu 16 Apr 2026 23:00:28 +0000
Manifest this update: Thu 16 Apr 2026 23:00:28 +0000
Manifest next update: Fri 17 Apr 2026 23:00:28 +0000
Files and hashes: 1: cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl (hash: QYbNqdkH+4urinTmFtlz427CkbFbuZ38VQOV4fWx4r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:42:4c:4a:1c:d6:58:9d:fd:a9:6f:93:0d:cc:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709a8efafa785401012c4590da63440a3456d0ce
Validity
Not Before: Apr 16 23:00:28 2026 GMT
Not After : Apr 17 23:00:28 2026 GMT
Subject: CN=4dbb7dec9e5106ef3b9b32170c07b290f7343075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:fd:0d:db:1c:34:80:b1:30:f0:86:e5:be:
dc:79:e7:26:e9:e2:73:f2:7e:42:98:d9:7c:25:85:
a9:df:40:64:ec:17:2a:46:c3:7c:cd:eb:8e:35:4e:
14:87:3d:63:eb:b8:f2:f7:b9:e0:19:10:ed:ae:6c:
c6:57:e6:9e:85:d5:3c:3e:ff:e8:ff:b8:89:44:14:
66:aa:6e:b0:22:59:c1:5a:4b:81:1a:d5:54:ba:2f:
b6:67:c0:45:45:26:8a:00:2c:16:66:5c:03:ce:ef:
ef:a0:45:34:2d:ad:1c:a6:85:63:84:6d:45:2a:b5:
21:ba:bf:7c:4d:db:a3:d6:1d:f5:1a:ab:04:59:dd:
c2:c3:5a:f9:f1:97:84:83:db:74:81:00:d6:a4:7a:
d3:36:f3:e2:43:f2:b2:c6:75:51:5d:20:4a:a0:41:
17:d6:4d:e3:b5:a9:03:07:ce:95:b5:bd:f0:26:63:
85:94:0f:75:22:92:9c:3c:5e:ec:8f:11:88:e8:df:
74:c3:b6:41:bb:00:f0:dc:6d:94:f7:c3:fb:65:3c:
e2:d8:11:ad:77:30:6e:76:59:e2:1a:a8:c7:29:24:
ab:4d:83:74:7c:0f:1e:fa:a2:df:ed:1b:60:c5:91:
a7:9f:48:bc:95:76:0c:c3:19:b0:42:21:50:93:13:
a9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BB:7D:EC:9E:51:06:EF:3B:9B:32:17:0C:07:B2:90:F7:34:30:75
X509v3 Authority Key Identifier:
keyid:70:9A:8E:FA:FA:78:54:01:01:2C:45:90:DA:63:44:0A:34:56:D0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:75:a9:43:9f:97:f3:37:24:8b:f7:52:fe:18:92:dc:c2:27:
e2:61:a2:2c:d8:45:ee:de:a4:ec:26:b4:bd:0d:4c:ef:ea:6e:
ca:ed:3f:d9:d1:7e:62:8b:86:89:08:f9:44:f1:34:8d:60:a4:
09:ec:28:52:a3:e9:0a:db:99:3b:bc:ce:b3:b9:70:64:b7:f8:
a1:c0:e5:79:f3:a5:81:d3:a4:b5:a2:9f:23:cd:6c:90:0b:05:
fa:37:4b:a9:98:0e:c1:fe:33:82:7b:42:1c:d2:6d:10:8f:26:
f5:f3:50:d7:ff:c2:05:c6:bb:ad:96:b0:e4:e4:7d:8e:f6:ec:
19:6f:b2:62:25:23:e8:bc:d9:f2:19:59:72:35:29:24:15:df:
93:17:e3:25:ee:83:73:3c:41:1e:db:d0:e7:38:97:d6:c0:1c:
38:30:55:0b:b8:68:d2:23:38:8d:25:90:8f:0c:80:f8:73:b5:
04:82:87:39:46:94:62:e1:9a:9b:00:e6:d1:09:48:45:8c:01:
40:86:b0:82:93:e9:3f:c6:94:0a:dd:4d:53:d4:83:3f:72:bd:
b6:b9:dd:9b:60:1f:f0:06:d6:07:a9:dc:9b:03:47:d4:0e:58:
4a:84:80:eb:85:7f:16:30:57:4b:c5:59:02:b1:4f:b1:08:bc:
d8:ae:ed:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:54:44 2026 by rpki-client